Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File:                     PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier:          XL9sssf5JYy4yCuC7QZbMUVwnAa6gvdT7O1gvhyDJrE=
Subject key identifier:   32:2F:2A:47:A4:9B:A9:37:59:2E:A3:76:30:54:0B:13:06:06:D2:0C
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer:       /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial:       0197B70EADC057D3EEF49ECB8690B2A57C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number:          0DAC
Signing time:             Sat 28 Jun 2025 15:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:21 +0000
Files and hashes:         1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=)
                          2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: n1s1aZnaTTaX5g7VS4i/u8DkEWlqRmvKhjgqwJOyBA4=)
                          3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ad:c0:57:d3:ee:f4:9e:cb:86:90:b2:a5:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
        Validity
            Not Before: Jun 28 15:01:21 2025 GMT
            Not After : Jun 29 15:01:21 2025 GMT
        Subject: CN=322f2a47a49ba937592ea37630540b130606d20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:5d:82:69:b1:87:21:9c:08:f2:ac:71:28:
                    96:75:85:fc:49:ef:c0:ee:1d:9b:da:11:38:a2:db:
                    18:2f:3e:ab:ec:37:47:2c:9d:a8:32:86:23:c5:2f:
                    dd:05:26:6d:31:61:69:83:fe:90:83:f3:d9:c1:3a:
                    fc:9b:2b:42:e6:4c:bc:c3:71:b9:ae:68:34:7c:33:
                    81:7c:d7:b2:11:68:b2:70:ba:cd:e9:a2:a2:1c:b8:
                    fa:67:7a:79:5f:1c:4d:35:e8:6f:d1:65:be:5f:62:
                    35:a9:dd:62:8b:37:86:4e:2e:12:a7:77:a9:75:b8:
                    bd:e6:da:3b:c8:8f:fe:26:2b:3c:44:b0:c4:cc:66:
                    f7:6d:2a:64:8f:2a:95:cd:4c:ec:3e:ca:31:db:86:
                    c2:34:b9:5f:6e:a2:c4:f1:59:0d:68:51:62:d6:9a:
                    7c:b6:05:72:9d:f7:dc:0a:fe:cb:ba:5c:77:6e:44:
                    68:80:ea:e7:9a:b7:75:1b:bf:8f:2a:3f:4e:0c:fc:
                    2d:b9:42:38:66:c9:f4:4d:f9:33:b2:02:f8:21:4a:
                    98:65:a9:aa:a4:25:95:9d:29:7a:9c:a8:90:8f:65:
                    98:99:26:af:8e:97:a3:35:30:be:53:11:98:24:9a:
                    06:dd:c2:b9:e1:b4:09:21:46:a1:30:cc:71:f0:6a:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:2A:47:A4:9B:A9:37:59:2E:A3:76:30:54:0B:13:06:06:D2:0C
            X509v3 Authority Key Identifier:
                keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:0e:1f:ae:20:c8:58:39:af:1a:b7:ea:5f:31:75:c0:93:
         c3:c2:6a:eb:b0:65:4f:49:00:66:a6:95:fb:a9:7b:6b:6c:3e:
         6f:7f:07:db:c8:e3:d2:e3:a3:e5:18:36:7c:95:16:e3:f8:13:
         95:49:2f:a0:12:1d:fb:a1:48:d8:3e:59:25:7e:23:84:3b:97:
         d4:60:94:6e:6b:41:b0:1c:6a:d1:8f:31:8f:e5:53:13:2e:ec:
         22:ea:7c:92:d3:f0:28:c3:3c:ff:d1:94:b9:7a:30:f4:b3:4e:
         2e:d0:94:25:c6:11:d2:03:5f:f0:67:94:5d:ba:04:71:9b:37:
         cd:34:c2:f6:61:5a:1d:d3:95:3e:8e:da:8e:a8:75:f3:55:39:
         4d:40:28:86:31:24:c5:62:e8:8e:c5:50:4f:91:64:e5:c9:ae:
         f2:b6:0a:c3:1e:47:56:85:07:47:b2:20:ec:52:50:a4:63:e4:
         d3:fb:da:97:15:8f:5e:1b:36:f3:f9:0d:bc:9a:84:a0:3f:ec:
         4c:b9:98:1b:6e:b9:62:57:bb:ed:67:12:83:ca:e0:8b:ef:68:
         9c:a0:a3:e1:0c:0a:c8:ca:da:41:d6:2f:59:5f:80:66:96:ce:
         f8:c6:39:12:ef:ee:5a:ba:ce:63:3c:d0:7a:27:cc:7d:30:43:
         ef:be:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:33 2025 by rpki-client