Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File:                     Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier:          xSNJv6iKRe294y4KgKyBe8Y/KBmv5lKfONQOyxutbck=
Subject key identifier:   AE:3A:E3:E1:E1:6C:3E:9E:62:44:FF:BC:A1:EB:34:8E:7A:B2:E5:BE
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer:       /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial:       019778D3CFA0CB5E7E278DB125506F49E2D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number:          11BC
Signing time:             Mon 16 Jun 2025 13:00:36 +0000
Manifest this update:     Mon 16 Jun 2025 13:00:36 +0000
Manifest next update:     Tue 17 Jun 2025 13:00:36 +0000
Files and hashes:         1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: vqtZOZUhx+J0etFquxxgWn+ZNJPiT2q6Cv9o509YmEk=)
                          2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d3:cf:a0:cb:5e:7e:27:8d:b1:25:50:6f:49:e2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
        Validity
            Not Before: Jun 16 13:00:36 2025 GMT
            Not After : Jun 17 13:00:36 2025 GMT
        Subject: CN=ae3ae3e1e16c3e9e6244ffbca1eb348e7ab2e5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:16:25:41:b3:c4:3b:75:8f:76:0a:15:2e:17:
                    4b:a8:4b:3c:77:94:d5:de:80:71:ba:a8:a7:3a:39:
                    16:6a:cb:06:34:04:8b:54:7f:5f:80:92:b6:8a:d6:
                    d7:3b:f5:c9:6a:9e:54:88:2c:d6:e4:82:8a:19:7c:
                    2f:47:0b:40:77:19:12:97:c4:b9:c2:6b:c1:d0:d0:
                    70:26:65:fa:9b:08:94:a4:b1:39:bb:99:fc:fb:dc:
                    76:13:bc:03:7e:aa:fd:00:e0:c3:ff:3b:69:89:a3:
                    87:c3:dd:91:fd:11:89:03:65:30:4d:c0:47:d7:b6:
                    99:7b:8e:44:46:bf:cf:44:e6:f0:f6:7a:7b:83:27:
                    9e:b1:0e:3b:dc:e1:1c:13:ed:f0:51:9f:74:2a:c2:
                    6e:89:fb:67:80:14:6e:27:b7:75:9a:4e:89:f1:36:
                    79:c7:ee:74:12:57:9a:6d:c0:ce:ea:60:02:7d:f4:
                    c7:db:cd:40:75:04:d1:9f:d1:ce:ae:cf:4a:af:5c:
                    08:0c:eb:5d:e3:50:0f:59:f0:9f:79:ae:87:2a:dd:
                    9a:12:29:1e:35:68:4d:1b:26:14:5f:5e:0c:f7:6f:
                    c3:8a:98:88:f4:34:93:2c:27:be:e9:8c:cf:4e:7c:
                    5e:fc:a1:c2:3c:d8:37:46:3e:3e:fa:a4:82:91:34:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:E3:E1:E1:6C:3E:9E:62:44:FF:BC:A1:EB:34:8E:7A:B2:E5:BE
            X509v3 Authority Key Identifier:
                keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:35:07:b6:77:27:f8:c7:9b:dd:dd:a5:ea:94:a8:9c:c0:0e:
         84:e7:bc:53:d7:90:64:a7:30:06:4b:4a:ac:c3:cd:57:6b:f3:
         bf:ae:b8:80:a7:11:9f:08:91:0a:56:44:91:49:9e:58:36:eb:
         8d:15:37:61:6d:19:64:cf:e6:3a:d6:aa:a3:41:88:af:66:c5:
         40:1f:73:0f:d0:93:b3:83:ae:81:3d:4d:0a:1a:30:b7:58:04:
         e6:d4:f3:13:10:d3:21:38:12:00:3a:81:7a:fc:c5:bc:80:9f:
         80:7e:85:65:2a:54:ca:00:c2:4a:4d:78:f4:86:c7:7a:2e:92:
         34:0e:70:1b:af:42:23:d7:d1:a0:ab:cb:5c:19:c2:07:8d:f0:
         c6:95:4b:1d:e2:90:2c:f9:21:97:7b:2f:97:c2:5d:13:98:d6:
         ed:11:49:fd:2d:a0:55:1b:f6:2d:8a:43:2d:c2:ab:c4:44:04:
         e7:c3:2e:07:e4:f7:40:4d:69:57:83:e3:24:24:36:00:a8:d0:
         60:f4:fd:5d:24:f3:b3:0c:71:60:a1:e7:c0:dd:56:0b:85:ed:
         43:0a:9e:7d:fc:4d:67:6e:1d:5d:7c:58:aa:46:3a:71:0e:18:
         2e:3c:8b:00:fe:50:22:53:e9:0c:cb:22:0b:df:84:8b:bb:4c:
         af:d6:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:20:14 2025 by rpki-client