Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File:                     PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier:          GzY9OYvluVjhNiBcqs7cvV+5HXRuEDjjixBc9E7E+n4=
Subject key identifier:   90:5C:AD:BD:FE:9F:E8:8D:7A:A5:8A:3D:CD:08:7B:FA:13:34:8B:E1
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer:       /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial:       01977F7AEC3B7B80D2A4FC4BA051C4D0A347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number:          01F4
Signing time:             Tue 17 Jun 2025 20:00:51 +0000
Manifest this update:     Tue 17 Jun 2025 20:00:51 +0000
Manifest next update:     Wed 18 Jun 2025 20:00:51 +0000
Files and hashes:         1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
                          2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: jF/8dFzC2QccD8gJekK8MSrmgYXy+P0JCvEgj5X8ulY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:7a:ec:3b:7b:80:d2:a4:fc:4b:a0:51:c4:d0:a3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
        Validity
            Not Before: Jun 17 20:00:51 2025 GMT
            Not After : Jun 18 20:00:51 2025 GMT
        Subject: CN=905cadbdfe9fe88d7aa58a3dcd087bfa13348be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:6d:3b:fd:99:39:bb:50:42:f7:9c:c1:f5:
                    bc:cf:63:59:81:19:31:7e:a1:04:80:f5:ab:c1:4f:
                    e4:d4:6f:c4:e2:88:42:87:ea:c0:c3:ad:e2:13:7c:
                    c1:35:34:59:2c:93:37:da:6e:ae:5c:85:62:e3:b7:
                    d1:39:e0:9e:0f:15:ec:13:48:98:1d:83:2d:d0:fa:
                    80:a1:fc:82:ca:22:92:82:43:0d:95:fd:25:f9:7f:
                    29:4c:ba:a3:6b:93:92:f6:ab:c6:92:44:ca:5f:64:
                    9f:10:38:c5:58:86:d4:fc:ec:6e:f0:bb:d2:87:63:
                    4a:96:ab:fb:9d:9a:2f:0d:f2:86:df:39:d7:3a:4b:
                    5c:d7:f8:c7:c4:a9:7e:5c:ef:85:28:17:45:7a:cb:
                    2c:3a:ad:66:a6:f7:f0:f5:07:e6:4c:98:cd:0c:e7:
                    5f:f9:81:a4:fb:41:e8:54:b7:7c:5f:b5:37:fb:2c:
                    31:de:94:3f:f7:2d:72:af:3e:4f:6f:8d:a0:78:5e:
                    74:46:b6:11:51:9d:d5:6b:99:41:4e:a3:3f:32:20:
                    a3:1d:b7:ea:9e:02:d6:b5:68:0c:33:c2:28:5a:47:
                    ee:15:e0:15:2e:e7:62:26:3f:aa:94:aa:06:bc:4f:
                    06:33:ac:65:21:37:8c:2a:06:fd:63:17:f7:0b:f4:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5C:AD:BD:FE:9F:E8:8D:7A:A5:8A:3D:CD:08:7B:FA:13:34:8B:E1
            X509v3 Authority Key Identifier:
                keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:67:09:95:f3:b3:f5:fa:b9:ba:8c:3e:96:22:6a:80:19:60:
         6e:ae:5a:59:8f:fe:a6:6a:d6:5e:4d:55:cd:49:d2:5a:c8:ac:
         02:01:97:ac:a4:9e:89:7b:0b:44:8e:fd:c3:35:d2:c0:f7:0a:
         44:81:7b:3f:75:65:09:1d:8b:07:15:4e:0d:73:df:49:f8:21:
         43:2c:71:97:eb:c1:d1:f9:d2:53:ee:de:19:d7:cf:07:01:64:
         e0:2c:be:34:01:75:e0:f5:ee:60:57:09:5f:39:40:bc:86:71:
         5f:db:a0:6b:9d:bd:7b:0b:c9:fd:d8:fb:67:50:3b:d3:cc:f1:
         24:c7:54:13:a2:48:0b:5d:40:46:84:62:68:5c:b2:51:9b:94:
         cb:48:49:dc:57:e3:08:d3:48:c0:ab:f3:04:c8:a0:f5:63:30:
         ff:88:b5:e4:55:a8:2c:d6:d4:43:e8:5e:b9:3b:d7:ab:8a:43:
         27:d1:ec:ae:2b:13:d2:0c:0d:17:6a:70:e4:d1:2c:07:50:fe:
         41:08:dc:bf:cf:60:61:70:72:4b:b3:14:53:4b:14:93:c5:4d:
         e5:81:cc:f4:d7:ca:07:15:84:7f:40:1f:98:ab:d8:7d:6a:6c:
         34:94:26:0c:38:7d:76:5a:ae:f3:ce:94:95:b8:97:60:66:3c:
         c2:92:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:54:43 2025 by rpki-client