Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
File:                     pABDs-E67Tl_iTLPXRP_T0qv5ro.mft (raw, json)
Hash identifier:          r2LVZp1UxXvGxUlBoQeF84uOp3VqGYhz6/AXO7SdWFc=
Subject key identifier:   1F:7C:18:90:C0:BA:90:BA:E2:2F:DA:3C:D5:8E:8A:79:DC:B8:A7:E5
Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
Certificate issuer:       /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Certificate serial:       01976D3E1D9F9770E6CE9615AE0912331453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
Manifest number:          084B
Signing time:             Sat 14 Jun 2025 07:01:16 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:16 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:16 +0000
Files and hashes:         1: 6PmEXqzCqtOkV5rlVnjN7lD4y7o.roa (hash: oeYIl7mC76NEmwPAocr8euhDeieJStNOycGYHO+qVzg=)
                          2: pABDs-E67Tl_iTLPXRP_T0qv5ro.crl (hash: GMJWqndb58WL4kK4xPbQIg3Hd+SJxYXM2PKFhZIo4Hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:1d:9f:97:70:e6:ce:96:15:ae:09:12:33:14:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
        Validity
            Not Before: Jun 14 07:01:16 2025 GMT
            Not After : Jun 15 07:01:16 2025 GMT
        Subject: CN=1f7c1890c0ba90bae22fda3cd58e8a79dcb8a7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:61:1c:f9:ee:bd:c1:67:3b:56:45:ff:ae:
                    4e:aa:c8:9e:89:06:0c:d0:c1:d2:0e:a8:fc:42:ab:
                    59:89:1d:60:40:e9:2e:83:fb:44:21:f4:f2:59:39:
                    5b:4d:1a:37:f8:cc:62:e6:68:ce:c3:4f:22:f8:cb:
                    b4:40:0a:84:fb:74:a1:d4:5c:ad:60:a3:4a:54:55:
                    9f:70:c4:d0:8d:0a:21:a6:cc:b2:00:8d:f5:9b:65:
                    f1:ca:7a:34:37:26:3e:b0:c8:ac:1d:72:6d:fe:21:
                    fc:1d:18:3f:55:38:38:fd:07:00:d4:69:05:bf:5e:
                    d0:de:54:3a:2b:1c:b7:e9:fc:fb:90:15:46:17:48:
                    de:87:36:76:15:aa:9b:41:d9:31:aa:57:d8:0a:e1:
                    30:4c:20:73:50:ef:09:80:a5:58:c0:f0:75:a2:1d:
                    61:9d:b1:93:70:79:63:22:ac:e2:8b:06:bd:50:3e:
                    e4:9b:21:b5:b1:60:d0:4f:9f:4b:93:fe:dd:30:95:
                    61:d4:c7:95:22:b5:31:e1:4e:0e:0f:94:f3:ba:72:
                    13:88:4a:a3:da:20:d7:59:5d:47:70:11:79:a7:a7:
                    c6:6d:89:2f:eb:de:db:fa:09:cf:18:99:a2:f4:1d:
                    be:6d:62:0f:70:e1:77:3f:32:b2:38:ef:78:1f:28:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7C:18:90:C0:BA:90:BA:E2:2F:DA:3C:D5:8E:8A:79:DC:B8:A7:E5
            X509v3 Authority Key Identifier:
                keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:07:9c:a5:e3:6c:59:95:19:96:e6:04:a3:ac:2b:00:19:
         3d:5a:39:a7:57:c0:8c:f1:cc:ac:0d:7e:ce:57:00:71:7b:85:
         cb:c0:b8:50:ed:71:0a:61:2e:c2:26:f2:ea:55:19:be:bb:74:
         86:94:51:82:c8:4d:f1:19:25:aa:43:a0:cf:98:ea:e9:27:44:
         cc:0c:4e:05:ce:56:d3:3d:eb:4c:39:da:3e:23:2d:27:51:1f:
         cf:7d:6c:38:96:3f:34:9b:87:48:6e:6f:58:d4:76:fc:2d:0d:
         43:d9:7d:3c:20:96:84:97:64:71:32:72:13:52:14:69:36:08:
         54:97:97:06:8d:14:39:9b:d6:4e:a1:c6:04:34:a5:ba:b2:b3:
         67:be:b1:1e:f2:5e:fa:7a:83:55:3b:5d:b3:04:f8:88:f7:76:
         40:87:d4:bc:76:f9:43:17:b8:b4:48:2f:7d:c1:26:be:49:5e:
         ae:0a:89:87:44:79:99:c0:ee:37:4c:64:9b:fe:c7:d5:80:18:
         60:d9:cb:72:0e:5c:fc:d1:f3:a7:18:d8:ed:34:e4:f9:59:a6:
         a3:3e:37:9d:1d:3d:f0:bb:30:d4:14:9d:23:40:a2:f4:0b:54:
         d8:08:51:e2:26:d7:b4:16:88:ec:9e:95:6c:03:b8:1b:70:1c:
         00:eb:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:11:24 2025 by rpki-client