Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File:                     RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier:          qJ/wQYWnbBTyT1uqvCB8eLxIk7cBWnsjOSKt6Nj7Kvo=
Subject key identifier:   37:24:F1:CE:37:39:92:D4:50:60:33:C7:8F:9C:19:80:29:64:81:30
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer:       /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial:       019674F972E93D4DAFDE1A8D318A714FF604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 02:00:27 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:27 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:27 +0000
Files and hashes:         1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
                          2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: jxWchajHke/wdd+r7n6EQlnpm+0Mme9DL0tvxyUzPEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:72:e9:3d:4d:af:de:1a:8d:31:8a:71:4f:f6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
        Validity
            Not Before: Apr 27 02:00:27 2025 GMT
            Not After : Apr 28 02:00:27 2025 GMT
        Subject: CN=3724f1ce373992d4506033c78f9c198029648130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:94:1a:85:04:fd:7a:76:05:7e:6b:9a:47:
                    bc:59:bd:7b:92:0a:90:9f:0e:4d:33:fc:0f:ad:fb:
                    f9:65:56:17:08:c8:7f:cb:73:a7:4b:b7:eb:6a:52:
                    3b:4b:3b:ef:fa:c0:0d:82:b1:f8:6c:14:08:0e:3d:
                    71:b7:ed:2d:4b:19:d8:a8:46:f8:5b:86:7b:d2:51:
                    e1:9c:68:5b:fc:c3:db:0f:2a:ae:04:4d:be:18:e5:
                    11:4d:ec:5e:1a:7f:72:77:5e:12:c3:4f:1c:c9:5c:
                    08:dc:1e:3c:49:f4:33:05:8b:f1:2c:13:38:fb:4c:
                    ee:77:22:62:3a:1d:76:bf:12:84:bb:31:d8:3f:f7:
                    e7:70:2b:d1:4e:5a:4a:63:13:69:7f:99:77:d3:5f:
                    e1:b1:d2:ce:19:f7:89:51:7b:b9:22:bf:7f:1c:c0:
                    ba:4a:57:90:b6:af:a7:f2:90:a2:cf:36:1d:c2:57:
                    63:4b:91:47:b0:33:cd:77:e5:59:3b:6e:a1:b5:7f:
                    28:64:67:b3:83:ed:74:d2:5a:30:da:56:54:42:93:
                    2c:52:0a:ce:d2:5a:12:85:18:91:dd:af:f5:1c:61:
                    2b:8c:fa:b5:70:58:73:20:4c:ac:ec:b5:1f:76:b0:
                    d0:d2:5a:a3:a4:41:6b:43:0c:a8:a2:53:2c:3b:29:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:F1:CE:37:39:92:D4:50:60:33:C7:8F:9C:19:80:29:64:81:30
            X509v3 Authority Key Identifier:
                keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:18:6f:90:38:30:1c:bb:58:4c:41:1f:61:8b:86:1c:20:53:
         51:07:14:c2:5d:b2:8e:97:79:25:76:49:45:78:9f:c0:c6:a4:
         88:93:9d:f5:63:2c:d1:33:02:c4:bf:ab:44:4d:93:48:f9:86:
         c4:d3:81:86:ef:dc:90:23:bf:27:05:58:67:4a:92:07:7b:bf:
         d6:64:41:08:bf:8b:a1:e6:39:99:98:0a:e6:84:a5:c4:0e:ac:
         a6:f4:41:5b:40:84:90:61:30:9f:10:55:74:d2:5d:92:9e:43:
         fa:0c:3d:5e:dd:12:29:cc:3c:f1:43:a7:0f:05:74:19:80:2a:
         31:88:37:52:bf:cf:ab:3c:12:64:08:d8:7d:d7:b1:5a:fc:18:
         3a:9e:af:5c:ca:d2:bf:0e:bb:ef:40:6b:fc:55:7f:02:ec:65:
         55:4e:ee:82:08:c0:03:0a:64:d1:00:04:a7:6c:1d:2d:00:d6:
         74:c3:23:00:b6:d1:c3:4b:f2:93:3d:ed:3b:1d:df:09:2c:1c:
         2e:89:1e:6f:75:f8:1f:34:84:e4:de:5b:1e:72:4a:62:cf:88:
         65:ff:7c:68:aa:dc:ae:6f:e0:c7:dc:74:3f:f1:a8:1c:5f:72:
         e0:7e:73:d7:4d:8f:21:84:19:92:99:eb:80:55:68:d1:19:11:
         a4:8c:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:50 2025 by rpki-client