Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File:                     PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier:          tiFHzmbIFPL4sid1CMzR0x2AQRIZGBbFhAT/84nYPXw=
Subject key identifier:   6F:5C:F6:5B:F2:F4:27:13:7F:4B:DC:36:55:B6:C8:A6:71:BC:EB:25
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer:       /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial:       019677FA8D6608D29E55A366568E7FEAA8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 16:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:30 +0000
Files and hashes:         1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: kMHSBi/I/duom0F5Ai9bvV3R+4GPtGgBu63NU74mby4=)
                          2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:8d:66:08:d2:9e:55:a3:66:56:8e:7f:ea:a8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
        Validity
            Not Before: Apr 27 16:00:30 2025 GMT
            Not After : Apr 28 16:00:30 2025 GMT
        Subject: CN=6f5cf65bf2f427137f4bdc3655b6c8a671bceb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:01:6d:ca:c1:7e:2f:05:a4:2b:f2:c8:0f:9b:
                    fa:b0:40:d5:1d:db:b5:94:fa:3b:2c:93:a9:17:e1:
                    19:c2:6a:74:f8:05:32:9d:85:f3:16:44:d4:00:5b:
                    17:06:40:2e:64:7e:28:58:9f:bf:c5:c2:8b:2d:ce:
                    9d:84:b6:93:22:e4:07:1c:cd:9e:60:5d:eb:29:c3:
                    61:49:76:74:06:72:a8:97:ec:c5:d7:00:a3:3b:a1:
                    0c:bf:df:c5:5b:4c:f6:3e:c9:f5:67:78:99:ec:fa:
                    1b:73:c6:d6:79:b7:bd:0a:de:25:d8:1d:39:a1:04:
                    a2:1a:4c:1a:8a:45:8e:c3:7f:36:28:87:87:40:2b:
                    27:79:e9:73:b1:3a:cf:56:02:6b:40:2f:d2:c1:34:
                    8d:cd:da:47:d8:c3:97:2e:88:bb:14:04:52:f0:f7:
                    fa:37:1b:6d:35:85:bf:e2:16:a5:90:c6:c4:9e:e1:
                    3b:13:34:61:5f:f2:a9:7c:f8:81:34:98:5e:c1:50:
                    58:70:22:c7:e9:36:ea:3e:7a:62:af:a6:23:74:b0:
                    72:cb:c3:d0:f8:0d:b5:24:2f:6c:ef:cf:b4:6d:7c:
                    d2:f1:d1:ef:6b:0f:cc:60:22:97:c9:79:b4:25:6b:
                    e3:17:8b:d1:6f:bb:03:bf:23:d4:ab:1a:7b:90:a8:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5C:F6:5B:F2:F4:27:13:7F:4B:DC:36:55:B6:C8:A6:71:BC:EB:25
            X509v3 Authority Key Identifier:
                keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:24:2d:26:a6:c3:1e:bc:c4:d8:51:e0:fc:4c:5f:2d:14:
         df:e3:d5:95:af:4f:b5:9c:2a:2a:ba:74:a2:a0:90:90:91:18:
         25:24:dd:81:79:47:15:c6:72:e9:75:78:19:eb:8c:79:de:ad:
         f1:96:33:cd:01:2c:a5:8d:fe:1b:b8:ba:7c:e7:b9:3f:12:b4:
         12:a2:41:dc:40:29:4b:ff:00:cf:c5:27:c8:34:e4:a0:53:d4:
         5a:96:09:b9:64:32:6f:56:3b:77:15:19:b7:9f:4f:77:ed:2f:
         17:7b:aa:8e:6e:94:2b:bb:6c:7e:9c:76:73:2e:83:cd:62:26:
         bd:ff:10:aa:ca:63:80:3d:d3:17:4e:13:3b:33:c9:6a:dd:b7:
         64:75:6f:6e:60:48:bb:e1:7b:6b:58:33:08:1b:6c:e1:ef:fb:
         84:d3:2b:91:e1:e1:bd:e0:b6:bf:08:71:9c:cc:43:c4:f1:07:
         68:ab:c0:6a:5b:c4:79:3e:97:a7:71:69:1a:d6:cc:71:52:6d:
         7a:ef:10:53:90:2d:88:f8:57:db:95:c8:d1:ca:17:b9:d0:64:
         c5:5d:66:d3:35:3e:e6:11:aa:db:fa:57:43:5e:e1:a6:40:bc:
         ec:64:d7:ca:d0:03:7f:8c:cd:54:b9:1a:f3:35:d8:b1:17:80:
         86:30:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:19:52 2025 by rpki-client