Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
File:                     PteWKLWmD_FIn0c74S1s797hNeY.mft (raw, json)
Hash identifier:          RtDnVw7LdMxCHT6oLnh/Sf8xSbqdbL3uCEdaWMmdtcw=
Subject key identifier:   35:D0:AF:43:0F:0A:14:61:D8:C9:26:36:78:D7:40:4E:A7:07:DA:58
Authority key identifier: 3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
Certificate issuer:       /CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Certificate serial:       01976A06211CD6F1B3C5F2A13B709D9745E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 16:01:15 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:15 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:15 +0000
Files and hashes:         1: 9V4SmqCE6G3meEVbNDEJw-a-tnM.roa (hash: ctCr6DFTt9tJAVlbJj9VYTF14MWfZ7Vz58c3aychzao=)
                          2: PteWKLWmD_FIn0c74S1s797hNeY.crl (hash: 1+mL5E+WjKtEjwyYs0Ap83vSE3aSBVdC6MkvHoFdl9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:06:21:1c:d6:f1:b3:c5:f2:a1:3b:70:9d:97:45:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
        Validity
            Not Before: Jun 13 16:01:15 2025 GMT
            Not After : Jun 14 16:01:15 2025 GMT
        Subject: CN=35d0af430f0a1461d8c9263678d7404ea707da58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:25:23:eb:55:10:c4:df:e6:7f:bf:a6:22:
                    f0:8f:a4:58:c0:7f:b8:40:c7:6b:27:28:f6:d2:6b:
                    70:ea:ba:7c:1a:a8:c6:86:8c:2a:95:6c:fd:ae:2d:
                    6f:38:84:41:cb:9d:57:ec:7b:b0:93:a1:f7:c7:18:
                    52:f9:de:fb:bd:09:8b:90:53:26:5c:bc:f0:4c:5b:
                    c1:9f:06:22:c1:f8:49:75:8e:98:70:07:f9:75:4e:
                    0e:95:8d:45:a5:84:cb:c7:9b:79:a2:f6:a4:08:9f:
                    72:9e:31:a7:83:38:c7:4d:58:b0:70:27:bb:82:45:
                    ac:ca:f5:43:cd:b6:c7:de:c0:21:5f:15:f9:0c:f9:
                    cf:11:3f:e0:ae:14:4e:70:30:0d:a1:0d:23:d4:d2:
                    9a:de:1d:22:79:0c:fd:24:a0:e8:54:75:03:ad:e5:
                    ad:3f:a1:e5:ef:93:30:2c:74:ac:8a:45:b5:ca:45:
                    52:20:3f:3e:05:53:19:88:ea:f7:5d:39:78:05:9c:
                    99:e1:da:fd:ca:e6:45:22:80:8b:55:19:07:1a:85:
                    84:aa:c1:7b:64:7f:a2:3f:39:33:8d:6c:f7:0b:bc:
                    0c:6f:59:14:be:df:37:8c:a6:1e:de:5e:63:77:31:
                    49:69:a6:80:5b:a3:d8:34:1e:b8:13:0c:cd:50:0f:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:AF:43:0F:0A:14:61:D8:C9:26:36:78:D7:40:4E:A7:07:DA:58
            X509v3 Authority Key Identifier:
                keyid:3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:a3:99:5e:c4:ac:4e:2d:81:c8:2b:c1:2e:97:c6:8b:09:
         7a:a4:b6:c8:37:2b:20:53:de:15:0c:c2:00:d1:35:a1:22:52:
         5f:2b:9d:b5:97:cd:0e:b3:ee:a4:59:67:7c:f2:0f:3a:52:c7:
         0b:25:85:01:70:ce:96:34:58:46:85:08:d0:3f:d4:26:78:2c:
         4c:ab:dc:0d:36:c4:d4:ae:9e:2b:52:b0:3b:89:d2:dd:f4:28:
         73:79:b6:bc:a1:93:79:0d:51:ab:19:64:0e:34:6e:d8:9c:4d:
         e9:78:52:d1:16:31:5e:95:e4:dd:80:df:c8:e4:5a:ed:d1:9c:
         b0:df:3b:62:c5:9f:6b:65:b4:08:78:6a:72:6e:1b:c5:26:bb:
         66:99:ed:bb:67:0e:bf:c6:12:3d:90:ea:71:77:a1:d9:70:77:
         7e:10:59:0b:30:1f:62:1e:96:ec:02:9b:31:0a:81:c8:a8:e8:
         df:91:1c:cb:4b:54:dd:b6:66:8a:37:2b:c0:a3:05:37:7f:8c:
         c4:64:10:59:65:ed:48:82:f8:b7:93:4f:26:dd:b8:9c:c2:91:
         85:e2:2e:4d:32:53:0b:7d:9a:64:f0:6e:af:4a:03:99:ed:92:
         a4:c8:7b:5d:c3:55:ed:06:b1:82:75:1e:af:8e:fd:7c:26:52:
         10:8a:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:08 2025 by rpki-client