Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File:                     P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier:          +8r4oNbDavTs8gXXe366rOqUSbWrtMxTBTdcT1l6ASg=
Subject key identifier:   93:C2:20:ED:25:76:11:D4:51:C3:84:D5:3D:D8:FF:5D:08:11:D8:45
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer:       /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial:       019590064CD7AC7E945C9292C77D3CD849F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number:          1229
Signing time:             Thu 13 Mar 2025 15:01:26 +0000
Manifest this update:     Thu 13 Mar 2025 15:01:26 +0000
Manifest next update:     Fri 14 Mar 2025 15:01:26 +0000
Files and hashes:         1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: GmX9gbjMrOYLiSTBUQyQbl6NX8HQN20jRdR5W4ukwDc=)
                          2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:06:4c:d7:ac:7e:94:5c:92:92:c7:7d:3c:d8:49:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
        Validity
            Not Before: Mar 13 15:01:26 2025 GMT
            Not After : Mar 14 15:01:26 2025 GMT
        Subject: CN=93c220ed257611d451c384d53dd8ff5d0811d845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cc:e6:03:c1:98:ee:5b:1b:02:8e:2f:3e:c3:
                    b0:28:cf:00:95:01:f5:9c:6e:18:c8:b3:81:4d:5e:
                    b8:63:79:82:5e:96:72:fe:57:08:c0:74:aa:25:07:
                    5c:25:9d:ce:ae:42:83:ed:ac:df:cc:3e:06:94:0d:
                    b2:f6:42:fe:87:3b:35:56:2d:2a:e1:8f:da:c0:ec:
                    6c:79:ed:31:95:2d:b5:ab:ec:c7:95:35:45:2e:57:
                    3b:a4:ec:76:19:5a:fc:f3:b5:26:a2:dd:a7:e1:14:
                    d8:72:3f:d0:92:55:d6:83:ea:91:e9:a1:70:8d:df:
                    f2:60:b8:a9:a4:a3:ae:90:bf:a0:c2:18:64:53:31:
                    43:0a:cd:85:12:36:5e:54:62:7f:2a:33:30:4d:da:
                    e9:ae:e7:86:94:50:e4:47:6b:c5:85:6c:a0:9e:82:
                    44:e0:0c:a5:57:f9:d8:7d:1f:e3:84:2f:e5:2b:55:
                    94:d7:cb:cd:f9:dd:5c:48:e5:11:d3:7c:59:51:8b:
                    68:30:27:5c:31:29:4e:70:aa:6e:da:ff:34:79:77:
                    e3:e4:4d:e1:cb:99:52:ba:dd:1c:66:3f:54:7c:93:
                    f1:85:f7:a8:6b:b9:40:b7:a2:1f:3c:cc:79:73:3d:
                    90:31:e0:70:d1:9b:ef:8a:f6:83:da:37:38:d3:c6:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C2:20:ED:25:76:11:D4:51:C3:84:D5:3D:D8:FF:5D:08:11:D8:45
            X509v3 Authority Key Identifier:
                keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9f:26:7b:9a:db:ff:ee:c5:2c:27:c8:f6:00:84:94:ad:ec:
         fe:35:f0:47:4d:66:fc:e8:fe:76:04:02:b6:7a:70:ee:fd:45:
         4b:80:13:23:8e:04:ef:f0:95:b0:aa:6e:82:0b:68:9d:27:24:
         5c:13:7e:99:7d:44:17:2e:4b:b7:86:71:bc:37:3e:da:02:f5:
         2a:3c:69:80:28:4e:a8:3d:94:91:7a:7a:fd:ca:3e:8b:54:cc:
         ef:6b:e9:ed:6c:33:fe:06:19:17:18:b7:9a:87:ff:f6:a3:c7:
         ef:4c:8d:b1:f9:8e:46:64:2a:1a:64:7f:49:55:88:7e:a9:23:
         b5:1d:ad:14:44:ab:e8:c3:09:32:6b:4f:ca:ff:47:06:2d:29:
         5a:9e:20:0a:21:e7:7b:c8:62:f9:7b:78:d1:00:3c:bc:7b:f4:
         29:59:7c:7b:e8:a4:db:92:7f:b1:30:51:2c:2d:bb:92:e1:d7:
         c1:9b:91:fa:55:a2:5a:6a:e5:fb:a1:a4:96:26:58:27:4f:fa:
         e0:49:96:c3:0e:6d:04:4c:87:db:08:b4:85:d5:42:65:29:92:
         c2:57:fd:b3:1f:3f:33:95:ab:46:06:30:4c:90:de:ba:1c:24:
         f6:1d:ac:b5:c4:98:e5:da:36:ad:74:61:69:2f:65:35:08:58:
         7a:0e:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:00 2025 by rpki-client