Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File:                     P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier:          Sc0BSLpTm0BdbG+rZa4vlLJcTXA4laE8PWI1lrSCBsg=
Subject key identifier:   46:35:D0:C0:17:57:E6:93:58:79:DC:A4:E0:70:23:88:E5:FC:10:97
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer:       /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial:       019768F29C6A3DD195F602863CDED8CA1BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 11:00:19 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:19 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:19 +0000
Files and hashes:         1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: MssdBSSX85egJNDZ75VzEOUa8V8fd66zBYs8wfsIqI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:9c:6a:3d:d1:95:f6:02:86:3c:de:d8:ca:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
        Validity
            Not Before: Jun 13 11:00:19 2025 GMT
            Not After : Jun 14 11:00:19 2025 GMT
        Subject: CN=4635d0c01757e6935879dca4e0702388e5fc1097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:d1:9f:b8:d6:72:ef:58:14:af:16:f9:11:
                    ed:2a:da:2f:b5:fe:e7:ad:e2:96:95:b2:27:d9:d3:
                    de:bc:5e:c6:59:e2:ce:36:3f:61:2e:27:a0:53:25:
                    88:4d:ac:e9:ee:f0:fd:36:48:d1:84:b5:59:c7:b2:
                    29:24:1e:f3:72:8f:8f:e5:ab:2e:e4:c3:79:22:7a:
                    ce:02:4e:22:5a:f2:39:8f:7b:3a:d3:1d:17:56:61:
                    63:54:a4:56:b1:ff:a3:5b:25:86:1a:2d:5f:3c:be:
                    c8:24:cb:2d:0c:c0:0a:cc:e8:a7:ef:11:35:20:0d:
                    da:78:30:23:f4:eb:d1:71:ad:7e:af:3b:b2:de:5e:
                    2a:ce:7d:3a:b4:bf:2f:bc:40:d0:ae:6b:d6:a8:dd:
                    bb:72:a8:a5:7e:5d:f7:03:8e:91:ae:46:c3:0d:c7:
                    78:0b:55:5e:a8:02:f2:72:44:21:08:0f:62:b5:43:
                    4e:34:38:a0:c6:55:b5:54:f2:f0:79:dd:54:3f:e7:
                    b7:c4:96:be:63:49:e7:2c:c9:99:36:d7:bb:f3:d7:
                    14:2f:f9:4d:0a:fb:c1:8c:76:d7:c1:ce:07:2d:5a:
                    d9:61:67:8d:ba:99:03:85:44:55:b1:30:4f:6e:10:
                    65:a5:70:2a:69:66:74:21:cd:a7:cb:58:79:1e:fb:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:D0:C0:17:57:E6:93:58:79:DC:A4:E0:70:23:88:E5:FC:10:97
            X509v3 Authority Key Identifier:
                keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:81:1f:56:ec:93:cb:f2:04:2a:3f:79:dd:59:bc:b2:c6:c6:
         5a:cb:9a:d4:2a:fa:95:3e:d2:63:59:50:2b:3c:8e:11:0f:0b:
         93:af:34:6d:6e:8c:70:4e:85:89:9a:d5:78:1e:49:a4:85:76:
         7b:ce:21:af:bf:55:b7:45:7d:30:a2:c7:78:0d:67:2d:45:69:
         01:df:c5:a4:80:d8:8c:02:51:6b:7f:52:49:e0:5d:90:fc:7b:
         e5:68:3a:40:52:ff:19:da:df:9b:4e:6e:b2:6f:31:65:19:ef:
         c5:ad:60:5e:e1:f7:ec:41:ab:f1:05:79:7b:9a:91:99:b2:d2:
         f8:9e:e9:8e:7c:60:d6:cb:1a:bc:62:5d:67:a8:03:f1:e9:d7:
         e8:48:e0:5c:29:4b:b6:49:75:c6:c1:d9:8a:43:ca:3a:a4:7e:
         24:c0:a1:d2:32:49:8b:b8:0e:37:e8:87:f2:95:c3:62:52:dc:
         69:75:a8:7d:40:72:0b:a3:82:d0:c8:d4:68:5e:b0:ca:fd:62:
         75:d0:8b:cb:ab:b5:15:24:66:45:01:10:db:09:e4:36:2d:eb:
         b7:78:1d:c7:09:33:d8:be:e8:7a:8a:7e:0c:a5:9e:fc:c2:24:
         0f:d1:3d:cf:8b:8e:d5:60:e0:6d:ad:46:d9:7a:fa:6d:d3:48:
         da:2d:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:21 2025 by rpki-client