Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File:                     PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier:          EeIJNMvOhLlVddPKTRWZthPutEUEn5LXAhLVwzWrxw0=
Subject key identifier:   52:DC:A7:95:FD:B6:14:E9:38:5D:2C:74:82:34:DE:23:6F:FB:9D:70
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer:       /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial:       01976C2ACF08CA8FD468DF16C456B9EF2596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number:          025C
Signing time:             Sat 14 Jun 2025 02:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:34 +0000
Files and hashes:         1: Jv9ea6TjWXgvrL4UJOE0Y6J6Kzo.roa (hash: vQZS+xG2DvESCsjLOI3ZeRzubYmodylcXb11ZuJ/VmA=)
                          2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: WaeVP8XVJyQ3BEg0P+ueI6gJefDK6PKg/+tBTxLUgAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:cf:08:ca:8f:d4:68:df:16:c4:56:b9:ef:25:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
        Validity
            Not Before: Jun 14 02:00:34 2025 GMT
            Not After : Jun 15 02:00:34 2025 GMT
        Subject: CN=52dca795fdb614e9385d2c748234de236ffb9d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:31:97:65:f9:69:84:a9:08:35:80:f9:8e:
                    86:fe:e0:a3:9e:56:28:e1:93:44:f1:16:fe:d2:4f:
                    2e:cc:ee:7c:ed:20:12:96:c7:c4:91:79:81:55:3f:
                    28:61:75:bc:d4:32:2a:1b:77:c8:a9:34:7d:50:3b:
                    f0:67:e3:42:24:89:62:d2:cd:57:cb:65:25:12:1b:
                    25:b5:1f:1c:a1:f4:e2:c2:19:04:7b:c9:b7:65:92:
                    79:ae:2c:4c:26:60:14:9a:d2:15:2e:48:f2:b0:4a:
                    be:1d:98:6f:b0:46:3d:c1:64:0e:6b:04:b6:a0:4a:
                    6f:1a:bf:04:83:17:8d:82:6c:f5:eb:db:a7:3b:25:
                    5f:f2:bd:47:1d:1d:44:95:f5:74:99:cc:eb:9e:07:
                    f3:33:52:66:ee:a4:9c:8c:39:f5:f4:f1:49:38:57:
                    97:09:7f:de:cc:f1:83:c8:ad:98:8e:0d:0e:31:f6:
                    03:61:23:6b:cc:b3:89:92:6c:2b:68:7b:89:23:03:
                    4a:21:0b:c3:9d:24:18:02:77:98:a5:d7:6f:75:af:
                    ff:9a:5f:b5:49:3b:7c:d7:98:27:32:6f:30:a4:19:
                    de:31:38:e4:ec:e1:66:cb:03:e7:c0:61:75:b0:45:
                    76:64:69:6e:2e:e7:ca:7a:a3:7c:69:ff:ed:80:20:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DC:A7:95:FD:B6:14:E9:38:5D:2C:74:82:34:DE:23:6F:FB:9D:70
            X509v3 Authority Key Identifier:
                keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ec:be:27:f7:20:d9:6b:dc:d0:c2:8a:37:9b:35:18:af:21:
         d4:55:b5:26:93:df:1c:66:b6:bb:dd:b4:59:ab:a3:09:2e:06:
         d5:16:c8:7e:15:e2:d9:37:29:d4:bf:d8:56:77:cb:93:bc:e0:
         11:c2:06:8b:76:39:19:51:ec:df:12:ce:81:2c:64:22:9e:61:
         61:79:f3:9b:5b:15:f5:67:9a:c8:b8:92:45:fe:41:73:1d:5e:
         40:7c:a5:8f:fb:4f:4e:89:17:e5:0c:7d:b5:79:3a:ba:04:66:
         4a:a6:9b:93:2a:43:13:c9:0a:4c:d2:15:23:52:8b:73:60:9a:
         43:2f:93:7b:d4:a1:a2:89:3a:4c:3b:71:67:63:a0:e1:2a:4f:
         58:3a:dd:c4:5c:fb:fa:c6:a5:78:5d:e5:92:2e:2f:45:1b:ef:
         1e:c7:09:e0:c4:8a:6f:8f:01:a5:21:4d:5d:38:09:4b:9d:e0:
         1b:ec:4a:a9:b6:79:0e:11:ee:e8:de:36:e1:4b:87:7c:ec:13:
         c3:ec:10:bb:06:8a:ef:e1:ce:e9:ec:3f:0b:05:b7:f2:f8:27:
         52:92:c1:d9:2f:c0:80:57:5b:e0:29:4b:68:94:26:fd:8e:2b:
         2b:84:f6:6f:50:85:40:46:9c:15:26:b4:78:20:b3:44:af:45:
         40:6f:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:36 2025 by rpki-client