Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
File:                     Pc6p140_H8L7NcKeWD2ytrYqvDk.mft (raw, json)
Hash identifier:          9CquTig9zF/vUZORy0ZwVxnMLvaJu4wGiX7XyaNx6PQ=
Subject key identifier:   C8:12:A2:FE:55:DE:F5:9E:E3:37:26:4C:29:7B:48:C8:A3:80:52:F8
Authority key identifier: 3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39
Certificate issuer:       /CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
Certificate serial:       019894B7C82017F6CBA213D2845D30270EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
Manifest number:          1009
Signing time:             Sun 10 Aug 2025 16:02:08 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:08 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:08 +0000
Files and hashes:         1: Pc6p140_H8L7NcKeWD2ytrYqvDk.crl (hash: jMQJw//ln6DY/LuyAi+1jFzXJk5/fb33Xmg/JJOtBJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b7:c8:20:17:f6:cb:a2:13:d2:84:5d:30:27:0e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
        Validity
            Not Before: Aug 10 16:02:08 2025 GMT
            Not After : Aug 11 16:02:08 2025 GMT
        Subject: CN=c812a2fe55def59ee337264c297b48c8a38052f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:1c:98:7a:16:9a:9a:26:f8:80:67:a7:7b:
                    68:3a:29:b5:1a:34:80:75:a5:de:fc:47:1b:be:b7:
                    2c:a8:c8:dc:06:36:24:ca:b0:3a:64:71:d8:86:f0:
                    7f:3e:3d:11:f2:8d:6e:06:3b:6a:2e:32:f2:3c:a8:
                    f0:53:8e:8e:02:51:5a:47:e1:59:16:a3:30:ef:47:
                    60:11:5d:b4:6c:44:31:bf:ee:12:72:09:aa:ee:60:
                    f8:0a:a4:08:0b:63:f8:3d:c9:f8:7a:3f:e0:84:70:
                    6d:28:2e:1d:46:71:a8:c4:5b:23:93:5e:d3:50:48:
                    d8:77:a0:13:34:ff:94:35:d5:39:79:04:ec:dc:dc:
                    f4:6f:9c:60:2a:47:be:b1:2e:53:c4:72:a0:5e:f6:
                    25:2d:7d:4c:a5:6d:09:60:0d:3f:c7:b0:0a:7a:72:
                    77:fd:24:f5:40:97:c6:6c:84:00:30:32:c5:d6:fd:
                    7e:29:83:df:da:49:cb:12:f9:d4:0f:a2:7d:cd:08:
                    ed:7f:df:a6:6a:0e:c7:4b:26:11:01:9a:cb:d1:d3:
                    2c:63:32:aa:df:55:69:d6:93:70:d4:05:d4:ea:0f:
                    63:a7:0b:c7:f4:e4:9d:fb:a2:d3:75:95:43:31:8b:
                    e9:4e:e5:dd:1a:91:ee:d2:78:1b:0a:98:c1:d1:04:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:A2:FE:55:DE:F5:9E:E3:37:26:4C:29:7B:48:C8:A3:80:52:F8
            X509v3 Authority Key Identifier:
                keyid:3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:0d:ad:7a:e0:87:50:64:9c:30:12:35:ef:99:04:7e:97:
         da:87:c3:aa:50:30:be:ce:d2:ba:ac:9c:26:35:20:e0:1d:7f:
         4b:21:0b:7e:62:a7:1d:15:9b:7b:8a:04:f8:48:83:17:f9:5b:
         b7:39:ef:a9:ad:d3:c1:21:f7:95:5c:80:7c:0d:fb:d9:3f:88:
         0e:7b:a1:48:f4:45:a8:3b:3d:ee:3b:bb:6e:61:ab:8f:99:10:
         e5:e3:be:1b:6f:92:12:af:9b:aa:08:65:08:57:d2:3f:cf:d5:
         a7:0d:9f:ea:4a:49:33:00:55:0f:0c:60:fc:13:3d:ea:f8:f1:
         ed:e6:c4:c5:70:07:6e:35:a2:08:5c:6b:f5:46:e6:d5:e7:15:
         f2:fb:74:32:d4:98:b7:8c:18:c5:fe:8c:a0:d4:fd:41:42:fb:
         c9:fc:42:72:8c:85:8c:54:41:0e:8e:d9:c0:af:05:17:58:8a:
         66:b4:27:57:3d:96:f5:91:39:59:7b:cc:c5:e7:c7:8b:f6:46:
         95:df:ec:e6:d9:0c:b6:95:ec:d4:a9:b0:a7:d5:8b:70:6d:ac:
         6c:59:60:ea:67:34:25:8a:11:78:98:e4:43:5d:c8:33:12:ff:
         47:31:25:83:2d:a9:0d:41:6b:81:8f:da:2f:0d:af:f0:46:bc:
         30:a0:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:15 2025 by rpki-client