Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File:                     S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier:          FjN5hlvACZzSQ8cBJZoVaJF6fx2VYzlAum6IkyO3MC8=
Subject key identifier:   F6:39:37:D7:9A:24:B1:D8:49:E3:9E:6D:76:A0:22:25:E7:EB:92:4A
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer:       /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial:       0197B6D75AF0CB277FC9CE2F02B6304E289D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number:          156B
Signing time:             Sat 28 Jun 2025 14:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:56 +0000
Files and hashes:         1: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: 88NuED4kK1TFathFqSdkVbiboIUnTJCZUxkJZ9SpHhk=)
                          2: zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa (hash: KQ8uWDK74BxQd55e4CkD8HOGjkQGRjBDcA3U74QNwgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:5a:f0:cb:27:7f:c9:ce:2f:02:b6:30:4e:28:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
        Validity
            Not Before: Jun 28 14:00:56 2025 GMT
            Not After : Jun 29 14:00:56 2025 GMT
        Subject: CN=f63937d79a24b1d849e39e6d76a02225e7eb924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:05:c6:0f:e7:70:fc:0c:38:9f:25:c0:92:
                    fd:c5:26:88:81:4f:61:28:0c:f9:7b:a8:55:29:ec:
                    88:c9:1b:1c:20:38:98:ab:8d:00:cd:76:73:8b:fd:
                    1a:9c:00:8e:fe:d8:0d:28:4a:db:cc:2e:27:85:9c:
                    c1:2b:4d:64:47:e7:9c:12:3d:f1:84:97:f2:c8:1a:
                    61:86:95:38:f7:29:1e:d3:b6:c8:9d:1b:e4:2d:f1:
                    b3:01:b2:c0:46:e7:b3:a2:9a:7e:bc:11:a5:44:1c:
                    69:59:d0:eb:2d:6f:51:18:f3:1c:87:e0:45:09:3f:
                    6a:c2:10:cd:2f:c7:ac:43:b8:76:3a:8e:3f:1d:88:
                    39:f3:82:30:eb:c1:d0:b7:46:f8:ee:16:88:97:ac:
                    31:81:dc:75:c9:ad:cd:bc:ca:49:66:7f:60:ab:4f:
                    c5:88:95:ff:26:73:c1:a7:99:e5:36:c3:3d:bb:4b:
                    f5:ab:86:5e:8d:76:eb:1f:38:e6:68:8d:81:53:d3:
                    4b:4e:aa:45:b7:55:52:a1:92:5b:6d:a5:f9:22:63:
                    67:51:ae:24:04:e0:dc:81:98:02:ab:15:67:69:f4:
                    65:0b:4c:2a:17:ac:10:6d:98:ce:7b:6a:c8:5f:7c:
                    89:3c:7a:14:e1:c1:46:97:5a:ea:6a:31:8e:98:74:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:39:37:D7:9A:24:B1:D8:49:E3:9E:6D:76:A0:22:25:E7:EB:92:4A
            X509v3 Authority Key Identifier:
                keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:56:68:40:79:1a:b4:08:cf:8f:02:db:fd:18:ae:f3:3b:81:
         cf:d9:28:c8:0c:57:c9:5e:7c:91:d9:68:6d:b2:4d:72:8a:a8:
         04:e5:9b:73:a5:b6:c4:40:2a:59:64:d1:82:33:ac:96:d1:bb:
         d6:7d:bc:60:07:c0:03:e2:25:c2:46:80:18:5f:15:8f:2d:2b:
         c9:68:0d:aa:d8:9b:23:c7:cb:ef:74:9b:f2:eb:da:90:60:e5:
         79:3d:a7:c6:52:88:28:ab:05:1e:bc:f1:05:fd:99:9d:91:6d:
         d4:ad:78:53:a4:28:7f:08:b2:30:d7:34:c8:f7:8b:bf:24:dd:
         3f:b9:bf:f6:a4:31:f1:f4:ad:0c:f1:f6:87:11:57:ac:df:c5:
         fd:43:e2:31:08:b5:de:aa:cb:57:6a:04:cf:d9:f7:82:c6:3f:
         ca:25:dc:ab:f6:47:1b:94:17:ac:89:29:d4:15:79:41:4b:c7:
         d6:61:4a:40:53:f2:00:d3:88:32:58:be:13:cd:42:ef:a5:af:
         9e:de:bb:be:8f:ea:6b:15:78:0d:d9:66:08:6f:83:57:fd:53:
         27:99:61:a5:27:af:dc:2f:bb:14:0f:77:d2:a0:83:37:0d:8a:
         87:67:85:2d:b8:1f:f0:6d:fb:73:3d:a8:c1:e9:47:ac:8e:53:
         39:3a:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:12 2025 by rpki-client