Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
File:                     Pc6p140_H8L7NcKeWD2ytrYqvDk.mft (raw, json)
Hash identifier:          DwMstpOinxQdONok34sSKufUcbqK2pQasrI8cniCsz4=
Subject key identifier:   B4:0D:1B:8C:8F:87:36:A2:78:83:59:8B:EB:5A:F3:4B:28:9A:E0:B2
Authority key identifier: 3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39
Certificate issuer:       /CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
Certificate serial:       019776E5D0EA5199F63D882AAFEAB66C8F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
Manifest number:          0F75
Signing time:             Mon 16 Jun 2025 04:01:02 +0000
Manifest this update:     Mon 16 Jun 2025 04:01:02 +0000
Manifest next update:     Tue 17 Jun 2025 04:01:02 +0000
Files and hashes:         1: Pc6p140_H8L7NcKeWD2ytrYqvDk.crl (hash: 62qX8FqK1LyeU31v8OAQV7tcKfcPlizII/cBi+75FPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:d0:ea:51:99:f6:3d:88:2a:af:ea:b6:6c:8f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
        Validity
            Not Before: Jun 16 04:01:02 2025 GMT
            Not After : Jun 17 04:01:02 2025 GMT
        Subject: CN=b40d1b8c8f8736a27883598beb5af34b289ae0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:83:8e:6d:9d:82:88:b7:a7:cd:c8:7d:57:
                    45:8f:c9:e6:f7:71:9d:a9:2b:e0:d2:06:eb:96:e5:
                    38:e6:6b:44:b9:23:61:9a:c1:26:23:bb:8e:be:fe:
                    8d:f0:aa:d9:3e:bb:d8:3b:c4:18:84:b8:91:a0:80:
                    b5:0d:5c:2a:db:b9:99:01:14:5f:e3:66:22:fb:42:
                    a4:eb:80:e2:6d:b7:76:ed:2d:cc:5a:45:7c:39:f6:
                    c0:e5:89:ff:71:a1:71:3b:6f:23:18:f7:5f:74:3f:
                    7a:51:b4:7e:5b:8b:45:a7:d6:31:04:3b:b2:c5:f1:
                    c7:94:a5:59:8c:54:7f:25:e7:bf:66:a8:b3:45:e5:
                    ff:92:14:70:ad:63:a5:1d:27:5d:57:67:b6:3a:67:
                    15:02:63:0c:cc:c8:b3:39:21:2b:84:09:aa:94:74:
                    fb:9b:51:c8:95:b8:85:fa:b7:e1:ac:a6:e5:71:a9:
                    cc:31:c8:d0:29:af:fd:64:f1:d0:79:d3:e9:a3:d1:
                    15:5c:3c:16:21:7e:f5:91:19:b2:b0:1c:fc:aa:48:
                    36:35:1c:48:a7:8d:a6:c4:1b:62:d5:5d:b8:3f:99:
                    0b:27:3a:b8:21:96:c3:8f:67:d2:11:d4:9b:63:33:
                    f7:f5:8e:74:4b:e9:b2:ac:c3:90:4c:4e:0b:e8:cd:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0D:1B:8C:8F:87:36:A2:78:83:59:8B:EB:5A:F3:4B:28:9A:E0:B2
            X509v3 Authority Key Identifier:
                keyid:3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:cf:b8:58:94:ac:5a:6a:5f:ce:18:af:28:5b:59:0e:91:
         65:b8:3e:c2:ed:3d:9a:15:af:62:d4:d9:67:4c:37:ae:b8:75:
         ad:b2:3b:99:f8:26:ec:91:28:b2:85:6f:c1:4e:87:37:1a:86:
         2c:54:e0:01:fd:ca:bf:a4:0a:8f:bc:82:87:6e:07:fd:ca:b9:
         d8:27:b8:eb:18:85:60:c4:b9:9d:4e:f6:b4:c8:b7:59:74:14:
         a8:de:79:5d:21:2f:bc:a4:d4:dd:78:8e:7c:33:51:c2:e2:22:
         29:89:5f:a3:e3:bb:02:b2:83:68:9b:a2:6e:07:ff:9f:f1:dc:
         48:45:40:26:c0:5b:81:b2:5c:a9:d4:7b:83:46:c5:79:fa:67:
         12:88:21:73:ec:4f:88:a0:dc:81:24:f4:71:05:57:11:74:a1:
         30:ef:78:ad:4e:62:30:d1:f3:f6:a4:6f:84:4e:58:2f:ae:89:
         c2:03:c7:d0:81:35:18:98:33:a5:52:ca:a5:b2:c5:b6:99:9b:
         de:04:51:39:67:8a:45:44:57:55:cd:3b:9e:53:4e:48:65:e5:
         cb:3a:7e:29:49:eb:b3:11:8d:71:e9:da:4a:33:c9:5a:e9:a3:
         a2:ed:83:d6:25:97:ad:b8:a0:4a:99:8b:86:d8:bb:0b:05:e1:
         a7:21:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:51:08 2025 by rpki-client