Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          cEMpOkfsJ9dWt5kCXDGi2UHdwKWrUPMu+XQAWP3zL9g=
Subject key identifier:   65:66:3F:FB:B6:46:EF:E4:28:59:99:72:07:30:84:2E:FA:56:60:C4
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       01962B29ECBAA1E682496E0A6845879C5D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          0FA7
Signing time:             Sat 12 Apr 2025 18:01:29 +0000
Manifest this update:     Sat 12 Apr 2025 18:01:29 +0000
Manifest next update:     Sun 13 Apr 2025 18:01:29 +0000
Files and hashes:         1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
                          2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
                          3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
                          4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
                          5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: 9x0P/Y5wdyRYPyPPPfAsr8tDa3J6Jtgel1/4hep0Mm8=)
                          6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:29:ec:ba:a1:e6:82:49:6e:0a:68:45:87:9c:5d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Apr 12 18:01:29 2025 GMT
            Not After : Apr 13 18:01:29 2025 GMT
        Subject: CN=65663ffbb646efe4285999720730842efa5660c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:27:0c:01:d3:26:68:48:ea:e6:5b:ff:70:
                    75:76:f6:25:5b:9c:fc:17:af:29:d9:8a:50:6f:a1:
                    ae:8f:aa:42:aa:66:09:30:0d:f4:69:81:bc:da:91:
                    80:f0:de:df:25:e2:31:43:70:ea:72:55:35:64:bc:
                    7e:84:3f:a5:25:9b:c4:d0:d3:8b:6c:69:f0:a0:9a:
                    91:18:cd:2f:2e:e0:de:d4:a8:f7:3e:b9:18:9a:7b:
                    54:af:0e:41:dc:0f:4b:e6:1f:c4:9e:4a:8a:84:ec:
                    29:c0:30:70:03:67:b2:b3:3d:fc:fe:39:fe:1c:49:
                    0c:bd:2d:7a:5c:e8:98:a5:c2:74:de:94:06:c8:ae:
                    c7:ce:20:bb:79:0e:3b:59:1b:21:e7:c0:53:cb:a0:
                    f4:df:c0:a8:9c:e6:e7:12:02:67:34:dd:60:d2:b9:
                    3c:9b:f0:d0:5e:65:3e:91:eb:b9:13:df:64:0c:92:
                    3b:9e:46:4a:c6:32:f6:03:ae:fc:16:cf:54:58:76:
                    fa:c6:62:a3:ff:54:62:50:e8:6d:25:70:fe:89:95:
                    52:7a:8b:8b:7e:48:f2:70:28:49:f8:bd:af:06:14:
                    09:8e:81:94:cb:06:e9:44:9f:ff:1c:c2:ff:39:0d:
                    79:ed:a2:51:f6:2e:07:85:c8:c8:2d:1a:2a:df:1a:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:3F:FB:B6:46:EF:E4:28:59:99:72:07:30:84:2E:FA:56:60:C4
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:fc:80:13:e5:ac:25:58:97:63:e2:3e:9a:f0:e5:7d:ed:
         b9:8f:e2:6d:3d:0a:3e:17:4d:9a:4d:1a:82:96:9b:66:b7:fb:
         65:81:d9:4c:24:ec:e3:ef:e7:80:47:f0:3d:0c:f8:ed:51:41:
         cd:ad:2d:05:0e:0c:26:fa:cc:8b:86:9e:d4:0d:b9:b1:1b:bd:
         68:0d:44:39:a7:87:f4:c1:90:04:4b:e0:52:3c:0a:a9:cf:d4:
         f8:e3:e5:b9:c2:e9:f0:29:15:92:3f:a8:ed:51:f5:e2:d6:71:
         be:d8:79:d1:cb:ee:32:ec:06:49:8d:8f:c7:a1:29:b2:86:92:
         1c:5b:aa:d7:1b:9c:ce:88:f8:3f:9f:30:6e:2e:7b:e5:08:d2:
         10:e0:66:b9:ba:a6:66:60:1a:f1:8f:84:f5:68:0f:c2:29:9b:
         55:dd:71:ba:6a:dd:72:e2:aa:51:05:a0:02:7e:c1:9e:c9:03:
         90:77:43:93:f0:f4:23:6f:06:67:e3:1b:76:43:a2:c6:c2:ff:
         67:40:ad:2a:e1:48:ef:8f:f9:e6:0e:ea:a3:ba:83:cc:72:57:
         34:3c:c7:53:3c:4a:56:63:82:67:5d:e8:bd:ba:39:c5:6a:b7:
         15:14:9f:cb:4c:0e:b5:78:72:ac:b4:31:1c:94:b3:0e:a5:24:
         34:e9:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:08:36 2025 by rpki-client