Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File:                     pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier:          DI8o7jHorFeyQynGYwGBrED52MYrMHZDUcyCJFhGIDc=
Subject key identifier:   3E:4E:EB:B8:0F:7E:20:90:9B:76:A6:0C:A1:37:16:9F:8F:56:7C:B7
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer:       /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial:       01963876E545DA1251E0213A68AC6B56681E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number:          07D1
Signing time:             Tue 15 Apr 2025 08:00:38 +0000
Manifest this update:     Tue 15 Apr 2025 08:00:38 +0000
Manifest next update:     Wed 16 Apr 2025 08:00:38 +0000
Files and hashes:         1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
                          2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: JLHA6xDVa+PE91p5HeVxHh/tzzT+rKee1WOBH9UV4zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:76:e5:45:da:12:51:e0:21:3a:68:ac:6b:56:68:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
        Validity
            Not Before: Apr 15 08:00:38 2025 GMT
            Not After : Apr 16 08:00:38 2025 GMT
        Subject: CN=3e4eebb80f7e20909b76a60ca137169f8f567cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:88:f5:71:d4:7f:11:34:e3:56:cb:91:45:
                    03:48:98:f7:0c:58:77:86:52:da:4b:7e:19:40:9c:
                    cf:5c:5b:fb:ab:79:15:89:06:31:f0:89:f0:c3:5e:
                    56:5a:b1:43:b9:2d:47:73:c2:5d:c9:13:a6:a8:19:
                    ad:d3:1d:f1:94:13:66:ea:b8:93:6c:f6:6d:27:f1:
                    cb:e8:9d:8f:3b:ad:85:60:25:6a:04:ec:e3:d8:6e:
                    1e:b0:f4:74:66:fb:b1:94:88:19:de:3b:f5:0e:df:
                    bf:8a:2f:d4:ac:03:fa:e9:a0:e2:1d:67:9d:a0:87:
                    7b:d5:b8:a0:48:a8:59:3c:cd:cb:84:13:f0:d9:c3:
                    d5:ca:52:f1:a4:43:0a:95:1f:61:e4:8d:ce:87:49:
                    a8:b0:0e:73:f8:71:9f:96:49:e2:cb:07:de:9a:87:
                    5f:b7:50:a8:a0:a3:aa:4e:21:61:47:45:b4:3f:88:
                    19:d3:49:6e:f9:9f:e5:46:97:64:7a:47:d8:33:1c:
                    cb:4d:de:21:eb:65:3f:8c:2b:89:12:a6:f9:cc:e5:
                    29:7b:d7:83:ec:c9:04:ad:b6:7b:78:d6:84:e4:35:
                    85:00:76:2d:19:39:b0:3c:5f:d8:dc:ac:d1:0e:29:
                    b4:37:6a:c1:da:63:47:ec:9b:e2:5e:54:c7:1b:22:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4E:EB:B8:0F:7E:20:90:9B:76:A6:0C:A1:37:16:9F:8F:56:7C:B7
            X509v3 Authority Key Identifier:
                keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:3a:f7:d3:94:a3:56:86:c2:54:a7:b8:47:95:62:2b:4d:
         91:c5:f3:b6:e6:7e:af:ff:93:df:ef:d5:75:9c:e3:2c:8c:71:
         1c:90:b6:88:75:ab:24:d5:79:b5:48:07:30:bf:82:cc:0d:0a:
         f1:fd:87:79:58:ba:19:e2:11:88:28:a0:fd:88:fc:20:64:6f:
         ae:a1:56:1b:56:7f:59:a4:c7:a2:17:06:7a:cb:06:3c:1e:21:
         4f:71:76:6d:0a:3a:17:ff:44:25:e8:ff:62:ab:24:0b:7f:fd:
         7b:f1:9d:29:4e:33:56:4f:48:a8:e3:f2:ba:42:4d:ec:2a:14:
         34:f5:2e:c6:de:44:c3:ea:bf:3f:e1:82:98:97:90:53:7c:40:
         03:91:74:27:14:7e:2a:bc:05:fa:7d:f5:bb:db:30:a6:06:df:
         fb:04:97:1e:2c:49:80:fc:1e:d0:98:73:f9:e0:c9:5f:8f:a9:
         a9:90:fd:74:bf:69:06:a6:09:90:14:24:77:fa:ac:c7:b2:5c:
         a2:30:82:46:a4:e5:6f:db:33:e2:73:b2:de:5c:67:eb:84:74:
         47:03:b2:45:5f:29:b7:81:1f:22:3a:63:af:5a:15:dd:60:24:
         5f:47:09:27:27:9a:06:52:de:4e:32:09:94:0c:94:7d:0c:bf:
         40:4f:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:40:24 2025 by rpki-client