Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          bfT4/LN9uy9SHBI8DvDs5bjp7CNa0rl0Lh8iJ2xL1es=
Subject key identifier:   03:F8:2F:B2:28:2F:6A:27:8C:FF:03:62:37:A5:4E:44:E0:3D:51:55
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       0196439F4ED8824B90BFD13D99A214051408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          0420
Signing time:             Thu 17 Apr 2025 12:00:35 +0000
Manifest this update:     Thu 17 Apr 2025 12:00:35 +0000
Manifest next update:     Fri 18 Apr 2025 12:00:35 +0000
Files and hashes:         1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: MVFn9O/6oSyLNBqOI1icgxJQGjygV0x0xQrep634/fs=)
                          2: R3hdyvcGqSNq9MuuQgsgENnLqRc.roa (hash: p4vr1woIgR7A2etkhsE5WicuvE4bBuEK3XJxuDU+KOU=)
                          3: bdN5bSk-xsk3V329iHiH8aXvTdI.roa (hash: B5/9B1uBl6eNvv9W6TPaWnFzqWQvfYoiY7n1wWqxjpc=)
                          4: wWkcOa8cqDGRhn8j-1x_z-ePvg0.roa (hash: gQMjNWFHknHqWjiClHplw+oae04KXbyQbF9fSFE9xPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:9f:4e:d8:82:4b:90:bf:d1:3d:99:a2:14:05:14:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: Apr 17 12:00:35 2025 GMT
            Not After : Apr 18 12:00:35 2025 GMT
        Subject: CN=03f82fb2282f6a278cff036237a54e44e03d5155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:c3:b1:88:b3:81:b7:b5:c5:be:32:c2:fc:
                    65:4a:54:14:06:3e:00:5a:08:f8:37:69:10:67:a3:
                    e8:c6:af:b5:dc:20:02:48:9d:bc:33:a7:5d:81:34:
                    a9:c0:87:58:59:38:39:54:14:44:7c:37:1c:b9:d5:
                    e3:74:f2:c1:5a:9d:19:83:90:85:d0:6e:27:7c:47:
                    ee:7f:91:27:4a:2c:ff:39:49:db:25:6e:b2:cc:d2:
                    f3:5b:7f:1a:9a:ac:d2:2a:f2:68:ba:a0:1d:06:6d:
                    b7:23:c4:c2:22:73:1d:de:cb:88:37:79:01:f1:8d:
                    e9:ca:fb:e5:0c:37:3b:0d:24:01:48:17:03:68:a9:
                    f6:91:42:ee:26:ae:fc:83:43:d0:b8:a2:ed:d1:28:
                    ce:51:86:54:37:de:48:2e:19:ee:e6:d0:f8:97:f8:
                    da:2b:c4:6c:13:64:b0:a2:9c:fb:5a:7c:73:09:6c:
                    24:3d:d9:f4:0c:64:34:d4:3b:5d:c2:fa:06:92:9b:
                    0b:54:75:bb:b9:4f:08:bf:4e:27:4e:93:a2:90:f5:
                    fd:1c:c0:91:c2:a1:f3:23:fb:d5:9b:e3:ef:7b:bd:
                    26:c6:5e:a4:12:57:a3:36:34:02:bd:02:6c:f5:66:
                    cf:45:2e:be:6d:2c:51:0b:84:38:9a:8e:b4:04:cc:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:2F:B2:28:2F:6A:27:8C:FF:03:62:37:A5:4E:44:E0:3D:51:55
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:39:45:9a:43:c7:b7:85:21:f7:c6:3b:e4:e7:36:87:4c:f1:
         19:6e:6f:0d:6e:ba:8c:5e:fb:21:03:59:5e:d5:a1:43:00:7b:
         30:7c:de:fb:9d:64:28:68:79:4c:1c:66:2a:b8:2f:ea:0c:e3:
         6c:32:00:42:8c:f2:c6:79:a3:7e:02:f2:be:7c:90:41:4b:04:
         15:f4:33:71:10:96:56:26:d4:69:ff:b9:4f:83:65:37:e9:24:
         74:e7:b5:79:91:ef:79:b2:48:e0:27:48:6f:90:a9:3b:fb:0e:
         3d:91:ad:c2:2d:1f:08:ec:02:a3:e8:01:e0:13:d7:eb:0e:c8:
         46:f2:26:e6:67:fb:15:56:c4:02:7f:b1:94:2a:04:e5:24:a2:
         c2:c8:30:1d:b0:0a:2d:00:8a:de:87:d9:ca:29:ac:88:de:bb:
         c6:8b:d9:f1:92:03:d3:9d:19:25:27:d2:36:46:e1:62:96:d2:
         08:fd:e8:b4:a1:53:55:1e:e6:85:29:9e:52:90:ff:0b:c9:32:
         a9:dc:ab:19:12:28:79:9a:11:48:95:52:64:55:2a:d5:12:97:
         bd:37:f4:1f:ea:fa:42:7e:41:cf:e9:2d:97:ac:69:8a:23:57:
         21:d2:fa:e9:ed:f6:cf:0b:6f:90:f9:9a:69:c7:0d:f1:7d:ad:
         66:e0:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:40:12 2025 by rpki-client