Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File:                     PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier:          4SNQL5+zBOP7erRErmxZNK0wWKB52AZjtUNC76OXiAo=
Subject key identifier:   79:99:69:AB:50:B8:40:B8:1B:FD:41:98:5D:E7:15:2F:4A:8F:09:0F
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer:       /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial:       01965500D5A259F27C91642AB21817155385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number:          04FE
Signing time:             Sun 20 Apr 2025 21:00:40 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:40 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:40 +0000
Files and hashes:         1: NtKyDgbGesEe8awF15SqP0_3q5E.roa (hash: 5/QwTKhvWnKsc5Bc5M0m9rQLZKRH4InU93sknSCwHzs=)
                          2: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: E8Eq8A/0ZzVIupQ61h+JHWAiqn7+fTY/xClKtQNuF8w=)
                          3: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (hash: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=)
                          4: hUje3HFTF6f1DLkrPmJro0BJv84.roa (hash: kR65nTDvmrqvVF+VEljMTGu7vMzX0EU8UFNtyZDk3w8=)
                          5: i63lT8gZ80ZQnoxkIIq3_XH-qGo.roa (hash: u7r5j40jao9jpdMvyg5KQYNAFcKXMkC3d+QE0v1EduY=)
                          6: ibMRX0UskUZ1fKV63OderSyFGp4.roa (hash: eA4MV5O6XQVzVYEe9jvmxnmU146aKwd4Gt1iGOJqAdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:d5:a2:59:f2:7c:91:64:2a:b2:18:17:15:53:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
        Validity
            Not Before: Apr 20 21:00:40 2025 GMT
            Not After : Apr 21 21:00:40 2025 GMT
        Subject: CN=799969ab50b840b81bfd41985de7152f4a8f090f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:b1:5d:25:26:25:7b:81:41:56:97:7e:51:
                    bb:75:48:a9:6f:b0:a4:84:0c:26:53:6f:35:2a:2a:
                    17:aa:bd:f9:d6:7b:c7:6f:60:df:81:f5:01:97:c0:
                    dc:7e:32:9c:12:75:a4:99:7c:dd:27:1d:76:43:f1:
                    50:a7:fb:3b:95:cb:5b:0d:e3:02:5b:86:27:b7:f6:
                    c7:9a:10:4a:a7:cd:ba:96:4d:29:91:19:99:72:1c:
                    7d:7f:29:93:09:81:54:4b:8a:31:ea:c1:a2:bb:fd:
                    cd:c4:be:09:7c:d2:3e:53:fb:ad:fe:68:b9:6d:76:
                    02:fe:1d:10:1d:8e:7f:06:cd:09:eb:b5:8c:ec:b0:
                    e5:f5:a1:d3:98:ea:a5:f8:34:00:f0:36:71:1f:f9:
                    91:82:05:d1:f9:8d:b3:bf:70:95:86:83:48:2a:6d:
                    e4:40:69:dd:11:f0:cd:4c:89:a2:b6:c9:ca:d5:a2:
                    f4:18:a3:64:c0:c3:6f:75:8e:74:9c:1b:92:6c:45:
                    54:1b:50:c0:48:a1:a2:5e:19:10:05:d3:63:84:c9:
                    a5:58:5d:19:df:1b:78:17:cc:b3:f3:9c:44:c5:21:
                    b4:ff:2d:37:aa:52:d2:46:7b:f8:08:cc:2f:0e:9a:
                    ce:04:f8:eb:79:c3:6e:a7:9b:23:a9:35:77:0f:d1:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:99:69:AB:50:B8:40:B8:1B:FD:41:98:5D:E7:15:2F:4A:8F:09:0F
            X509v3 Authority Key Identifier:
                keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:96:b0:9e:54:79:0a:5e:66:a8:d7:2b:e4:8f:c4:80:28:16:
         07:1b:4d:35:a6:dd:fe:76:98:92:e3:0b:ea:33:d5:60:ed:3d:
         3b:0e:5a:e1:10:d5:4b:f8:48:96:e9:e1:2e:ec:a4:40:7c:3a:
         92:33:ac:0e:82:ba:9d:7a:ce:7d:a9:7f:49:4c:63:ec:84:9a:
         d1:e8:59:dc:ba:69:10:ee:5d:41:fa:d6:2f:b3:42:82:e3:13:
         10:c8:7c:c0:ce:8d:9a:9d:dd:1b:3a:46:0a:d5:25:b7:38:2e:
         1f:d7:c1:e8:ee:bf:3a:25:34:77:d5:72:fe:4c:0f:26:1f:f6:
         c2:4f:48:83:b7:d5:2d:02:bb:27:f2:0a:62:e8:f2:7e:3f:99:
         0e:cf:5e:91:b1:51:f8:c8:ac:26:18:41:41:56:58:7c:8b:6b:
         e9:45:83:8f:b8:4c:1d:77:e3:b1:c2:20:66:50:0e:c2:72:df:
         07:49:21:65:3f:1b:d9:5d:3c:ac:be:a5:b4:c9:6c:2d:d0:95:
         41:10:5a:d2:f5:aa:b9:51:11:61:cc:06:a2:e2:97:1f:80:19:
         db:fd:d1:4a:84:c1:02:f0:f6:25:96:0d:24:4f:57:8a:08:21:
         16:17:f4:ef:06:9c:aa:72:1b:3a:bb:30:e4:30:6e:7d:21:40:
         23:aa:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:22 2025 by rpki-client