Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File:                     P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier:          kvHZ9ngOtrg/qb+Sg3GVjSt7GOc3/98aDCqrkoc+oGU=
Subject key identifier:   3D:B7:87:44:88:F5:FD:8F:1E:E9:FA:CA:5E:E6:2B:B4:39:5A:F4:27
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer:       /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial:       0196778CF5BEE3447A375039CCE30B06DEA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number:          053A
Signing time:             Sun 27 Apr 2025 14:00:48 +0000
Manifest this update:     Sun 27 Apr 2025 14:00:48 +0000
Manifest next update:     Mon 28 Apr 2025 14:00:48 +0000
Files and hashes:         1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: G5zPVraKvhgwOV3tcCHiFR5MP9Ie2M5r9fLAd5TCDUw=)
                          2: gZtu_mvpfnIEYpfX3O3Zhm8l3oY.roa (hash: eNPnQnlHd8yy83e7BBZ3vW4/qWGTiwqTNCUFgABwjBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:8c:f5:be:e3:44:7a:37:50:39:cc:e3:0b:06:de:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
        Validity
            Not Before: Apr 27 14:00:48 2025 GMT
            Not After : Apr 28 14:00:48 2025 GMT
        Subject: CN=3db7874488f5fd8f1ee9faca5ee62bb4395af427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:b2:f4:d9:95:48:5b:50:ec:b4:74:93:aa:
                    b2:49:d8:26:ae:2a:1c:ef:d3:ee:a1:12:89:6d:64:
                    ab:61:34:ba:4a:de:ef:7b:1e:bc:1d:d6:ae:5f:cc:
                    3c:d9:2e:b0:d2:a4:8f:dc:16:71:48:fb:12:52:84:
                    77:eb:22:d8:e5:1c:c3:f5:76:5b:9f:ba:bb:85:78:
                    2e:41:f5:fd:b4:a9:76:e3:ae:03:61:51:ce:df:b1:
                    80:3b:de:ce:75:2f:60:c1:25:9b:ad:da:15:72:9a:
                    25:19:f5:9e:6b:e3:62:4e:4c:17:db:28:e8:4c:00:
                    f4:1c:a1:49:ae:30:1b:e9:c4:e5:eb:5d:ca:96:3c:
                    e9:5f:78:98:b5:f8:9b:f5:6a:e0:a8:47:20:80:c3:
                    26:03:de:79:ab:bf:23:7a:22:a9:3a:ff:e7:aa:56:
                    a5:cf:bc:ad:33:35:d1:13:7c:b9:ce:63:cb:70:37:
                    93:fc:63:c0:73:71:2e:20:86:5c:aa:76:18:fd:57:
                    e0:ff:ac:bf:bc:e5:ae:37:2a:c7:8a:18:7f:5c:ed:
                    1b:d9:b4:2c:46:e4:b9:39:06:2f:cc:bf:48:ae:e2:
                    1d:b7:91:14:6f:b4:9f:4b:87:52:da:66:92:fc:d3:
                    e5:a8:e6:51:a2:3f:ea:f9:30:c7:0c:26:0c:37:20:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:87:44:88:F5:FD:8F:1E:E9:FA:CA:5E:E6:2B:B4:39:5A:F4:27
            X509v3 Authority Key Identifier:
                keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cf:dd:d5:5a:72:17:38:7e:2d:89:ae:55:f5:f7:eb:e3:c4:
         54:6e:8c:ab:41:e2:0d:57:77:94:8e:67:14:c7:0d:f6:e9:0a:
         97:67:47:37:e7:61:b9:b0:4d:ba:74:67:22:70:1c:83:98:b3:
         51:c9:d6:ba:c2:17:56:af:41:72:55:9e:71:5a:89:c6:15:4b:
         f2:ad:c3:57:ad:72:b3:28:ed:da:e8:5d:66:9a:c5:db:29:db:
         07:45:ed:b3:2c:b1:61:0d:ac:99:49:2e:9c:56:cf:bf:f1:e7:
         20:7c:e6:ba:91:da:4a:30:b0:e4:ae:bc:af:4f:f0:a9:02:c0:
         e9:14:18:f9:df:37:54:14:5e:d9:41:04:fd:bc:39:4d:04:37:
         db:bb:b8:54:c4:b8:44:02:d5:14:0b:b3:74:41:be:49:6f:6d:
         94:05:cf:7d:21:86:e1:79:d6:19:d0:35:d6:e6:70:bc:89:fd:
         56:33:12:07:03:d2:6a:76:03:b0:b0:af:52:a6:f7:e9:57:ce:
         d1:fe:b5:a7:9a:a1:a7:02:7f:9d:c4:b4:f2:2f:ff:5e:d3:6b:
         cf:7c:46:e7:75:3c:1f:74:3e:c1:7f:52:18:53:93:cd:3f:d9:
         06:83:4f:a0:78:72:d6:ea:04:16:45:f8:94:6d:3f:0b:3b:54:
         78:a6:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:46:59 2025 by rpki-client