Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          9AJFJgRF2eO9JbiEuX/X4iyu2JMBGtpt1RNeyd/a3F4=
Subject key identifier:   FF:A7:D9:CB:A9:01:BC:1A:B6:C9:FB:3B:CF:A0:A5:FF:6A:20:1A:B1
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       0196C238EA76FAECD950526BF8F440280F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          1534
Signing time:             Mon 12 May 2025 02:00:32 +0000
Manifest this update:     Mon 12 May 2025 02:00:32 +0000
Manifest next update:     Tue 13 May 2025 02:00:32 +0000
Files and hashes:         1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: 1aBTJBYzA7LMsSw/g9Kpnbh/RsfWnzG4Pf9Y/Y7OUOM=)
                          2: k0fv_0lBTVHhkgh3M6y4FfdKWug.roa (hash: NS6EWo/2W4cdxM4+yYUneBPcsKtB9dlJYih0Lk7s4iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:38:ea:76:fa:ec:d9:50:52:6b:f8:f4:40:28:0f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: May 12 02:00:32 2025 GMT
            Not After : May 13 02:00:32 2025 GMT
        Subject: CN=ffa7d9cba901bc1ab6c9fb3bcfa0a5ff6a201ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:ce:a7:69:2b:df:ba:16:a0:1a:a7:80:09:
                    5f:a5:56:26:b7:05:97:97:13:d6:31:8b:63:97:54:
                    05:88:9f:3c:6f:01:f3:bc:28:26:de:89:e1:30:bf:
                    ff:b9:b5:5d:aa:b1:ee:fb:26:ba:66:7c:02:e0:34:
                    c5:5f:e1:93:d1:01:93:86:f6:e1:d2:96:c3:62:a8:
                    ef:60:04:03:b8:19:da:1e:47:02:2f:3a:2f:eb:dd:
                    c5:64:1c:00:cf:b7:70:71:85:eb:d7:f7:ae:7e:9d:
                    6e:08:a0:36:9d:b5:7b:3c:ef:d7:bf:cb:d2:54:d1:
                    67:d1:e3:cf:ce:3b:92:53:62:25:52:7f:f0:f5:c3:
                    48:3b:c6:8c:9a:f3:21:e7:10:7e:1a:39:11:3e:a6:
                    be:da:05:c7:81:c8:17:2f:87:6a:0f:38:05:22:1f:
                    a3:c7:3e:82:38:f1:ab:fe:a3:82:44:df:8d:15:5b:
                    63:6d:a2:07:bd:19:61:ec:37:3b:02:4d:b2:b6:6f:
                    76:34:b1:9a:f3:fc:26:db:5a:b3:39:2a:45:a4:04:
                    cf:fc:61:a0:99:92:13:22:ee:08:cd:c6:02:10:09:
                    4f:10:39:1e:da:59:ed:2e:58:79:75:e0:d3:a8:e2:
                    ec:79:d9:76:f6:38:49:4c:da:78:b0:1b:15:06:e2:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:D9:CB:A9:01:BC:1A:B6:C9:FB:3B:CF:A0:A5:FF:6A:20:1A:B1
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:76:56:de:7e:9c:05:84:a8:74:5a:76:58:28:72:34:9c:
         93:07:3c:b5:14:c9:48:57:55:34:dc:91:85:59:7e:20:5f:0b:
         bd:f4:3b:3b:f5:9a:7c:aa:84:8f:2d:3a:bb:ee:30:8f:80:f2:
         59:dd:72:9d:95:14:d7:d1:d2:0a:dd:1f:9b:5c:57:2d:63:80:
         87:d7:0d:3d:97:96:fc:d9:c3:24:c7:48:81:c3:e0:c2:3a:8c:
         6d:b3:a7:fc:e6:dc:f2:b6:ea:a7:be:b5:2a:69:90:ba:28:d4:
         3a:cf:37:7b:f2:40:ef:5b:5f:d4:6d:22:e9:28:08:99:3e:77:
         8c:d3:0e:0b:5c:86:91:3c:ff:2c:e0:64:cc:04:24:5b:9e:d4:
         5b:0d:f2:a8:b3:f3:70:5b:08:cd:6e:3b:fd:71:a3:87:3d:39:
         43:da:d9:1b:57:fb:e2:d5:0b:a7:18:b9:8d:4d:32:7a:c0:b1:
         eb:0e:02:18:db:62:fa:d8:78:a5:78:8f:44:55:d3:60:08:de:
         9f:f5:a9:e7:c4:23:5f:b8:dd:a8:33:83:7e:70:b9:b3:be:62:
         55:28:5b:14:c1:72:c9:8e:13:06:9e:8e:0d:87:93:47:c5:63:
         9f:91:aa:46:a0:55:6b:d0:c6:30:7e:f9:c9:35:28:8a:19:f2:
         6f:85:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:52 2025 by rpki-client