Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
File:                     pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft (raw, json)
Hash identifier:          Qc0A0vPhRf7IIOFvQHYp35OrDk+AXs2l2yFrqsyAQPI=
Subject key identifier:   77:7E:E0:29:DD:6E:B2:F2:79:FE:5A:5C:E5:9E:36:45:E1:15:C8:F5
Authority key identifier: A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
Certificate issuer:       /CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
Certificate serial:       0197684E16261FA5382BB056519A27FB10A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
Manifest number:          057B
Signing time:             Fri 13 Jun 2025 08:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:37 +0000
Files and hashes:         1: PE72L1MZ6arIopzUHKdO8yRmL1A.roa (hash: GUSnHYNUfV3OxDkdEg/4B//ADgj/Stnyrivs7UGYYYk=)
                          2: pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl (hash: SvggHEpJqw7xZkS1WZ5P8M8ZnzZP8e1s1hvLGZ/847g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:16:26:1f:a5:38:2b:b0:56:51:9a:27:fb:10:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
        Validity
            Not Before: Jun 13 08:00:37 2025 GMT
            Not After : Jun 14 08:00:37 2025 GMT
        Subject: CN=777ee029dd6eb2f279fe5a5ce59e3645e115c8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:6f:64:a9:ee:bb:c0:44:82:77:9b:8d:4a:
                    41:c7:c4:56:2c:fd:2d:d6:bb:53:58:c7:e2:20:22:
                    20:67:d4:94:ac:9b:ee:7e:74:b8:9f:eb:2d:a0:6f:
                    d9:a6:55:10:ad:6d:28:81:cc:ca:1b:08:ce:6e:30:
                    df:e2:20:f7:94:d5:91:4d:6a:bb:89:50:72:b5:80:
                    b1:16:16:45:35:08:fa:d9:be:b7:97:77:2e:d7:b0:
                    fc:ee:01:b1:74:4c:07:cb:a0:d9:01:7d:85:c2:d0:
                    dd:eb:00:b4:dc:c6:0d:03:1e:ab:4f:7a:41:7a:8d:
                    95:32:32:49:b2:b4:62:89:51:87:4a:76:7b:a4:69:
                    ef:d3:50:b8:9f:05:5a:05:55:56:4c:71:19:18:26:
                    53:7a:5c:4a:91:30:b4:3f:35:75:ed:18:a8:44:39:
                    85:26:f9:fb:a8:45:18:ba:cf:52:aa:51:79:d9:78:
                    b5:c5:f0:1e:2f:68:87:46:b5:d5:f2:9e:10:dc:75:
                    28:60:19:60:5f:c4:96:fa:de:11:f0:d3:1d:94:2a:
                    2d:7c:14:35:20:98:e3:38:62:24:04:c5:89:23:22:
                    43:49:5c:2b:c8:61:84:8b:42:2c:f5:a1:cf:55:56:
                    58:d0:63:02:fe:08:33:f5:ec:d7:ad:51:0e:a6:16:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7E:E0:29:DD:6E:B2:F2:79:FE:5A:5C:E5:9E:36:45:E1:15:C8:F5
            X509v3 Authority Key Identifier:
                keyid:A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:70:11:2b:ab:cc:a8:d4:02:9f:77:1a:9f:57:97:e3:41:c3:
         4a:64:a9:c6:c4:3d:94:92:82:71:a0:71:d1:b6:26:b6:aa:61:
         db:8c:04:7c:10:e0:1c:3b:61:11:e2:46:6e:48:95:f4:a1:42:
         d2:f3:44:c4:d2:a0:af:67:e9:86:ed:5e:b6:24:04:54:a0:f6:
         68:71:0b:00:45:2e:69:14:16:1f:e5:8b:c7:42:11:58:34:ca:
         dd:7a:8a:5b:84:ce:57:de:77:38:c9:de:0e:58:e9:6f:4d:d7:
         7b:7f:6f:9c:20:f2:88:8f:ff:d3:cf:0d:8e:c1:5d:45:72:54:
         87:1e:bf:ee:24:d0:2c:17:a2:02:81:a0:08:1f:7f:0f:46:28:
         e7:e3:27:23:d1:83:8c:8a:06:da:ee:b3:fa:fc:dc:44:6d:d8:
         5a:ca:e0:5b:e9:6f:5f:e5:bd:47:bd:e1:e1:04:55:6b:a7:b2:
         97:77:ad:0b:77:e7:d9:33:f6:d6:ea:82:22:b6:a6:42:1f:17:
         0a:d4:74:b9:bb:5e:c8:2c:f6:4e:eb:49:02:9a:37:73:e4:c5:
         3c:00:0c:03:70:01:4b:42:3b:43:71:f6:48:10:57:00:2a:9e:
         3b:f7:98:dd:45:77:ba:28:3b:e2:c7:09:1c:32:a8:e8:3a:6d:
         e9:1f:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:14 2025 by rpki-client