Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File:                     PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier:          bV1ovE2kse1dQrZLiuEQhKegtXsQMOakGIUEMczcWc4=
Subject key identifier:   01:23:D6:F6:9C:AD:4F:4D:35:84:88:2D:FE:87:83:15:F3:89:29:40
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer:       /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial:       019771F671F5D382881C29D1DB27336F7494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number:          1066
Signing time:             Sun 15 Jun 2025 05:01:05 +0000
Manifest this update:     Sun 15 Jun 2025 05:01:05 +0000
Manifest next update:     Mon 16 Jun 2025 05:01:05 +0000
Files and hashes:         1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: 0ZQVfNGFGVQDOG/m9dCatxDLcUsa5eUnxHA6/0r5i/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:71:f5:d3:82:88:1c:29:d1:db:27:33:6f:74:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
        Validity
            Not Before: Jun 15 05:01:05 2025 GMT
            Not After : Jun 16 05:01:05 2025 GMT
        Subject: CN=0123d6f69cad4f4d3584882dfe878315f3892940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:36:9a:57:04:5f:5c:e1:84:93:7c:6b:e4:
                    68:30:3a:0e:3c:10:a8:1d:e0:7e:74:ea:29:97:61:
                    c3:5b:40:e1:f7:f7:bd:1f:3a:26:4b:fd:bb:4c:e2:
                    32:22:83:f5:6b:9d:d1:1c:c2:52:7d:5a:de:f4:3b:
                    0a:6e:11:c9:ba:68:c1:38:87:2f:c4:50:cc:12:ca:
                    52:7d:90:0c:e4:a3:11:aa:a2:80:ab:67:51:3d:16:
                    54:c7:1b:20:a5:ea:8d:6d:cd:84:60:a8:d7:74:02:
                    44:15:c4:88:a8:65:ec:ad:90:77:0d:0e:bc:78:2d:
                    0a:37:6c:c6:02:35:6f:8b:84:e0:6c:02:20:d6:ff:
                    87:c6:ee:d0:69:da:4e:ed:fd:de:58:81:31:e2:c0:
                    fa:dd:ae:5e:21:fc:fd:fc:a8:8d:65:96:20:86:89:
                    ae:18:0d:9d:e7:7b:f1:62:aa:7b:17:04:7e:e9:8c:
                    29:08:55:d6:cd:a8:27:8b:14:f3:10:00:9f:3b:5d:
                    6e:f2:cc:e5:2a:11:4e:0f:d4:ab:00:db:3c:8a:32:
                    cb:51:82:09:71:67:3a:79:0e:e9:c3:3c:52:af:f3:
                    04:19:5b:51:0f:3e:ce:4e:e1:9d:9f:11:e0:46:ad:
                    c8:61:4a:8c:22:ef:70:10:0f:78:61:4b:43:68:5f:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:D6:F6:9C:AD:4F:4D:35:84:88:2D:FE:87:83:15:F3:89:29:40
            X509v3 Authority Key Identifier:
                keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:32:e6:96:02:4b:03:78:d2:4e:c5:78:9b:f8:fa:a9:ee:5f:
         ed:03:bb:29:79:22:86:96:47:49:7a:70:8e:d7:2d:98:38:6c:
         c8:c4:0f:35:2d:d4:f8:de:25:b8:85:bb:73:ff:22:2c:de:61:
         db:51:83:46:b7:93:cb:29:fd:b3:ea:e9:c2:bc:ac:02:16:2d:
         bb:a4:a6:94:fa:5e:a7:01:3e:a3:87:fc:90:cc:21:e2:ac:3d:
         69:80:3b:ae:25:8b:a5:af:52:17:0a:d1:33:98:f8:4f:52:a5:
         6f:0d:6d:17:68:d7:f3:d6:8b:85:6e:35:db:4b:b6:4d:af:77:
         df:7a:3f:63:28:15:80:18:9e:38:45:de:3f:21:15:16:d7:2a:
         dd:4d:3e:8b:60:73:9e:57:de:e1:c3:fd:de:6a:1e:3a:51:a5:
         53:a9:d9:83:96:f6:0c:e7:5b:7f:90:01:24:fd:ad:d6:7f:7a:
         d3:3c:3d:43:95:87:26:21:22:ea:8f:c3:d0:78:cb:f6:5a:4b:
         b2:24:7d:f3:db:4f:98:d0:71:cc:59:e8:36:79:6a:ce:d4:6f:
         36:00:34:32:6d:59:e2:01:86:90:0d:92:e2:ce:7b:74:48:37:
         fe:26:b2:3b:cd:d7:34:e7:c2:84:d7:47:d8:dd:a7:69:53:f3:
         91:a3:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:33 2025 by rpki-client