Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File:                     pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier:          qu98R/u9X7gEAP+SM70h5CGv3Cfe/tMbslBKR5drjxc=
Subject key identifier:   5C:ED:C7:FD:77:61:DC:73:9A:CD:C3:0D:D1:D4:27:98:5E:5E:B1:37
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer:       /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial:       01976C2B314AF095CC095028E4950A529B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number:          081B
Signing time:             Sat 14 Jun 2025 02:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:59 +0000
Files and hashes:         1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=)
                          2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: eVl8MDvQPttuvR57lI9VVmAVeBBuj0hsEh6HuUbHgLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:31:4a:f0:95:cc:09:50:28:e4:95:0a:52:9b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
        Validity
            Not Before: Jun 14 02:00:59 2025 GMT
            Not After : Jun 15 02:00:59 2025 GMT
        Subject: CN=5cedc7fd7761dc739acdc30dd1d427985e5eb137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:61:96:9b:b2:0e:e5:ca:02:25:73:5f:77:
                    b6:2a:29:59:37:42:80:0d:82:5b:31:e0:b1:76:4b:
                    62:e4:b4:eb:7f:99:8f:0f:d5:ae:c6:56:18:eb:df:
                    60:38:8c:fc:2d:1d:71:59:97:19:cb:b3:88:cf:7d:
                    6e:a7:44:19:07:a6:b0:26:f8:e7:0e:1a:28:6f:41:
                    92:66:91:b8:7f:33:4b:cd:18:19:b1:8f:ee:22:e4:
                    a9:f7:e2:ed:b7:5c:7b:07:1f:51:9a:26:31:72:72:
                    cc:d4:d0:69:20:27:56:fd:b1:e9:03:44:fb:bb:a5:
                    c5:11:bd:fd:a9:94:2a:90:c8:45:e9:9f:db:8f:f3:
                    69:c7:45:22:d9:27:8d:c7:8b:fc:86:2b:bc:42:ce:
                    fe:2e:d3:c7:79:f1:c3:eb:ac:68:13:22:81:27:19:
                    0c:bb:09:47:9c:3d:9e:c3:bf:fa:4b:bf:41:0f:43:
                    fa:ac:f2:3e:b3:5f:7f:cd:a8:8e:d6:f6:30:4b:b7:
                    1f:72:f3:83:ce:57:5f:55:80:09:96:ae:de:1e:89:
                    7f:43:57:96:e3:25:f2:d9:da:ca:06:a7:0c:98:ef:
                    65:80:3f:60:4a:45:11:07:8a:08:4f:16:cf:84:07:
                    b8:00:1c:b3:e9:18:84:98:0d:8d:d7:22:67:9d:64:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:ED:C7:FD:77:61:DC:73:9A:CD:C3:0D:D1:D4:27:98:5E:5E:B1:37
            X509v3 Authority Key Identifier:
                keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:86:bd:7a:8c:3c:1c:78:aa:1c:b8:db:21:02:92:5a:c3:
         da:19:7f:65:7d:da:0c:9b:b1:45:4d:f8:c2:23:f3:77:f4:5e:
         96:28:c9:80:9b:32:7b:d3:03:51:ba:7d:76:f2:56:cc:30:f0:
         e4:ac:3d:7e:83:e1:dd:e4:e3:88:75:25:9a:ca:fd:80:2e:5e:
         fc:df:84:23:35:72:57:95:94:b1:f4:3a:17:c7:7d:c8:b3:10:
         cc:94:5f:af:1b:79:cc:bc:ef:4c:1d:04:5e:5a:5a:14:b1:79:
         2f:da:6c:8d:d5:e3:90:50:c9:34:ad:d7:f4:e5:95:09:53:24:
         af:7d:1c:c4:26:69:22:ee:c0:eb:01:f3:a9:48:e7:85:83:88:
         27:fb:e4:a2:b4:aa:0a:a3:14:c7:16:8c:8d:d0:44:ae:c2:00:
         38:84:5f:fe:e8:54:85:5c:a9:49:d3:30:3e:2a:57:a9:b9:96:
         d0:33:96:1a:fa:53:76:2d:0c:ea:9a:3a:d4:39:e0:e2:3f:98:
         17:f7:fa:10:08:48:ad:e6:ad:b2:27:ee:1b:c6:b7:1b:34:75:
         49:8c:73:07:20:70:b0:3e:e9:9d:45:3a:df:47:dc:d3:bd:97:
         37:0b:57:a2:43:dc:a8:40:f2:05:55:bb:97:98:89:2b:de:8c:
         1d:8a:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:56 2025 by rpki-client