Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File:                     pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier:          anfLYEk59SevBaRFjxpJrxH3wDbX2J1Ib6NHaflmeVk=
Subject key identifier:   3D:26:94:39:2D:70:76:AB:E0:C3:46:57:E0:64:1B:58:36:CE:F9:B6
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer:       /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial:       01961B48D43E4058196141275211C05927BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number:          14DE
Signing time:             Wed 09 Apr 2025 16:01:19 +0000
Manifest this update:     Wed 09 Apr 2025 16:01:19 +0000
Manifest next update:     Thu 10 Apr 2025 16:01:19 +0000
Files and hashes:         1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: RkEsjVstQGxzaqwpy73La9P7KBC0rTbtCIFrhMJ3xUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1b:48:d4:3e:40:58:19:61:41:27:52:11:c0:59:27:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
        Validity
            Not Before: Apr  9 16:01:19 2025 GMT
            Not After : Apr 10 16:01:19 2025 GMT
        Subject: CN=3d2694392d7076abe0c34657e0641b5836cef9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:db:9c:44:40:b2:d1:59:d0:d9:40:fb:dc:
                    35:89:ed:33:87:92:19:77:12:c8:99:90:c1:8c:d1:
                    74:8e:0b:a6:c1:7b:f2:79:3c:7c:a9:6a:49:9a:1d:
                    80:df:b4:b5:1e:d1:e1:52:ce:b2:1d:1b:45:7c:66:
                    c0:2c:7c:2a:18:0a:f3:ff:fd:7b:22:b7:9a:08:6c:
                    ec:d9:f0:a4:22:d6:aa:f7:9b:99:a2:2a:44:3f:87:
                    28:85:c7:d5:65:48:79:67:1e:f8:c9:1b:92:0e:84:
                    41:5e:8f:af:df:21:dd:54:be:98:55:83:72:77:f8:
                    e3:66:ef:09:05:ef:c4:68:98:e0:5c:a1:89:9b:45:
                    52:35:75:45:69:c9:6d:0d:d9:8b:f4:f0:bf:96:97:
                    03:31:29:21:6f:13:b2:f9:d4:95:79:91:c5:7c:3c:
                    53:17:56:d1:21:db:a1:41:c5:d2:8d:a3:84:6b:9f:
                    b4:18:c2:4a:a0:f2:f5:7d:95:ac:6c:8b:7b:03:b5:
                    0f:0a:8e:c2:8e:39:3c:04:bc:e6:79:4d:1e:99:9f:
                    78:94:62:26:fd:5f:5e:d3:1d:c6:1b:60:a3:68:05:
                    a5:29:3b:15:86:35:1f:5f:5e:11:34:04:a9:bc:79:
                    0d:ed:d3:ae:d6:18:d1:80:10:99:08:0a:2b:72:a1:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:94:39:2D:70:76:AB:E0:C3:46:57:E0:64:1B:58:36:CE:F9:B6
            X509v3 Authority Key Identifier:
                keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:40:90:d5:1f:f8:97:1a:5a:b6:f2:9f:96:e8:31:73:2f:bd:
         23:5a:54:a3:52:04:24:7d:60:b5:7f:bc:f2:01:39:b5:0c:52:
         ec:a8:e2:7b:5c:28:5d:27:97:fa:16:de:2f:01:10:52:a8:b6:
         24:d7:ba:e7:0f:a7:52:43:64:71:95:1f:c7:31:ff:a1:df:15:
         39:a5:f4:af:7b:55:0a:62:a1:1a:8e:3a:cf:de:a3:4a:b6:a5:
         43:35:0a:68:55:0c:86:e0:28:e0:84:1f:c2:9d:bd:d0:9e:33:
         7d:61:15:53:7f:f5:26:d4:bc:54:e8:f7:35:40:74:31:50:54:
         8e:63:1d:a2:41:d5:1b:19:1a:19:fc:d5:46:7b:48:1e:8f:af:
         d5:9b:ba:b5:1b:fc:8d:0b:d9:56:16:cb:d4:b8:4c:78:85:66:
         a5:c0:02:b4:a4:27:e4:03:a4:15:63:1d:ca:83:38:6e:2d:ec:
         76:11:92:28:06:7a:46:04:41:25:9e:20:93:81:4a:d1:18:62:
         2f:a7:f9:e6:ad:c0:1a:93:ee:bd:97:38:f3:dd:4c:57:7f:9f:
         a7:75:3b:00:54:ad:e3:eb:99:ec:e6:10:b0:69:22:e7:0c:aa:
         ea:a8:0d:2f:0c:eb:fb:3a:a1:3e:59:91:9f:fc:f5:00:de:f7:
         08:44:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:32:07 2025 by rpki-client