Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File:                     Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier:          nzGgmGu7G+asTWktEj1+wHSiB8ojUb3eswDbbrpIa+g=
Subject key identifier:   C7:F8:E0:6B:6A:D7:B4:D1:09:DD:DE:2A:A7:66:DE:D7:2C:DA:5F:99
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer:       /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial:       019769CEA3623A2357567A9D9C0320BC2178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 15:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:39 +0000
Files and hashes:         1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
                          2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: Jno8hAEjl/kHWwMfIbS6MmPhhoIZUAUuP97uCWpUrMY=)
                          3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:a3:62:3a:23:57:56:7a:9d:9c:03:20:bc:21:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
        Validity
            Not Before: Jun 13 15:00:39 2025 GMT
            Not After : Jun 14 15:00:39 2025 GMT
        Subject: CN=c7f8e06b6ad7b4d109ddde2aa766ded72cda5f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:27:34:99:b3:3b:15:91:04:26:65:3b:8d:
                    50:40:bb:76:86:42:5f:bf:1c:42:d8:70:d1:7c:e8:
                    14:c9:a3:3a:76:57:9f:71:da:d2:68:83:f6:1b:c0:
                    11:18:03:9b:bd:cb:98:ed:eb:55:9c:71:97:26:cc:
                    af:ce:aa:c9:3b:a1:22:d0:be:bd:f3:37:2d:6d:d0:
                    fc:a7:2f:8c:cf:d4:3c:c4:8d:45:85:0b:74:9d:f8:
                    e3:67:d6:10:7f:9f:4b:4e:66:88:d5:85:b0:52:46:
                    83:20:57:aa:44:2c:66:61:54:26:16:f4:eb:88:cf:
                    5c:42:a8:ac:f8:4d:28:ed:e5:2c:6a:4b:3c:c0:07:
                    f7:ae:8c:75:90:8c:6b:bb:14:34:34:c8:a1:85:df:
                    23:28:d9:0b:88:3c:9a:e1:3e:81:1b:06:a0:d3:0a:
                    f8:a6:04:0b:99:bc:44:26:c4:97:6c:c6:36:b3:7b:
                    ef:67:50:2d:30:9d:6a:51:12:ac:8c:d4:25:eb:d3:
                    6d:91:ce:b3:6c:62:00:c9:55:13:8a:31:76:4b:e9:
                    73:32:44:50:38:1a:d3:a3:fb:f1:2a:36:92:39:fc:
                    5c:74:a2:52:fe:44:7f:4e:f5:2c:65:c2:c7:24:b6:
                    88:b2:3a:ef:d0:f1:cf:47:1d:d7:a1:c4:20:cb:af:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:E0:6B:6A:D7:B4:D1:09:DD:DE:2A:A7:66:DE:D7:2C:DA:5F:99
            X509v3 Authority Key Identifier:
                keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:3d:ba:07:ce:12:9f:fb:09:ec:16:cc:fc:96:a9:12:52:
         16:a0:3e:b8:2c:44:d2:c6:bb:a9:a8:35:bb:86:7e:ec:72:a5:
         c3:ec:85:ef:47:a8:5b:8c:c9:0a:9c:d5:95:c1:86:95:ce:86:
         3d:50:5d:aa:a0:71:08:60:28:fc:63:5a:00:ef:17:48:46:eb:
         55:0f:5f:89:4d:9f:a5:7e:0b:9e:de:3e:6c:6b:16:a0:b4:50:
         ca:69:29:d4:5d:71:57:ce:22:a1:43:45:d4:97:97:97:f6:e1:
         8d:48:da:c8:3b:45:c6:44:89:58:77:2e:00:60:b5:ef:9a:f7:
         6f:ca:73:3a:d4:c2:2f:12:d0:68:28:70:be:41:a4:19:b4:3d:
         e9:2b:64:d6:8f:f6:53:47:be:09:66:bd:c8:75:ec:0b:44:c0:
         ad:4b:c2:36:16:d2:ef:c8:2b:86:49:b8:ec:5a:67:31:e9:b1:
         97:30:ed:09:4f:fb:7d:92:c2:35:0b:6d:93:8b:41:a4:90:86:
         e6:6e:27:38:cd:4b:16:61:00:f1:f5:2a:af:c7:36:00:ce:30:
         27:6b:f2:9b:a0:9d:9e:db:2e:62:3b:b5:a4:46:4a:57:b1:f9:
         ff:07:f8:60:4a:c4:3c:8b:57:89:96:0a:2b:54:17:05:ca:3b:
         a1:1a:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:14 2025 by rpki-client