Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File:                     PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier:          uXZmvHXPVL7dAtZw/5AmKGuGAL+WiSIOq0dlp7s9q7c=
Subject key identifier:   B8:24:6B:6D:5E:2C:F0:6C:16:4A:98:23:BE:A6:CE:BD:00:85:B6:7F
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer:       /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial:       01976D064AAEAF242E434CF6FD27A1B06356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number:          0F0C
Signing time:             Sat 14 Jun 2025 06:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:18 +0000
Files and hashes:         1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: 1/cQxzs4G1kf7+FiScLWfxM0S9iNKhbhM8dXoNRKwOU=)
                          2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:4a:ae:af:24:2e:43:4c:f6:fd:27:a1:b0:63:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
        Validity
            Not Before: Jun 14 06:00:18 2025 GMT
            Not After : Jun 15 06:00:18 2025 GMT
        Subject: CN=b8246b6d5e2cf06c164a9823bea6cebd0085b67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:2f:61:2c:3d:d0:b9:65:bd:7e:17:4c:ab:
                    cc:1b:7a:ef:da:d9:a3:2e:13:55:e5:1e:2b:22:23:
                    9c:c4:1a:94:05:aa:4a:89:5e:c2:57:c5:4f:d7:30:
                    ab:1b:16:90:fc:a7:4d:df:ab:8c:40:9b:95:cc:fd:
                    93:76:3b:36:57:40:44:e0:c4:dc:2f:d3:46:68:69:
                    52:d1:27:f9:02:75:df:fe:ec:da:06:67:db:b6:d5:
                    e6:16:9f:30:0d:3c:47:a8:6e:c3:b8:9f:37:4e:4e:
                    9e:5e:ef:a0:1b:2f:5c:ac:5d:f1:f1:77:7c:4c:e6:
                    16:e4:95:df:0c:04:88:97:29:34:75:97:36:a3:1e:
                    d5:41:93:2f:65:15:1b:4e:19:72:f4:29:7b:24:68:
                    cf:15:db:2d:a3:09:ff:72:6f:5c:7d:af:44:32:60:
                    6a:f3:d4:65:24:9f:f1:b8:88:ed:46:dd:64:86:a9:
                    82:e8:b7:25:a5:11:b6:f4:6c:ca:28:84:94:1c:fc:
                    e7:eb:d2:95:14:b2:19:38:6a:f2:57:3c:eb:e7:0e:
                    c9:e2:da:04:aa:eb:d2:36:38:48:1c:70:a9:a5:64:
                    b4:e9:2e:6c:e0:1f:25:ea:74:b1:4b:f2:3f:00:f7:
                    8b:3c:09:47:d2:17:eb:9e:e6:81:c2:4c:d1:ff:32:
                    68:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:24:6B:6D:5E:2C:F0:6C:16:4A:98:23:BE:A6:CE:BD:00:85:B6:7F
            X509v3 Authority Key Identifier:
                keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:73:53:b0:c1:e3:f7:9e:27:d0:2b:2b:35:76:75:1e:c6:0f:
         0e:eb:8f:79:a8:28:28:f5:04:7a:23:4e:ed:b7:fb:ab:a3:00:
         86:0c:81:3a:5e:5e:67:3d:88:8f:f5:4c:51:49:ed:a0:47:21:
         52:02:5e:75:73:91:b9:0c:91:91:07:a1:12:ba:d7:e0:1a:93:
         78:e1:f6:eb:5f:66:dd:94:2f:e2:2f:dd:9b:45:7a:8f:79:64:
         d3:1e:95:07:7c:9f:8b:bd:70:33:b6:94:3d:a3:d1:fa:2a:3d:
         f8:3e:41:b9:13:5c:cc:63:7a:8f:3e:9f:41:b8:94:8f:eb:61:
         1b:39:9f:47:3a:5c:02:7b:71:e2:9f:45:10:1c:b4:c1:78:73:
         9f:c4:ed:a9:79:20:30:ae:59:37:8a:66:11:8f:9b:f1:45:23:
         ca:eb:8c:cf:23:dc:32:51:d4:26:35:43:00:04:51:7b:56:6b:
         02:04:a2:49:e6:6c:e5:57:47:ac:f8:c0:ad:4f:81:39:b5:d2:
         bd:68:2e:ea:36:fc:14:7b:07:e4:7d:63:eb:68:c7:96:e8:0a:
         ba:fd:d4:eb:c0:48:74:15:54:3f:57:7f:c9:23:b4:6b:12:cc:
         0d:9d:5c:de:a4:49:22:94:2c:52:c7:52:07:50:ea:fc:42:bf:
         b4:15:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:52:40 2025 by rpki-client