Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
File:                     pcvT2g02IF_SyP0d-VXFC1UB7dE.mft (raw, json)
Hash identifier:          5TRsQ9GeQH7wTMEdDl5Bghpl3+nL6P8d3uwmEbzjk+M=
Subject key identifier:   50:FA:55:C2:88:6B:14:09:C5:7B:CA:83:52:E8:05:84:75:0A:B8:0A
Authority key identifier: A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
Certificate issuer:       /CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Certificate serial:       0197B7EA9B0C379402218E18026771C31D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
Manifest number:          62
Signing time:             Sat 28 Jun 2025 19:01:35 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:35 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:35 +0000
Files and hashes:         1: pcvT2g02IF_SyP0d-VXFC1UB7dE.crl (hash: 5ZT5N1KqKLfw72CoQTnbQrSuK5ZS5p/7adLrdHq/ZPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:9b:0c:37:94:02:21:8e:18:02:67:71:c3:1d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
        Validity
            Not Before: Jun 28 19:01:35 2025 GMT
            Not After : Jun 29 19:01:35 2025 GMT
        Subject: CN=50fa55c2886b1409c57bca8352e80584750ab80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:60:0f:24:82:e8:92:2d:0f:de:ea:7d:ca:57:
                    69:94:64:65:28:49:c0:af:be:8c:12:78:48:05:58:
                    09:31:e4:4b:2f:48:bb:2e:f0:0b:13:c4:82:e1:06:
                    e9:d3:44:e7:76:4c:18:a6:59:71:a7:fb:8c:95:b8:
                    32:30:04:de:77:24:c9:47:03:db:a2:a7:b7:14:74:
                    c4:b9:95:f0:9f:ac:34:0d:e4:cb:2d:1b:e9:61:bd:
                    8b:ac:16:c8:a3:c4:33:94:44:22:9d:36:64:78:3f:
                    f5:f6:f8:7c:31:1d:bf:df:58:1a:c2:59:1f:3e:5b:
                    78:44:d8:73:ed:d2:19:be:da:ae:12:ed:38:47:50:
                    94:df:7c:6f:52:7b:e5:9c:ec:dd:ac:ff:91:e1:35:
                    39:43:71:10:70:93:6f:58:fa:29:9e:a6:6a:be:98:
                    73:9f:b4:32:6c:b2:3f:72:87:57:dc:3c:e7:80:43:
                    9d:21:09:30:f7:7b:f0:de:08:cb:81:54:46:5a:85:
                    80:ce:ad:d3:85:8c:d6:b3:4e:cc:28:f4:49:81:11:
                    79:11:4d:55:9b:23:5d:68:a9:93:40:43:4d:b0:79:
                    ce:0a:44:ae:50:44:eb:74:ae:8c:b7:98:47:22:4e:
                    cb:7f:1b:8c:3d:c2:ba:09:22:f9:60:aa:b6:23:93:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:55:C2:88:6B:14:09:C5:7B:CA:83:52:E8:05:84:75:0A:B8:0A
            X509v3 Authority Key Identifier:
                keyid:A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:5a:c6:bb:66:3f:e3:c7:c6:df:5c:58:8c:95:d8:dd:16:
         28:29:6c:b0:cc:93:0a:15:af:19:43:89:a3:de:35:b8:7c:76:
         1a:3d:62:84:b2:b4:d2:9f:6c:09:76:d9:95:73:42:fd:60:b9:
         dc:cf:89:b6:d7:ea:4c:54:f8:03:43:29:99:e5:e6:e2:7a:ee:
         5f:8e:f5:f9:1b:00:84:dc:d8:a0:c5:58:f4:07:ab:a0:51:ba:
         61:7d:aa:5a:b9:27:f1:b6:11:30:65:30:1c:c8:94:6b:d4:60:
         e0:61:00:75:7a:a8:ee:e0:80:14:62:26:f5:62:82:47:e9:72:
         3f:83:94:44:0b:2f:9a:68:96:70:f0:f0:43:2f:d6:8e:79:3a:
         86:44:13:1c:18:aa:c9:07:4c:2e:0e:8f:a1:ef:a4:49:84:1c:
         ae:00:09:6c:86:10:f7:3e:9e:01:ae:37:21:32:2c:0e:09:2a:
         fd:bf:02:59:48:c5:f9:29:53:85:85:7a:eb:8f:aa:d6:b8:52:
         d1:ef:36:e5:b3:5b:2d:e7:98:36:47:94:6e:9d:3f:a1:11:82:
         8d:ba:a1:20:16:12:58:bc:32:dc:60:bc:7e:3c:ac:3d:f1:f1:
         1b:b5:1c:01:62:d3:05:c9:23:81:80:fd:64:97:36:87:6d:e8:
         b6:ac:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:39 2025 by rpki-client