Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File:                     Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier:          q9vvWio3UgbH06s/wElrYrUVqDIxhtWbiB+dJjPw94U=
Subject key identifier:   33:BF:0A:79:90:AE:2E:CC:7A:FB:9B:7E:26:79:3B:E4:FE:26:E1:FD
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer:       /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial:       01976F998FA4838F8ED6057741316C0DEB4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number:          02D4
Signing time:             Sat 14 Jun 2025 18:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:24 +0000
Files and hashes:         1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
                          2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: R6kg8LYptpIwl23aQzd21+gOjreT1tS1gle3t8MZzLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:8f:a4:83:8f:8e:d6:05:77:41:31:6c:0d:eb:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
        Validity
            Not Before: Jun 14 18:00:24 2025 GMT
            Not After : Jun 15 18:00:24 2025 GMT
        Subject: CN=33bf0a7990ae2ecc7afb9b7e26793be4fe26e1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:4d:ef:7a:33:1c:24:f5:b3:26:a5:ba:8d:
                    04:3f:c9:89:6f:bd:a3:c1:f6:2a:f0:cd:c4:f3:7b:
                    ca:86:5c:1f:b3:6f:c5:ac:18:48:05:af:dd:41:8c:
                    48:0c:b1:1d:f0:80:09:a6:5c:28:d7:15:ef:64:21:
                    25:b8:e2:29:b1:be:dd:31:68:ae:16:79:23:75:7b:
                    a5:69:c9:3e:44:d6:23:cc:d3:d1:a0:a4:ba:a4:1c:
                    33:74:91:f8:48:f3:9f:a6:9b:fb:c9:b0:57:55:44:
                    a2:61:d9:bb:7d:c4:b3:cf:d4:b5:08:83:2e:5e:39:
                    d3:45:dc:e5:29:8c:cf:06:fd:94:93:12:f8:1f:b3:
                    78:c8:83:20:54:d1:4e:6b:ad:29:b3:c5:2b:79:af:
                    1b:78:42:81:2c:30:48:9e:a8:57:64:8e:4b:6e:82:
                    c9:40:b7:fe:3b:dd:64:5c:b1:59:77:ef:9b:27:0f:
                    19:a7:72:b9:f7:b9:41:03:5e:5c:c1:00:96:ef:65:
                    d7:7a:b8:98:09:39:cd:a2:a2:0b:8a:4c:3b:03:42:
                    48:0e:2d:50:69:b2:ca:30:75:4e:81:be:6b:68:a6:
                    a1:66:fc:cf:27:b3:29:c5:39:09:52:97:49:98:39:
                    a8:aa:2b:79:40:a4:1f:fb:4c:10:23:ab:0b:af:4c:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:0A:79:90:AE:2E:CC:7A:FB:9B:7E:26:79:3B:E4:FE:26:E1:FD
            X509v3 Authority Key Identifier:
                keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:af:2b:f0:ed:0b:5e:56:98:b6:58:3a:86:c6:49:4a:be:8a:
         e3:9f:a4:39:83:1b:ca:e6:10:c4:b9:15:bb:67:31:e9:58:cc:
         3b:b8:64:f8:7a:e4:d3:f1:c4:dd:1e:20:aa:e5:b4:e8:8d:d2:
         52:dd:e7:8b:7c:6d:d1:b6:21:91:b9:90:9e:fc:13:64:52:2e:
         ea:f8:bd:7c:96:e5:61:df:0d:3d:7b:de:ef:98:be:46:86:a9:
         43:e5:0c:c4:52:36:3a:d4:22:89:08:e5:18:f9:97:a9:52:57:
         b0:d5:5a:39:f1:14:21:f1:d1:55:11:11:2b:57:7c:d9:18:17:
         cf:0b:46:41:23:8d:2a:13:14:cf:bd:22:af:88:e6:58:e4:51:
         80:7d:eb:4b:56:ee:0c:06:5b:93:e3:37:1c:00:e7:ae:99:07:
         12:cf:fa:22:6d:66:de:62:e7:8d:ae:1c:6e:b0:e6:ed:2d:35:
         1a:56:e3:80:d7:2d:35:6b:83:41:da:8f:95:f9:da:77:81:53:
         41:9b:be:e7:85:7d:fa:8d:9d:d4:fe:1b:d8:93:c0:3d:59:4c:
         ab:12:5c:32:63:7f:a6:dc:e2:23:e4:21:cc:b6:3b:82:a6:c5:
         6c:19:a1:8f:e3:e6:a5:15:72:a0:ed:db:be:15:7e:4b:99:a7:
         33:da:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:23 2025 by rpki-client