Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
File:                     Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json)
Hash identifier:          wIHp9aZnnL+18ddR9CauFSwTh4hKvc5mkkKwCVl8tX4=
Subject key identifier:   6F:7B:07:23:D8:5B:54:D2:BD:06:CB:3E:3E:C4:64:93:3D:40:A2:3D
Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
Certificate issuer:       /CN=3edd1cf4370085b6d25714091436f6686028d558
Certificate serial:       019769299F6AE4D1AD9025B3C11FF0D66526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
Manifest number:          41
Signing time:             Fri 13 Jun 2025 12:00:24 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:24 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:24 +0000
Files and hashes:         1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: 633ytDSu4uiz9QoksO6kEZYYbQCRTR+vbaML9BYX5to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:9f:6a:e4:d1:ad:90:25:b3:c1:1f:f0:d6:65:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558
        Validity
            Not Before: Jun 13 12:00:24 2025 GMT
            Not After : Jun 14 12:00:24 2025 GMT
        Subject: CN=6f7b0723d85b54d2bd06cb3e3ec464933d40a23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:75:76:48:4b:23:0f:67:a3:a3:2d:4f:79:
                    91:da:c9:66:36:e4:6c:86:71:73:24:ee:3e:05:62:
                    24:ba:54:66:48:15:64:3e:b3:ad:65:4d:29:1e:4f:
                    55:98:b8:e5:d0:ad:8e:73:29:c5:4d:dd:91:4f:41:
                    47:96:6c:a3:75:96:dd:4a:d6:d0:6c:ef:80:f7:51:
                    d5:76:9b:ba:9a:c6:20:5d:cf:01:88:46:0f:58:45:
                    bf:2a:11:1e:c9:4f:96:04:a4:ed:6b:40:00:fc:64:
                    2a:51:ba:30:16:58:70:9e:e4:79:51:10:ae:ff:37:
                    ca:2d:e1:15:48:48:6c:2c:fe:93:8f:5b:fb:5b:61:
                    9e:24:c9:19:16:65:dd:af:a0:9e:53:d6:e8:01:23:
                    1a:17:9d:ec:3a:8c:3e:07:01:17:f1:8e:a8:50:a1:
                    52:fa:28:ac:bc:ca:70:b1:10:3b:71:f5:ab:77:e1:
                    ee:6f:bd:06:cb:b6:79:30:8d:6c:b1:94:e0:0d:cf:
                    08:02:ad:58:d9:fe:c8:b1:df:be:d9:de:60:b4:50:
                    f5:f3:02:63:de:be:0e:cf:26:08:af:3d:e0:d7:53:
                    2f:01:c9:e7:be:e2:69:8f:a7:21:ba:23:8e:1e:3c:
                    51:c8:95:17:7d:14:c4:0f:ac:7a:fb:4a:9f:4d:28:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:07:23:D8:5B:54:D2:BD:06:CB:3E:3E:C4:64:93:3D:40:A2:3D
            X509v3 Authority Key Identifier:
                keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:c8:3a:5d:d1:95:8b:0b:44:2d:57:67:76:d9:30:29:10:
         f2:32:9f:78:cb:f0:1b:72:d5:99:33:62:27:3e:3e:c6:76:6a:
         11:8e:46:12:f5:b4:cf:da:8e:6f:f2:44:e7:00:6f:67:10:0b:
         07:9f:57:b1:4b:89:8e:d8:88:10:22:6c:1c:f6:4b:c7:c7:78:
         cc:ef:8c:ea:fa:54:6b:6c:47:fe:35:2a:3a:99:ad:3f:ea:59:
         a8:cd:8a:2a:54:18:fa:66:63:be:1f:1c:cb:01:8e:d9:45:02:
         e0:e9:2d:e2:d8:b5:2d:03:a4:2b:10:31:0e:93:c0:1d:97:27:
         6b:6e:11:e4:54:1e:5d:c3:63:1a:af:17:6c:7b:14:ca:91:b6:
         a4:8a:ce:54:1b:da:6b:96:6f:99:69:a7:32:ac:51:3f:21:16:
         46:ff:b6:f6:fa:f6:69:94:58:90:a9:b3:b9:ea:25:18:88:92:
         2a:57:f7:fd:52:30:2c:da:13:45:7c:43:b7:eb:04:10:94:9a:
         f2:6f:45:87:47:b7:88:78:4e:de:db:d7:80:e6:58:9e:b6:1f:
         5b:f1:0a:83:d5:58:8d:87:80:1d:aa:63:b3:e2:66:b1:f3:bd:
         e6:2f:87:3e:12:e5:9e:e4:1d:2e:dd:89:c3:78:05:77:8b:d1:
         24:ef:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:54 2025 by rpki-client