Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
File:                     Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json)
Hash identifier:          SBEJpBqrwbMZCA3f0YtEKb6g1cjL9p0Neb8H71g81N8=
Subject key identifier:   D9:DE:E1:70:9F:91:A8:AB:AB:2B:CD:27:EA:29:23:DC:3C:80:C3:3F
Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
Certificate issuer:       /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Certificate serial:       0197820DC1A9F0708064D4527350A073530B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
Manifest number:          072C
Signing time:             Wed 18 Jun 2025 08:00:28 +0000
Manifest this update:     Wed 18 Jun 2025 08:00:28 +0000
Manifest next update:     Thu 19 Jun 2025 08:00:28 +0000
Files and hashes:         1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: 5CJTmQXy3fKui9wxFirZfdhZno2P5VKW2gD0bJvkXjM=)
                          2: nV3wzH_1I5VE4qLJ5nCrt9MPHjQ.roa (hash: db3hfBEW1jL4gbyVu0D2s50T0rgPqR4B0mvJEYFg7lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:0d:c1:a9:f0:70:80:64:d4:52:73:50:a0:73:53:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
        Validity
            Not Before: Jun 18 08:00:28 2025 GMT
            Not After : Jun 19 08:00:28 2025 GMT
        Subject: CN=d9dee1709f91a8abab2bcd27ea2923dc3c80c33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:c6:4d:94:a1:ea:7b:36:46:61:4a:cf:49:
                    30:e4:ad:86:1a:f2:86:a2:07:a2:2b:3c:c0:fb:f3:
                    a5:ef:42:50:dd:95:98:20:6d:46:f6:2f:75:2e:82:
                    86:30:25:18:4e:72:cf:2f:a1:c0:fe:1d:10:56:dc:
                    ac:f1:c3:cb:c8:4d:c5:d9:4e:54:60:d7:6c:16:5f:
                    9e:cd:47:de:fb:f2:63:8f:e5:a1:df:43:7b:e0:b8:
                    bf:e9:35:21:8e:90:da:23:5d:ba:2b:65:e2:af:e9:
                    43:25:b7:2f:de:63:b3:5c:bc:c1:15:d2:b2:73:9c:
                    cc:ed:1b:6e:0b:08:44:13:ae:a5:57:4d:00:ff:62:
                    69:2a:ac:75:0e:23:1e:07:a7:5e:0d:2f:5b:84:29:
                    3e:63:f0:7a:00:00:f4:74:61:c7:68:9a:6c:d3:92:
                    6b:a6:be:4c:3f:32:0d:b3:28:f0:2d:f5:9f:5e:93:
                    7e:2e:1d:5e:40:35:4c:59:d7:ef:f4:3d:e1:f2:3e:
                    ea:0a:0d:7b:7f:a5:51:0f:f4:6b:2c:9a:ca:c7:cf:
                    95:2d:91:c4:e7:ee:bb:cd:72:36:1f:2b:8b:82:b9:
                    7f:a6:5b:fb:c5:4e:d6:3c:e1:85:52:08:02:4e:ce:
                    e5:e3:d8:8d:6a:27:76:06:ea:2b:4e:5b:67:7e:30:
                    09:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DE:E1:70:9F:91:A8:AB:AB:2B:CD:27:EA:29:23:DC:3C:80:C3:3F
            X509v3 Authority Key Identifier:
                keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:78:5a:4d:fd:a9:77:55:c7:aa:c3:a0:89:a7:15:32:36:
         5e:ad:4f:a2:e2:22:12:04:29:08:06:e5:fd:17:56:38:da:e9:
         25:0b:99:2a:b3:af:40:1d:53:bc:03:1f:3b:4b:07:8a:b1:4e:
         1b:d4:83:b8:bc:4e:8f:7f:e1:8d:5c:93:86:5b:5d:0e:11:cd:
         bd:7d:0e:f2:fc:e8:27:ca:4f:20:b0:51:31:3c:54:63:5a:e2:
         4d:a3:dc:4d:dd:ff:af:1e:f4:4f:61:a8:80:dd:94:5e:e1:60:
         5a:37:be:7a:c0:34:55:70:07:3b:34:3a:c8:fd:00:db:e9:26:
         95:05:6c:a6:f0:bd:d3:73:01:07:81:d5:bb:52:d4:21:e5:e8:
         c3:30:52:c3:4e:9a:7a:be:e7:86:5d:fe:f7:b3:cf:b8:5f:4a:
         a5:e5:31:f3:f5:34:93:95:d0:08:79:c1:ee:98:1b:58:77:d5:
         7d:81:26:2a:7e:04:dc:12:48:e8:5a:02:ea:51:bd:07:9a:0f:
         df:fa:dc:fc:e5:01:49:54:0b:b6:c9:f7:2a:24:f1:9d:a7:19:
         db:04:0a:78:20:16:55:40:49:6e:7d:46:12:36:af:e0:55:ce:
         85:ae:f5:ee:cd:93:07:6a:36:c8:db:2f:24:92:44:97:af:2e:
         77:b0:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:33:35 2025 by rpki-client