Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File:                     pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier:          hBOHfajpQdB1QarKl0JkjLhOQtizQlQ4nw1G8QTwHiU=
Subject key identifier:   57:B0:F5:33:E8:2E:C7:52:1B:E3:96:F5:CB:F9:48:6A:3B:B3:F9:A8
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer:       /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial:       0197B96B081928092ABA93AF1808B4BCD78B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number:          0C6C
Signing time:             Sun 29 Jun 2025 02:01:28 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:28 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:28 +0000
Files and hashes:         1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
                          2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: RPE5MeRiKk6m5PoAuM8lm074psX7SsG2lwFBI8s/7AM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:08:19:28:09:2a:ba:93:af:18:08:b4:bc:d7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
        Validity
            Not Before: Jun 29 02:01:28 2025 GMT
            Not After : Jun 30 02:01:28 2025 GMT
        Subject: CN=57b0f533e82ec7521be396f5cbf9486a3bb3f9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:56:b4:dd:2d:d9:5c:d7:15:0d:58:e4:9c:ef:
                    b4:5d:bf:91:74:96:7b:24:32:80:8e:58:4e:aa:52:
                    18:89:ea:f5:83:72:17:52:5d:ef:8c:d2:c9:23:ba:
                    8b:ac:a2:70:54:d5:c1:e5:fd:90:b2:28:5c:d6:0c:
                    31:5e:69:32:48:fb:ab:b8:27:f7:01:ca:7b:eb:16:
                    4c:05:f3:44:5c:f5:38:04:da:2d:4a:c9:d9:95:0d:
                    c2:f1:84:5b:7c:55:50:fb:d0:80:53:38:e3:6d:53:
                    8d:8c:8e:07:e2:f5:37:22:e4:30:1e:74:2c:a5:bf:
                    d3:5b:b4:69:6c:b2:71:c5:5b:8d:1a:3f:0e:84:e8:
                    c5:86:32:27:61:80:a2:31:44:01:76:96:fa:b2:0f:
                    31:df:56:a0:c3:13:c6:1c:a4:74:41:66:69:5f:27:
                    3a:61:36:a0:9c:51:67:fd:0e:7f:08:dc:3d:19:ee:
                    ad:c6:1b:51:40:0c:67:45:ff:68:41:4f:4e:cc:5e:
                    d3:5b:6b:8d:3b:55:d0:86:68:aa:44:df:c9:ae:10:
                    30:de:a5:27:62:ce:bd:22:6e:74:87:eb:44:f5:14:
                    ea:ec:bb:c3:42:df:c8:a0:a1:83:51:80:e8:b9:64:
                    f3:08:ad:a5:dc:bf:a0:be:e4:18:84:c5:e3:5c:5d:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B0:F5:33:E8:2E:C7:52:1B:E3:96:F5:CB:F9:48:6A:3B:B3:F9:A8
            X509v3 Authority Key Identifier:
                keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:29:0c:ef:8d:bb:00:c2:4b:0a:05:4f:7d:2a:87:ef:06:3c:
         91:72:2a:81:99:8c:41:92:c8:69:a3:59:d2:c4:89:99:3c:00:
         8a:3c:17:c5:87:e0:77:a1:77:ff:a1:93:8f:4e:34:b5:23:44:
         e1:bb:41:58:7f:68:ff:7a:8a:a7:6f:49:f9:40:c3:4e:62:d6:
         28:81:b2:be:34:a9:82:52:2b:24:27:c7:ff:b7:c6:b1:e0:df:
         6d:b0:fe:4e:8f:2b:8d:3b:cb:f9:f9:21:66:cf:96:8e:e5:bc:
         a4:75:eb:42:07:f9:a6:11:67:9a:f4:02:a0:9c:88:ce:7d:21:
         0e:a4:c7:f6:5c:d5:d9:cd:00:00:99:49:31:4b:2c:5e:f8:55:
         f5:57:4f:cd:f4:2e:18:3d:af:56:98:f6:95:ea:ff:b9:28:48:
         ae:30:2c:e9:45:bf:be:ca:be:0c:5d:8d:15:f5:ea:eb:64:68:
         a0:17:2c:78:dc:df:7e:47:97:c8:79:b3:ee:36:c2:60:56:99:
         4d:95:e9:cc:75:ac:eb:05:76:75:d7:b3:d2:da:ce:78:9a:8b:
         36:98:7c:96:1e:c1:2e:90:f4:e4:db:b9:98:c1:4d:f1:22:d4:
         65:7d:6b:89:13:f1:25:3a:fc:a5:4a:b7:0b:57:94:4b:99:b5:
         a5:48:c0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:23:23 2025 by rpki-client