Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
File:                     pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json)
Hash identifier:          t1bkUxkOMn3whLGlu6nwbUTo+Wmknqi4Gssxumh0wvg=
Subject key identifier:   6D:78:54:50:01:96:E6:DA:D0:7D:09:6F:F4:AF:22:DE:AA:60:17:ED
Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F
Certificate issuer:       /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
Certificate serial:       0197B6A145E1FC025ACB167F31BEF5929118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
Manifest number:          031E
Signing time:             Sat 28 Jun 2025 13:01:51 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:51 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:51 +0000
Files and hashes:         1: dz9PyU4ctyXKZ49cHOyHFCLYwcU.roa (hash: 3Y8oozkK4fYw8w+acos4s7WtEJkSyImOIymISL/lshA=)
                          2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: Pn1ZluZNE0a9Z4bjz8THt5dR+VpkA1jVomnohp2gUqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:45:e1:fc:02:5a:cb:16:7f:31:be:f5:92:91:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f
        Validity
            Not Before: Jun 28 13:01:51 2025 GMT
            Not After : Jun 29 13:01:51 2025 GMT
        Subject: CN=6d7854500196e6dad07d096ff4af22deaa6017ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:14:16:6f:d3:8d:15:70:22:e4:38:96:da:
                    43:99:dc:fa:be:30:89:fd:d9:ba:37:94:fc:d1:b7:
                    6b:bc:02:63:87:8f:d8:4b:47:2a:23:9c:65:aa:d4:
                    e2:99:6d:55:91:28:1e:cc:fd:c0:6c:dc:8d:cd:d8:
                    04:b8:bd:0d:f7:a1:bd:3a:f0:c5:a8:e7:a5:b3:40:
                    a4:49:d6:6a:f4:61:e5:63:68:a6:cd:b6:ea:21:a0:
                    e1:42:f2:f5:f4:9f:84:14:a8:d9:d5:52:76:29:44:
                    0a:e5:3d:cc:49:ee:19:6a:67:79:cb:69:b1:bf:f2:
                    71:93:94:fd:cf:f9:b6:16:c0:83:06:9f:7f:7e:23:
                    b2:6b:3e:8a:28:13:fa:dc:69:45:72:fd:97:17:0b:
                    12:27:f7:ef:43:cc:00:aa:b4:67:87:d1:1a:c0:18:
                    58:08:57:9c:f3:a8:41:b7:02:3d:d7:bb:9f:14:9f:
                    d8:73:3f:62:57:fe:6f:57:5e:eb:1d:1c:b8:68:9e:
                    3d:1f:64:de:77:ae:1e:a6:2a:72:5b:73:b7:9c:7d:
                    5f:f3:1e:b4:1e:65:0c:48:47:4c:03:60:28:7e:ea:
                    66:30:9f:bf:97:9f:52:4a:c3:cb:04:24:26:1a:4b:
                    17:49:d0:dd:cb:af:aa:63:02:9a:cf:06:a9:33:19:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:78:54:50:01:96:E6:DA:D0:7D:09:6F:F4:AF:22:DE:AA:60:17:ED
            X509v3 Authority Key Identifier:
                keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:24:9c:de:4b:85:88:ac:69:9d:a4:6d:dd:65:c6:4b:fc:ec:
         dd:72:84:89:67:55:69:4c:c0:27:81:34:da:4d:93:72:10:56:
         70:b2:1e:e1:eb:9e:c0:ca:03:c4:e0:a3:ad:91:93:71:4f:64:
         01:89:cd:93:81:15:b8:68:b9:30:07:76:fb:a0:aa:7c:09:19:
         bc:53:8a:41:6f:1a:51:e7:06:b3:c6:9d:dc:5a:fa:a1:89:7c:
         b1:13:ee:71:8a:ab:19:ce:4a:e3:6d:5b:2d:58:37:56:17:eb:
         d9:c3:2e:97:f9:33:98:72:0e:0d:3c:71:60:5a:dd:ff:59:72:
         4e:d5:bf:ba:1e:91:3e:09:80:ac:bc:4c:5d:04:f2:40:8c:34:
         47:42:53:9b:58:e4:c7:21:ba:18:b7:53:6f:c8:9d:eb:d3:b5:
         1e:fa:fe:49:8d:0e:24:9d:f6:e0:96:ea:b7:ab:b9:68:91:24:
         de:b0:27:db:ff:c7:3a:62:ea:d4:67:0f:ab:11:48:72:36:96:
         02:34:fb:24:00:b0:d8:4c:55:41:01:78:6a:04:2f:bb:3e:1b:
         18:6b:a8:ed:9f:e3:83:f0:65:70:88:88:cb:db:95:ec:db:22:
         d4:00:eb:3e:44:26:a4:8a:d8:2c:f1:e7:fd:24:f3:08:e5:a0:
         9c:42:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:50 2025 by rpki-client