Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File:                     Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier:          7C0tXSRKJqQ7zPFoPyAwf8IIv35dgzY3/HODTKs0yBI=
Subject key identifier:   B1:A1:33:B8:90:3C:A4:3C:94:ED:CF:CB:83:D8:1A:1C:4E:20:84:61
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       01964F35B2F5F46996AB7D29553F483A1769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number:          148C
Signing time:             Sat 19 Apr 2025 18:00:41 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:41 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:41 +0000
Files and hashes:         1: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: eO6Z0BRF0Jf5B6ptuHqQcffURMcSGXsdAa6r4zsl/zo=)
                          2: Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa (hash: nd+025SnSLe+QrA8ZI1nLVUbcuTRnShB52imVtkdZsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:b2:f5:f4:69:96:ab:7d:29:55:3f:48:3a:17:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: Apr 19 18:00:41 2025 GMT
            Not After : Apr 20 18:00:41 2025 GMT
        Subject: CN=b1a133b8903ca43c94edcfcb83d81a1c4e208461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:b1:41:ca:da:9d:10:0b:60:90:db:3a:92:
                    90:b7:2d:39:32:da:ec:5b:29:fa:0e:76:ff:d7:4a:
                    ae:eb:ca:65:db:48:42:c5:58:c2:a3:33:b0:b1:cc:
                    78:76:00:6d:99:7c:60:4d:84:7b:8d:13:70:05:91:
                    de:42:22:a9:5c:1d:c8:94:c3:1c:cd:04:9d:60:e1:
                    c2:1e:2d:0a:a9:71:ce:d1:4b:6d:c0:92:b3:5c:85:
                    68:ac:b7:fe:8f:cc:87:b3:dc:5a:da:eb:09:de:e6:
                    07:b4:62:96:c6:df:44:2f:30:cf:54:81:37:c1:fb:
                    80:87:b8:c3:7c:cb:4d:b8:3f:29:1f:7e:5f:78:8c:
                    74:28:d4:d6:6b:df:e0:1c:41:86:46:36:a9:dd:41:
                    c3:a1:a8:4e:72:c7:42:89:a5:bb:5d:a1:b2:35:6e:
                    8a:00:e2:2b:80:2a:dc:90:f0:66:52:01:dd:1f:ee:
                    f6:f9:48:3c:01:27:ba:a9:26:c5:d5:fe:06:f8:d0:
                    47:23:dd:8f:08:7e:ab:ad:6d:df:80:64:5d:d2:ca:
                    f4:85:97:e9:7b:b2:58:42:8a:70:99:79:1a:55:97:
                    7a:96:76:4b:ed:59:5d:49:25:c0:b2:bd:e3:b4:e7:
                    dd:99:18:38:42:07:f0:10:d6:5c:d2:ed:28:8d:51:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A1:33:B8:90:3C:A4:3C:94:ED:CF:CB:83:D8:1A:1C:4E:20:84:61
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a9:e6:8a:7f:d7:4b:ad:70:d4:27:29:eb:33:fc:83:be:61:
         60:51:07:11:94:a5:46:bf:2b:17:83:9b:c6:3d:96:4d:50:75:
         13:0f:46:ff:47:43:e4:f2:68:22:85:7c:ce:49:93:4d:34:b4:
         f6:5f:5d:d8:59:4b:fd:0b:42:5e:41:6d:87:da:c4:67:60:87:
         c2:d5:a1:45:6c:a8:23:57:65:bb:c4:af:e4:15:83:44:54:1e:
         ae:16:3b:72:62:78:9b:63:33:cc:21:92:a6:96:f2:8b:91:a7:
         40:2f:8a:83:a4:08:ff:ac:eb:f6:87:7b:27:74:3e:ae:5e:3e:
         37:21:5e:18:e3:88:bf:57:e0:f1:cc:23:06:46:bd:a2:06:f2:
         29:b5:d1:99:3e:e6:c9:8c:4e:a1:12:2a:e2:58:f2:58:a6:07:
         d1:bb:62:0c:83:a6:1a:a3:9e:8a:64:0f:7e:cf:26:ad:38:3f:
         f1:e5:85:7f:dd:0b:57:80:e9:ea:fc:5c:fa:81:a4:68:ee:fb:
         26:37:23:17:cb:fd:ba:e2:bf:6e:ff:03:21:55:82:46:c8:49:
         9c:fd:7e:85:f9:1d:73:2e:bc:10:a3:3f:a8:0d:07:b3:f9:fe:
         fd:ab:31:33:17:26:8d:cf:17:95:70:ad:ea:04:69:a5:9d:85:
         58:8b:9b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPNbL19GmWq30pVT9IOhdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjdiYTgyMDdiODFjMWI0NzI2M2IxZmRlOGY3OWI5OTU5
NzAzN2QwHhcNMjUwNDE5MTgwMDQxWhcNMjUwNDIwMTgwMDQxWjAzMTEwLwYDVQQD
EyhiMWExMzNiODkwM2NhNDNjOTRlZGNmY2I4M2Q4MWExYzRlMjA4NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjKxQcranRALYJDbOpKQty05Mtrs
Wyn6Dnb/10qu68pl20hCxVjCozOwscx4dgBtmXxgTYR7jRNwBZHeQiKpXB3IlMMc
zQSdYOHCHi0KqXHO0UttwJKzXIVorLf+j8yHs9xa2usJ3uYHtGKWxt9ELzDPVIE3
wfuAh7jDfMtNuD8pH35feIx0KNTWa9/gHEGGRjap3UHDoahOcsdCiaW7XaGyNW6K
AOIrgCrckPBmUgHdH+72+Ug8ASe6qSbF1f4G+NBHI92PCH6rrW3fgGRd0sr0hZfp
e7JYQopwmXkaVZd6lnZL7VldSSXAsr3jtOfdmRg4QgfwENZc0u0ojVGAvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGhM7iQPKQ8lO3Py4PYGhxOIIRhMB8GA1UdIwQY
MBaAFD5nuoIHuBwbRyY7H96PebmVlwN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTIt
NGMyNWZjYmRlZGQxLzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTItNGMyNWZjYmRlZGQx
LzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6nmin/X
S61w1Ccp6zP8g75hYFEHEZSlRr8rF4Obxj2WTVB1Ew9G/0dD5PJoIoV8zkmTTTS0
9l9d2FlL/QtCXkFth9rEZ2CHwtWhRWyoI1dlu8Sv5BWDRFQerhY7cmJ4m2MzzCGS
ppbyi5GnQC+Kg6QI/6zr9od7J3Q+rl4+NyFeGOOIv1fg8cwjBka9ogbyKbXRmT7m
yYxOoRIq4ljyWKYH0btiDIOmGqOeimQPfs8mrTg/8eWFf90LV4Dp6vxc+oGkaO77
JjcjF8v9uuK/bv8DIVWCRshJnP1+hfkdcy68EKM/qA0Hs/n+/asxMxcmjc8XlXCt
6gRppZ2FWIubnw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:42 2025 by rpki-client