Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File:                     PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier:          zOTKDV3EyVGbiHn9yH5qwCzw+6xdmXR/ix9joRYVPxk=
Subject key identifier:   45:29:A0:49:23:D3:65:56:60:C4:C7:85:A8:07:2C:28:D5:E4:95:6C
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer:       /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial:       01977AC26655CD63070835283B046ADDB3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number:          14C3
Signing time:             Mon 16 Jun 2025 22:00:49 +0000
Manifest this update:     Mon 16 Jun 2025 22:00:49 +0000
Manifest next update:     Tue 17 Jun 2025 22:00:49 +0000
Files and hashes:         1: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
                          2: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
                          3: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
                          4: DYfn4v-d9LSJeRa5vvT-XfYyk70.roa (hash: 8mWNIGwTXO4I48gUsi1UHbc5uoPvj6DJfzAi/IGU5v8=)
                          5: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: vzBcwTTrHWmKaTDX6kcRFcdbYrGfzZZMCPok9Ghclxw=)
                          6: lSP4K3mfoxcgowofKtKedL6Fcrk.roa (hash: ejPoRQTQJw87tbzyuSoPJnPZJPT0D2gWvsWUm5z3CsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c2:66:55:cd:63:07:08:35:28:3b:04:6a:dd:b3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
        Validity
            Not Before: Jun 16 22:00:49 2025 GMT
            Not After : Jun 17 22:00:49 2025 GMT
        Subject: CN=4529a04923d3655660c4c785a8072c28d5e4956c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:15:39:0e:be:f5:00:42:7d:12:d4:5d:76:
                    b2:76:f2:e6:88:2b:be:cf:c7:b2:72:f2:c7:6c:6c:
                    76:de:d7:66:86:63:61:34:31:86:29:6b:65:66:e2:
                    78:8a:ed:7a:b3:0e:8f:19:56:b1:18:9f:a3:79:1f:
                    b8:c4:bd:57:1c:07:8f:39:00:8c:c7:ae:71:3a:c5:
                    bb:23:14:fe:83:55:e1:b5:eb:31:af:f1:4a:ed:85:
                    ef:55:1d:a4:ac:42:fa:bf:1c:70:3d:58:9a:e7:e1:
                    e1:d5:f7:42:2e:7b:7e:7e:01:e7:78:c0:6f:5e:48:
                    af:55:f8:34:b4:89:dc:23:80:0e:da:d5:52:e4:4d:
                    3c:11:e5:94:d3:2c:6e:28:76:45:ba:5c:6b:89:da:
                    69:d0:75:71:e3:dc:f0:12:6e:58:85:67:0b:a1:14:
                    df:1f:75:7a:a1:97:a6:8b:1d:e2:52:eb:bb:c6:85:
                    23:ea:ef:45:93:d3:c2:b2:3c:1d:f2:7a:c1:2c:17:
                    66:0c:58:99:5c:dc:74:46:99:21:12:af:47:8f:9f:
                    27:c4:59:e8:85:c4:c3:1d:45:35:56:6d:45:78:2c:
                    a4:6a:b9:4c:3b:f8:ac:5b:60:c8:6f:4f:d0:56:89:
                    83:99:91:52:4a:b3:91:5a:07:19:f5:33:5d:0d:eb:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:29:A0:49:23:D3:65:56:60:C4:C7:85:A8:07:2C:28:D5:E4:95:6C
            X509v3 Authority Key Identifier:
                keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:18:d3:a8:bf:d8:8b:d5:ae:88:e8:4c:0c:a3:ba:6b:c9:
         6f:92:72:b4:22:6e:ac:9e:d8:09:16:25:0a:68:cc:7c:ea:2f:
         68:58:09:f6:ec:4f:61:80:7a:36:13:4e:9f:86:71:03:93:d1:
         bd:ef:92:1d:73:79:58:1b:40:fa:a1:33:ca:72:59:33:38:9f:
         d8:c7:5e:ac:2e:55:26:68:f6:b6:c1:2e:81:a4:3e:8b:b1:ce:
         ae:40:79:ae:16:ab:6e:d2:a5:28:7f:b3:72:af:68:84:68:2c:
         53:b8:f4:37:b5:0c:9d:77:8d:77:dc:6f:75:1d:d3:41:a1:2e:
         9a:69:ab:93:cb:29:92:23:7b:fa:b4:0a:1b:92:b4:16:54:4d:
         37:9a:66:4b:f8:4d:67:49:dd:99:d5:69:d7:30:03:15:63:24:
         28:e6:dc:bf:ae:d3:23:06:4a:0a:05:c4:a6:66:04:a6:45:58:
         9b:04:7e:1f:b2:0c:64:cd:f6:89:e4:c7:c7:5c:31:65:60:86:
         54:8d:64:1e:28:79:0f:84:d3:45:e0:61:a4:49:23:e9:e2:44:
         6b:70:bf:77:be:2b:2e:f1:1f:eb:bb:70:34:8a:23:db:79:88:
         0c:e7:8d:51:75:f1:52:86:20:72:12:f3:77:2e:cf:cc:83:78:
         41:2a:66:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:29:31 2025 by rpki-client