Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File:                     pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier:          c/7z7BbRbUtkt3xPJeLPpVO9IJW797mNgUDUQpLNmrY=
Subject key identifier:   2D:51:17:63:C5:DE:EB:7E:3F:58:12:0B:35:95:5C:B3:31:28:53:A6
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer:       /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial:       0197729B00DD61002AC2B90B50FC6AA6CE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number:          05E1
Signing time:             Sun 15 Jun 2025 08:00:50 +0000
Manifest this update:     Sun 15 Jun 2025 08:00:50 +0000
Manifest next update:     Mon 16 Jun 2025 08:00:50 +0000
Files and hashes:         1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=)
                          2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: 7g+XnnI41M/RGx/Hq9HMSZ4Z1t+Qin+bNUREF1/YZdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:9b:00:dd:61:00:2a:c2:b9:0b:50:fc:6a:a6:ce:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
        Validity
            Not Before: Jun 15 08:00:50 2025 GMT
            Not After : Jun 16 08:00:50 2025 GMT
        Subject: CN=2d511763c5deeb7e3f58120b35955cb3312853a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:59:e2:e2:f4:9c:9a:12:34:1d:f3:5a:48:
                    11:2d:bd:01:bc:a2:c6:3c:ea:1a:ed:c9:e4:ad:4f:
                    b7:76:af:db:d0:5c:73:1f:18:c6:83:60:85:9e:b3:
                    f2:87:21:b4:76:c5:bf:37:29:42:32:df:ed:73:c6:
                    94:eb:81:ce:27:27:9b:bd:87:e5:e4:9f:63:de:da:
                    df:bf:d2:65:61:52:74:f6:b1:d9:02:5f:55:16:45:
                    ea:53:55:96:44:f3:58:95:7d:b6:9d:e2:40:6a:dc:
                    f7:c0:7a:ab:44:24:0a:4d:c0:49:e6:b2:95:73:ff:
                    39:77:8d:4b:83:ee:65:74:ac:ba:9d:57:66:a9:63:
                    dc:6f:bf:2b:6e:b7:26:06:18:2c:1f:e1:dc:f0:19:
                    ca:2a:d8:db:c3:a1:0d:9f:2f:14:8c:92:81:1b:96:
                    e3:2b:93:8a:d0:82:fb:e3:8b:b7:ec:5b:0e:a1:a8:
                    16:bb:9d:e2:d7:0a:7b:e5:3a:b8:3e:c1:e0:f9:c4:
                    c7:46:47:bc:32:ae:a1:ef:fa:51:00:56:fc:d5:24:
                    db:c2:cc:6b:4b:96:15:2f:2e:fa:88:ae:85:fa:39:
                    5f:01:21:9d:60:96:5a:cf:e0:f8:61:87:54:7c:74:
                    6e:a5:3a:bb:26:5a:9f:b5:38:22:a4:ce:ca:b7:c8:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:51:17:63:C5:DE:EB:7E:3F:58:12:0B:35:95:5C:B3:31:28:53:A6
            X509v3 Authority Key Identifier:
                keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:72:6c:44:3e:41:d7:da:5d:ce:dd:c7:c5:e3:61:13:77:52:
         06:71:38:a2:b4:e5:33:a8:1c:9d:8d:50:41:45:99:ea:c0:5b:
         fa:17:fa:fe:02:8c:9a:e4:75:0a:89:1a:fe:aa:8b:de:26:a6:
         b4:2b:5e:e2:cb:79:ad:e2:8d:a9:b8:b5:91:c0:f1:17:ca:da:
         e3:e5:e3:b5:95:cb:2c:3c:be:f4:c9:e2:a6:ea:b6:8f:83:31:
         45:ef:f5:29:e6:f8:5b:00:c3:7a:73:49:0a:5f:f4:79:2b:0b:
         5b:a6:ac:55:7a:54:cd:41:f5:0d:2f:6f:64:eb:b4:4c:2b:0b:
         2f:35:0d:07:27:7e:fe:b0:bf:1f:5a:e0:a4:3f:25:cf:f9:e2:
         f8:3d:90:e0:59:7b:05:ce:5a:4d:ae:4f:c8:32:32:22:2c:2c:
         e5:1b:73:be:84:2e:34:1b:51:1a:f2:83:7b:65:42:1b:86:ae:
         aa:60:88:54:73:5d:ab:b2:a2:da:50:d7:69:d6:de:09:4c:dd:
         1e:3a:e1:66:96:bd:b6:56:08:f1:ab:f0:29:79:39:37:01:1b:
         f4:b5:08:e7:6f:28:db:fb:45:0b:69:3f:d5:9f:d9:c0:0c:bc:
         1b:92:4b:47:8a:aa:31:ed:b1:8b:af:9e:b0:ab:d8:66:18:af:
         1d:e4:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:45:05 2025 by rpki-client