Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          o+txmGpvHo621OOxjuBFuAGc4Tvs+cmBjMTU9llMwHA=
Subject key identifier:   20:78:2E:AA:0E:25:E5:84:2D:60:E5:BF:B7:AC:7B:CA:9C:05:EC:DA
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       019677FAD8AE70A7F1BDA1833B1497BADBFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          047F
Signing time:             Sun 27 Apr 2025 16:00:50 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:50 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:50 +0000
Files and hashes:         1: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: dkiuJNo5no9Vuz0v3V9zD6aCKpfflWEfFW6GWL1oFjg=)
                          2: fZ9isGtIlM4KCLTcv8R-iIf03v8.roa (hash: B9s0fxg99QLzPGHKR09eX4IAtgF+hQonUvqfnXhZlTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:d8:ae:70:a7:f1:bd:a1:83:3b:14:97:ba:db:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Apr 27 16:00:50 2025 GMT
            Not After : Apr 28 16:00:50 2025 GMT
        Subject: CN=20782eaa0e25e5842d60e5bfb7ac7bca9c05ecda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:d7:d0:f4:3f:6a:2a:fa:f3:dc:f8:53:cd:
                    d9:b2:0d:b9:da:3c:06:7a:c4:af:f6:5d:32:4b:30:
                    93:50:69:fb:4d:83:fb:3a:a3:13:ee:04:75:cb:fd:
                    35:5c:f5:f8:82:49:cd:98:0c:d2:a7:4d:af:06:23:
                    0d:46:59:32:19:d9:0c:cc:d2:f0:b6:19:d7:58:35:
                    9b:89:53:03:14:fc:d8:cf:6f:91:a7:8f:cd:58:ca:
                    dc:e0:d8:d7:35:66:8d:66:2c:76:40:c0:4a:3e:4b:
                    6f:3a:35:88:8e:f2:e4:5d:78:e9:fd:e4:49:15:13:
                    80:34:a0:bf:ee:60:01:42:66:90:67:b7:62:a2:26:
                    82:52:13:49:88:2d:0b:35:14:cf:2f:9d:93:d8:2f:
                    b3:bf:09:5a:88:b2:5b:53:93:85:f1:cb:1d:a6:56:
                    7c:a0:e7:c8:70:75:ec:ba:c0:dc:d0:39:69:ad:b8:
                    0f:8c:75:33:7b:42:4c:99:c8:28:f9:8a:40:39:38:
                    1a:a4:8b:0a:dd:e9:13:0a:4f:11:fd:6b:d8:a8:36:
                    7e:43:47:32:05:1e:46:e9:b8:c4:6d:1d:74:c4:a9:
                    9b:c6:9a:5f:e2:f7:b1:cd:fa:7c:39:75:31:17:8b:
                    67:98:90:ef:a1:f0:60:2b:48:4e:8f:d0:cc:4f:76:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:2E:AA:0E:25:E5:84:2D:60:E5:BF:B7:AC:7B:CA:9C:05:EC:DA
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f4:4a:10:e6:fb:19:47:e3:bb:48:06:5a:54:b4:d6:49:13:
         2f:b3:4d:03:2a:97:ca:2a:06:49:c1:e5:48:3a:05:36:64:3c:
         9e:41:fe:e9:3b:98:3b:8c:86:7f:31:45:4f:73:3b:10:98:aa:
         89:0c:a2:a3:2c:a3:72:60:9f:45:20:7b:a4:09:38:3d:a1:14:
         10:51:ad:1d:8f:20:2f:48:8e:86:0f:f0:30:3d:90:68:eb:f5:
         0c:ab:45:06:ca:b5:d6:12:a1:76:40:6c:94:38:4d:ab:91:b9:
         39:ea:50:78:f3:2f:f2:8c:cf:ec:76:5a:71:d4:f5:6f:a5:e7:
         1e:10:f4:5e:89:cd:b7:cc:ee:6a:c6:0c:43:6e:ad:a3:33:35:
         d5:fd:87:11:a1:1a:0f:cd:69:9a:d5:59:0d:a2:ea:3c:53:40:
         92:14:50:b5:77:06:a5:e5:8d:9b:20:f5:51:5e:24:27:6b:d4:
         ac:93:00:80:7f:40:aa:a5:08:aa:a3:e1:75:92:9e:df:37:97:
         96:4c:42:4d:dd:85:0f:43:0e:f1:d5:e7:d2:ef:ef:36:f4:36:
         0e:42:ec:e7:65:fe:a2:bd:04:ef:36:ad:c7:15:04:f4:1a:60:
         73:a3:d8:0a:3a:0d:ec:9b:f7:77:9d:2b:e1:01:d5:e8:a6:03:
         17:19:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:21 2025 by rpki-client