Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File:                     Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier:          IvcrQoOHMqHKO99AaTba3syuZTynDFoidAxKJwUUFNA=
Subject key identifier:   0B:CD:E9:F6:03:50:B2:DF:8D:BC:4A:DF:8D:B8:EE:0F:26:49:52:E3
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer:       /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial:       0197B70EAC373829A9BB58A114E83EDE9542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 15:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:21 +0000
Files and hashes:         1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: Ohk30cRPdMNgVHrbCwWW76ziVC83dzdyTPo0OMtukgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ac:37:38:29:a9:bb:58:a1:14:e8:3e:de:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
        Validity
            Not Before: Jun 28 15:01:21 2025 GMT
            Not After : Jun 29 15:01:21 2025 GMT
        Subject: CN=0bcde9f60350b2df8dbc4adf8db8ee0f264952e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:48:0e:06:a7:6c:73:f2:fb:c2:e0:3d:f7:
                    e5:b9:1f:50:79:da:37:e9:8f:9f:82:27:50:8e:5d:
                    4d:de:13:7c:40:05:f5:9d:4d:71:da:a6:d5:c7:dd:
                    05:ef:c5:35:51:a0:a3:f0:4f:47:50:2e:19:b8:40:
                    f2:44:f5:98:05:73:19:4f:65:d7:ea:6f:07:e3:e6:
                    45:f2:b1:06:6c:84:ab:5c:1f:b3:50:eb:ab:ec:47:
                    4c:bb:61:70:78:73:37:87:09:17:0b:02:4f:00:10:
                    28:f0:45:25:2d:19:d8:37:6e:ea:72:54:0f:7f:91:
                    3f:62:66:5c:81:fd:b0:90:1f:fc:00:fc:75:10:c3:
                    17:63:8f:94:5c:c8:ee:dd:8e:47:36:29:bf:ca:65:
                    a2:38:28:c5:bf:d0:f3:bb:63:53:e3:f5:c4:dd:7b:
                    a5:ab:43:ac:9d:49:c6:cf:fa:f3:15:e7:70:b0:2a:
                    32:fe:e1:ee:85:7a:f4:a4:c1:b7:15:78:6b:0f:42:
                    d5:ae:4b:df:cd:7c:8b:16:ca:51:26:27:e7:64:5f:
                    df:97:a7:3a:ab:8a:d3:be:f5:3b:93:60:ad:28:7d:
                    ff:cd:1d:a0:8d:ba:5c:1a:72:26:d6:10:fd:20:76:
                    5f:45:45:49:2d:f8:23:1d:c6:9a:b1:31:a0:3d:04:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CD:E9:F6:03:50:B2:DF:8D:BC:4A:DF:8D:B8:EE:0F:26:49:52:E3
            X509v3 Authority Key Identifier:
                keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:5c:d8:f4:83:a3:bd:6e:d3:07:35:11:0e:9d:49:00:91:
         45:c6:eb:38:81:3c:c1:f4:3b:b1:24:db:4e:1e:38:be:e4:9c:
         5d:49:de:a4:41:f5:da:d2:ff:37:7c:06:9c:ee:11:82:a3:f2:
         c9:8b:97:39:2b:05:df:83:02:b0:9a:99:7c:6b:d9:0d:4d:1d:
         59:e7:20:e6:be:a2:87:7e:e7:35:08:a2:16:67:5a:63:10:18:
         37:8d:83:17:9f:01:aa:c4:77:68:6d:6d:58:f5:b2:7c:87:dc:
         f5:36:02:5b:68:24:a6:a5:86:bc:9d:64:b0:3e:81:35:c4:1f:
         74:55:94:8c:49:13:7b:6a:f3:0f:7f:8c:5a:5b:35:64:1e:72:
         78:44:9a:bf:ba:1c:9b:fb:c3:6e:08:2b:ea:a3:96:c0:f6:e9:
         bc:62:2b:63:91:1a:d5:6d:f0:d0:b9:46:30:da:cf:74:2e:47:
         88:62:d2:fb:f6:98:87:93:f3:8a:cb:b0:1c:bd:f5:96:a1:23:
         f6:7e:2d:35:fc:60:47:97:8c:97:cd:11:c5:7e:2a:5a:1a:a3:
         99:81:0a:95:63:dc:24:f4:01:7b:d4:71:93:5d:f7:37:d8:5f:
         4a:16:a9:41:41:ef:2d:6e:e4:05:70:41:ee:52:df:e6:ef:c8:
         e0:d5:bf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:51 2025 by rpki-client