Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File:                     PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier:          aJoun/c6NacvDAqM806aS0TEpCZRRBV4ulf1o00fDfw=
Subject key identifier:   09:81:A5:FC:C0:32:6D:B7:19:FE:A8:E5:B5:D8:08:F1:8C:36:5C:4E
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer:       /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial:       0197699782309ECDBD2305EC6C55BDC5B71B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number:          0CFE
Signing time:             Fri 13 Jun 2025 14:00:26 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:26 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:26 +0000
Files and hashes:         1: FYDxNKC7eVGhTXJyh7DYdQpF13Q.roa (hash: QGlq0akFOdxYp0jPfxez742IAGFVAdJ6BpKN9aAo6FU=)
                          2: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: 0GlKLMOa4eCxQyrmEB4vFjg8mnLNJtxUTn62aVbX1nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:82:30:9e:cd:bd:23:05:ec:6c:55:bd:c5:b7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
        Validity
            Not Before: Jun 13 14:00:26 2025 GMT
            Not After : Jun 14 14:00:26 2025 GMT
        Subject: CN=0981a5fcc0326db719fea8e5b5d808f18c365c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:5f:9c:e6:4d:e6:92:6a:ba:0b:4b:d3:4e:
                    4e:a0:4b:38:39:ea:2b:02:84:1b:fa:d9:c5:08:5b:
                    e2:6f:7a:67:43:34:ba:0c:b5:4c:d5:92:84:87:75:
                    40:e5:1f:b0:60:47:2e:54:cc:3d:2b:3a:d5:4c:2f:
                    93:01:fe:30:d5:1f:a5:91:a4:c5:d5:64:92:b6:42:
                    75:03:f6:52:7f:b4:e4:a9:da:d6:37:89:eb:f4:05:
                    d8:02:e4:b8:4f:c6:48:bb:d4:18:ea:a2:8b:48:e0:
                    76:c8:76:be:46:aa:48:11:97:82:73:f6:85:47:02:
                    70:c5:b0:8d:89:45:4f:44:63:47:ad:ce:54:40:14:
                    ff:59:d2:ae:f9:26:f7:d8:b3:ed:dd:a0:d9:a7:bd:
                    f6:22:d7:6f:86:9d:ca:83:24:bd:8e:51:5a:af:d5:
                    5c:dd:53:c1:2f:1d:92:45:82:50:42:a9:0d:f8:80:
                    c3:2a:7d:76:9f:cc:06:89:2e:e0:85:c1:6d:6f:a7:
                    18:e9:0c:82:85:3f:d4:67:16:fd:0d:82:82:15:12:
                    35:e5:c5:8a:8c:ce:dd:c0:cf:5d:be:26:84:67:9d:
                    21:f9:d2:b6:22:d2:fc:d1:9d:29:a7:ba:ca:f1:21:
                    51:1b:1a:df:54:00:80:c1:92:84:0f:7d:d9:bb:92:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:A5:FC:C0:32:6D:B7:19:FE:A8:E5:B5:D8:08:F1:8C:36:5C:4E
            X509v3 Authority Key Identifier:
                keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:00:9f:92:a8:8c:77:3c:87:0f:78:4d:ec:a0:f8:10:ad:
         08:a5:ff:fe:c6:23:ce:be:6a:ad:2e:af:58:28:b1:82:15:2e:
         e2:47:26:1f:cf:ef:52:1a:df:08:fa:be:28:1f:57:39:f7:54:
         ef:68:93:15:19:4b:07:ff:b7:84:18:4b:dc:20:02:6f:0e:7f:
         0c:cb:90:17:b1:03:de:d2:84:ab:6e:12:5f:3a:e0:59:8f:c1:
         ed:a5:5a:79:db:7d:30:98:62:d7:c8:a6:75:1f:46:78:9b:33:
         50:41:ab:2b:7e:6a:29:2f:d0:64:20:22:e3:85:ce:16:f2:3b:
         30:94:71:53:c5:2e:ad:b2:54:6e:25:45:17:a9:41:2a:34:0f:
         d1:b3:3c:b5:af:f8:ec:63:80:fc:dd:21:9f:f2:01:6a:26:b6:
         14:d1:d4:a2:fb:a5:6f:28:6d:65:16:50:33:8c:fa:a7:51:0b:
         40:8f:f9:b8:2c:b5:20:e4:18:fe:17:6f:c9:39:0a:5e:ee:9a:
         5d:aa:03:af:42:06:0b:de:d8:aa:dc:66:9e:c2:96:f4:e2:0a:
         e1:5d:fe:23:0b:6d:4f:18:08:b6:54:06:ef:26:62:1c:43:06:
         73:95:ca:ec:75:90:a8:ef:db:42:66:be:cd:fa:f2:1b:7b:3a:
         f3:03:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:32 2025 by rpki-client