Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
File:                     pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft (raw, json)
Hash identifier:          I4//ij6ufucIhk0ydeHMqUm0HykdP9pleRA/dX+zOmg=
Subject key identifier:   C3:3F:1D:EE:C0:4E:BC:CE:6E:F8:2A:2A:6D:7B:A5:54:AF:B9:50:5E
Authority key identifier: A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
Certificate issuer:       /CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
Certificate serial:       019650483263C6F96C38672C213D9578DD0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
Manifest number:          04EA
Signing time:             Sat 19 Apr 2025 23:00:30 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:30 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:30 +0000
Files and hashes:         1: PE72L1MZ6arIopzUHKdO8yRmL1A.roa (hash: GUSnHYNUfV3OxDkdEg/4B//ADgj/Stnyrivs7UGYYYk=)
                          2: pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl (hash: 49paJ65BYc+I8M5CFAKCSvuu+Sv9lygnW0jYmWilMgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:32:63:c6:f9:6c:38:67:2c:21:3d:95:78:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
        Validity
            Not Before: Apr 19 23:00:30 2025 GMT
            Not After : Apr 20 23:00:30 2025 GMT
        Subject: CN=c33f1deec04ebcce6ef82a2a6d7ba554afb9505e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b1:c8:f6:ca:20:25:dd:59:4e:94:38:6b:34:
                    bb:18:d4:78:fc:81:06:08:97:66:dc:e3:1f:1e:a7:
                    e5:d8:51:5a:bf:78:2e:ca:48:d6:63:3c:42:9e:f4:
                    f9:f0:31:96:7c:7c:36:0b:0e:71:0c:c7:24:99:50:
                    2a:c5:31:bd:8f:5a:c2:6f:86:93:83:1d:b4:77:59:
                    b1:d6:5c:87:0d:29:0f:79:6e:77:55:d9:4d:49:16:
                    f7:c1:3e:e2:bf:1b:5f:70:97:47:76:d7:6f:2c:40:
                    6c:05:cd:95:a6:eb:94:cb:2f:12:db:f5:e5:a4:73:
                    5b:91:c4:c3:74:da:9f:dd:19:0e:4e:b6:c5:cf:ee:
                    53:20:0f:51:c0:a5:65:09:61:6b:99:15:97:9a:c2:
                    99:ff:f3:15:e7:1c:7d:76:ce:31:09:f0:f8:2d:24:
                    5e:98:38:24:d4:a5:aa:21:5e:95:60:af:42:04:89:
                    20:c9:6b:29:32:2f:ae:c3:65:9a:41:50:6e:4e:46:
                    a9:06:a8:43:66:f8:0a:33:cc:70:4e:99:fc:b9:88:
                    a3:72:d7:be:b2:75:21:7b:5c:ed:f8:af:ce:ac:31:
                    c3:42:da:2d:af:91:c1:08:29:a5:53:7f:d0:53:fa:
                    cd:6e:6f:6e:47:9f:2e:75:fb:34:ed:2a:12:18:1f:
                    a7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:1D:EE:C0:4E:BC:CE:6E:F8:2A:2A:6D:7B:A5:54:AF:B9:50:5E
            X509v3 Authority Key Identifier:
                keyid:A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:25:9f:e9:d6:05:43:ce:fb:fe:f9:91:0a:76:dc:e1:5a:97:
         e8:17:fd:bb:4b:81:66:63:e6:4b:a4:ee:23:59:32:74:1c:a1:
         d6:01:ab:cc:6a:68:88:38:ee:03:89:9a:dc:05:69:21:30:b9:
         89:27:30:a5:0c:55:1f:32:cd:db:59:a3:6e:a9:48:5d:f8:50:
         00:c9:1d:e7:12:88:9e:20:7d:85:cb:04:69:42:44:b5:81:be:
         fa:69:40:74:5f:af:7f:a4:46:df:a1:4b:04:fe:f7:f5:b8:f5:
         b0:af:23:e3:fd:61:37:db:e9:44:df:27:7a:e9:0e:b6:5f:02:
         07:89:b5:6c:79:74:c1:4a:5e:79:bf:82:f3:88:32:35:b1:aa:
         fc:0c:f9:c1:4b:e0:e8:15:3b:41:36:03:b8:51:92:c0:d7:e6:
         0d:7b:59:5a:ff:cd:88:08:75:5c:06:36:31:e7:7e:c9:7f:a2:
         93:02:3b:b5:cd:f1:6b:63:fc:db:58:af:8b:50:35:4d:7a:bf:
         66:e9:2b:ed:f4:37:4b:f8:19:36:86:c4:25:81:ac:f5:8b:74:
         a2:22:52:19:91:77:8f:0b:73:bc:46:73:e8:a3:e1:41:45:15:
         c6:d5:d3:60:0a:de:a5:e7:f9:07:fa:b2:ea:88:ed:cb:96:86:
         95:d0:54:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:52 2025 by rpki-client