Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          duRztWIqH0OBJucpVOVWf7brcJ0nnEEaZAZYH0BkTdk=
Subject key identifier:   C4:62:86:30:02:03:38:9C:C7:21:A9:6A:16:A5:97:62:9A:9D:C5:F9
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       01976929A2E5AC511C34CB2B3AEEED3C77B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          1597
Signing time:             Fri 13 Jun 2025 12:00:25 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:25 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:25 +0000
Files and hashes:         1: 2kqVVML4J6p32S1IZ9ese8rrNA8.roa (hash: Z5t0NXFzD5/SVB5g4VKI0FOYHuxiI1pejsxk/eO8RUY=)
                          2: FxcmiLw90HwD6v-zIS8fyho2YJk.roa (hash: dVrudewN+D6RoriyTNX+xlGTNvGmJTbMWvHDD/OWxyw=)
                          3: OEu5ipvpOLx1mjS_wILLKGz31L8.roa (hash: Q2sxz01wDrr3ZAHG0Y04l4+NHZqPRdGf0GS6aM12Hm0=)
                          4: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: m6sHDx5OTlk2WLbTfH8sbSTpgL09BhqMdXX3CF2uREA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:a2:e5:ac:51:1c:34:cb:2b:3a:ee:ed:3c:77:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Jun 13 12:00:25 2025 GMT
            Not After : Jun 14 12:00:25 2025 GMT
        Subject: CN=c46286300203389cc721a96a16a597629a9dc5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:bc:13:87:81:d8:c0:44:d7:2e:94:b5:30:
                    7b:25:1d:96:a7:ae:84:91:fe:41:39:30:c2:54:d5:
                    38:fe:15:de:eb:d0:f7:26:db:e7:d9:3c:51:21:96:
                    bb:99:0b:5d:12:be:a4:2e:45:a7:24:71:84:85:6c:
                    80:15:ca:0c:bc:ec:91:8d:59:1a:0c:b1:34:7b:6c:
                    69:46:58:7c:38:1a:11:99:1e:4b:ca:46:f3:a7:bd:
                    f1:55:9a:b2:3c:63:a4:25:95:36:77:c2:8a:e0:d7:
                    c8:e6:f7:a0:d4:df:31:ad:83:21:e2:38:7e:67:d8:
                    c5:69:66:11:b4:8a:26:39:00:81:e1:51:99:13:04:
                    9b:54:84:e9:f4:48:21:44:a7:ed:41:66:31:5d:4c:
                    7f:9d:0c:0e:30:7d:0d:42:9c:e7:40:94:ae:94:9d:
                    69:b4:46:a2:26:01:29:17:04:28:bc:ba:3e:ea:b6:
                    eb:2e:1a:08:6a:bb:a7:00:1d:84:47:a2:4c:72:23:
                    3f:ed:9f:2e:f3:61:63:07:7e:19:4a:34:61:75:ae:
                    f8:fe:63:22:11:63:c0:e7:cc:39:8a:59:49:c6:64:
                    34:87:66:e6:77:3d:a7:8f:2f:66:d3:b5:44:62:13:
                    fa:62:4b:79:45:95:f6:81:b5:aa:8d:66:d5:d6:53:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:62:86:30:02:03:38:9C:C7:21:A9:6A:16:A5:97:62:9A:9D:C5:F9
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:b7:6d:c2:ef:2d:c7:a3:8b:3d:8d:59:a3:c6:68:63:7b:
         b5:98:67:de:b1:20:58:e3:2d:57:85:07:1d:21:ec:f4:9b:49:
         f5:96:22:15:12:39:8e:5a:87:b0:22:3b:d3:89:cb:bf:51:f7:
         da:e1:0f:d0:0e:72:e9:54:da:02:56:3f:b9:a7:ce:45:53:12:
         47:80:a4:f3:92:47:61:b0:41:fb:66:1a:74:2b:18:02:9b:c2:
         d9:ff:e8:bb:67:c5:24:56:19:34:26:38:1d:ea:76:f5:17:cc:
         74:c3:2a:ab:fc:53:ac:11:a4:d8:6d:75:4c:58:3a:3b:af:f7:
         e7:f1:f7:56:94:3f:14:36:6c:7e:05:93:9d:b9:8e:a6:6b:88:
         38:d4:b2:61:72:cf:ba:f6:9b:26:4e:4f:fb:4b:54:79:67:c3:
         3c:80:e9:39:6c:78:8e:f3:57:89:90:8f:b2:af:5a:68:23:56:
         79:0d:2c:6a:5c:90:55:be:c7:dd:4f:34:fe:f3:6b:9b:d2:04:
         59:16:c8:be:3b:36:6a:6f:8f:a4:78:ef:2f:aa:2e:03:5d:88:
         3c:95:99:41:4d:cd:00:90:c7:f3:f5:d0:35:8c:62:71:6e:83:
         1e:1c:cc:41:53:df:ad:aa:fb:f7:c0:db:80:b6:24:ed:e3:71:
         f4:3b:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:32 2025 by rpki-client