Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
File:                     pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft (raw, json)
Hash identifier:          0bXhapV2Zl/Kn315GACk5KcfGoitlVBd8nx5Cd05KdQ=
Subject key identifier:   45:D5:F7:0B:BF:20:C4:D2:14:3B:A0:40:A5:3A:41:29:3B:28:F0:C9
Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
Certificate issuer:       /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Certificate serial:       019651C89B3F83377242662F283C220C788A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
Manifest number:          1330
Signing time:             Sun 20 Apr 2025 06:00:23 +0000
Manifest this update:     Sun 20 Apr 2025 06:00:23 +0000
Manifest next update:     Mon 21 Apr 2025 06:00:23 +0000
Files and hashes:         1: pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl (hash: hQOFjMZyy6RCY/5/X5HCrVDjE5yPVsFIXEio+sOzX5E=)
                          2: vzmyNrlx12Of6nkhjpCUrNuMnE0.roa (hash: GZnGfQJ22BwvGawBRyPMAw4FcsQFgdQkm7oclrkMSK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c8:9b:3f:83:37:72:42:66:2f:28:3c:22:0c:78:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
        Validity
            Not Before: Apr 20 06:00:23 2025 GMT
            Not After : Apr 21 06:00:23 2025 GMT
        Subject: CN=45d5f70bbf20c4d2143ba040a53a41293b28f0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:15:62:ac:32:f5:36:bc:2b:7b:1b:c4:d7:
                    6d:c7:07:35:13:04:5a:08:f7:dd:ac:4b:87:f8:fa:
                    c4:f1:58:1e:7c:51:53:2c:70:46:ae:76:36:65:b9:
                    f9:76:11:83:5a:d6:6d:6a:18:5b:b4:6a:80:41:c9:
                    06:85:a2:e6:ac:f0:e3:c0:21:30:81:d4:43:a7:f3:
                    90:b2:2f:3f:71:72:32:d8:0e:56:cc:a7:b3:69:7f:
                    d4:85:4c:96:47:ee:7e:85:fa:1d:a7:36:91:72:f0:
                    ab:1d:13:5f:3a:09:a7:5a:cb:66:d4:34:ee:ea:5f:
                    82:6e:7d:72:1d:b3:fc:11:31:78:ea:1f:b6:e6:cb:
                    52:18:ca:a2:22:b5:13:ad:30:cc:d0:09:d5:ef:51:
                    0d:fa:55:d0:4c:01:ae:f4:eb:3f:37:5d:9c:ba:a4:
                    46:29:00:d5:ad:33:69:4d:ec:39:2d:c0:40:db:e3:
                    7d:c0:2b:e1:a9:b6:d8:bb:c7:84:a5:61:e7:fd:ce:
                    5c:97:1d:ff:ce:ec:2c:4a:8c:90:a9:96:5b:f8:c3:
                    a7:3e:da:90:fb:ec:ca:4c:19:ac:3e:56:3a:4d:02:
                    ca:74:08:c5:16:8d:8b:84:99:52:1f:18:27:80:e3:
                    eb:21:75:77:ef:0a:8e:45:e6:79:d2:1f:0b:36:c8:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:F7:0B:BF:20:C4:D2:14:3B:A0:40:A5:3A:41:29:3B:28:F0:C9
            X509v3 Authority Key Identifier:
                keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:ee:04:fd:32:c6:16:3b:1c:f3:68:04:ec:49:de:9a:72:60:
         9a:01:ef:be:11:5d:98:85:5c:55:94:60:ce:32:86:a9:5d:10:
         f7:60:cf:ac:a8:74:ef:e2:a5:e0:ac:97:d3:1c:da:75:c5:74:
         05:ee:23:1f:76:28:8f:1a:f2:5d:7b:2a:5b:6b:77:23:b9:fe:
         23:c8:a3:33:92:a7:78:bd:c5:8f:84:22:a9:75:52:1d:b8:57:
         a0:6e:1b:41:7c:52:78:14:11:94:c0:87:b5:55:66:36:91:7d:
         50:f1:73:b4:1b:79:23:cb:e2:fd:d8:51:a2:e1:46:a3:6d:70:
         29:fb:f9:84:a0:12:93:ac:a0:74:cd:ee:4f:ed:e1:55:dc:f9:
         39:80:b2:ee:83:ab:70:45:71:59:f2:0e:3e:46:a7:a6:4e:a0:
         be:ce:f0:ba:e6:37:a7:98:65:bd:a6:02:c0:b2:9d:76:d3:fc:
         9a:2d:4a:84:6d:f7:84:dc:39:4f:ff:9b:79:61:b1:80:a7:a8:
         ac:fa:ec:cf:1a:7a:05:de:6c:22:66:7f:fe:bc:bf:02:dc:a9:
         b7:f4:b4:0f:20:d0:99:0a:d1:05:c1:fe:28:ce:8d:fa:7b:c2:
         a3:42:75:52:7c:8f:b4:72:16:94:17:1a:20:13:68:8b:03:5c:
         aa:03:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:36 2025 by rpki-client