Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File:                     pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier:          dFQxs7f4zStovWIn9DsO9v9mWc/9QxZOSdOm9Ve+5LQ=
Subject key identifier:   20:34:99:0C:80:6D:07:6C:BE:6B:38:CF:DD:E4:8D:B9:FE:57:A7:EC
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer:       /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial:       01977D557404B651C76D79D45ED47FC86D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number:          15A0
Signing time:             Tue 17 Jun 2025 10:00:41 +0000
Manifest this update:     Tue 17 Jun 2025 10:00:41 +0000
Manifest next update:     Wed 18 Jun 2025 10:00:41 +0000
Files and hashes:         1: MKwXFQdhtuQYKRcVzorzsVxuXIw.roa (hash: GZ2oDGi2xK0WgPjyKpmqLx5efaJizRvGxJTHG502Kqs=)
                          2: QHGBtoYy-yUNGT2R6UBemRAxD5s.roa (hash: 3YJpkLEFxs1XCvKlcy0WQw5fAkmH7oTliDxTaEnJgz0=)
                          3: hwXn82QbEbf-SULTcBIDnH5UIZU.roa (hash: 08kQDvBZvCyHX595Crm1xVl4v8KtIgUsNRfQUr9hTAQ=)
                          4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: B/E8I1TxnkR7MaAqHJ2h7JgcqPzttpy3GzhK3Re742E=)
                          5: soZqy3HUC6xiStBTbgTdR73Vw2c.roa (hash: 0/K+cWWK8CwD0JZ/wMwAQQYw/af8O4bhKs39qQrbVB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:55:74:04:b6:51:c7:6d:79:d4:5e:d4:7f:c8:6d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
        Validity
            Not Before: Jun 17 10:00:41 2025 GMT
            Not After : Jun 18 10:00:41 2025 GMT
        Subject: CN=2034990c806d076cbe6b38cfdde48db9fe57a7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:51:6b:d1:d2:59:59:fb:17:88:2a:6a:7a:
                    5b:d1:6a:0b:71:79:af:cb:bb:dd:34:4d:01:56:bd:
                    d0:c4:30:4d:20:bb:e0:2e:50:a8:79:69:39:c8:df:
                    f3:5d:74:94:66:84:fa:2a:6e:7f:42:5b:3e:41:ae:
                    cf:46:80:7f:fe:97:1b:b0:68:f9:e2:15:78:f1:e8:
                    58:1d:ee:83:b3:96:07:94:7d:41:ea:14:2f:69:2c:
                    a3:3d:e3:5d:50:28:1f:d6:bd:42:bc:25:cd:a1:f8:
                    3b:a7:7f:31:0e:78:43:28:ae:b5:b1:40:bc:dd:86:
                    d7:8b:72:f5:62:17:4a:4b:1c:cb:c2:6d:6b:14:75:
                    be:be:1a:df:d1:1a:92:09:82:58:a5:06:35:13:82:
                    a2:37:1f:dc:ef:f3:f1:f9:58:4c:09:51:5f:fb:53:
                    a1:b8:fc:3d:6c:e7:ca:b6:72:21:85:3c:f0:ab:be:
                    1b:2e:86:8a:00:30:f4:00:a3:d1:66:95:91:06:43:
                    09:9a:fa:39:83:51:db:5a:31:fb:ec:7d:dd:d5:7f:
                    1f:ca:fe:7f:6b:aa:cb:b3:a1:03:3f:c1:33:d7:ae:
                    ad:1e:13:2e:bc:32:8f:ef:90:d4:0d:32:b9:ae:4a:
                    b0:95:3d:d2:31:50:3b:b2:d7:a9:e6:c1:f0:ce:98:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:34:99:0C:80:6D:07:6C:BE:6B:38:CF:DD:E4:8D:B9:FE:57:A7:EC
            X509v3 Authority Key Identifier:
                keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:9f:d7:a1:32:7f:9b:4b:bb:a1:47:57:3b:03:7f:8f:4c:
         a9:c8:4b:58:75:e3:72:56:da:df:cd:c2:44:ee:c2:12:14:dc:
         07:ea:63:91:f9:3d:d6:d5:a9:d1:95:ff:99:66:46:2c:8d:c9:
         43:82:00:3a:07:74:f2:74:ec:78:37:1a:d7:ff:28:09:25:97:
         ef:dd:38:30:e3:ad:22:81:da:67:95:87:57:eb:7f:9e:b7:5c:
         90:d7:f4:49:4e:43:41:5a:5f:03:e9:1f:dd:cd:4a:2f:65:d6:
         18:d9:fb:d7:76:e6:18:cc:9d:29:44:bc:04:44:be:0c:3d:30:
         62:e5:de:a2:f0:a8:7a:9a:78:8b:f4:f2:f7:17:ae:9c:01:f8:
         68:83:7f:c2:67:58:d4:a9:6d:f2:ec:4c:93:8f:ce:0c:b5:56:
         a1:bb:37:fd:4c:ad:8f:a0:15:a4:de:e5:77:27:f6:c3:77:2f:
         90:24:29:79:06:4c:26:c7:92:65:93:31:22:d5:17:86:7d:42:
         ce:4d:57:51:7d:53:f6:c2:aa:fa:ef:d8:5e:c6:35:88:54:22:
         32:99:55:ca:3c:5c:13:cb:00:ae:dc:6d:2a:d5:69:08:5e:99:
         c0:2f:6e:b1:61:47:99:10:36:a7:6d:06:6f:a0:ab:c3:bd:f9:
         ef:92:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:56:12 2025 by rpki-client