Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          zsWemjsP4YLESLbKXUNQAER2zYkUCog32O3bRszN+Y0=
Subject key identifier:   AA:0F:B9:3E:D5:6A:07:50:65:1C:75:7B:B3:1E:A4:5E:FF:B3:31:44
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       0196729D3B5A73BC5E2EEC467543397C8660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          0FCC
Signing time:             Sat 26 Apr 2025 15:00:29 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:29 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:29 +0000
Files and hashes:         1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
                          2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
                          3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
                          4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
                          5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: RST45mfgeenzQHgJSUBpUYpuIjmrh2y3xhClj4z2Ad4=)
                          6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:3b:5a:73:bc:5e:2e:ec:46:75:43:39:7c:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Apr 26 15:00:29 2025 GMT
            Not After : Apr 27 15:00:29 2025 GMT
        Subject: CN=aa0fb93ed56a0750651c757bb31ea45effb33144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:94:08:4e:25:36:2f:02:f6:a2:9a:b8:88:
                    c5:32:d0:a9:b7:68:9e:7d:82:96:c4:c1:19:8b:85:
                    10:ad:4a:a0:d2:89:78:ef:0e:0b:45:e3:e2:07:dc:
                    69:c6:e7:90:66:80:a4:f3:7f:76:01:12:bb:5e:cd:
                    9e:5e:9c:0f:6e:be:45:36:06:f9:83:2b:17:94:43:
                    54:b5:d3:53:12:f0:43:f1:a7:84:84:6b:46:dd:82:
                    7b:ca:22:d7:00:0a:58:d0:f8:cf:8d:ac:fd:cf:47:
                    85:a6:be:89:bf:69:ff:22:2f:44:ee:11:31:1e:84:
                    e0:11:a9:3c:3c:24:d3:d4:9d:36:96:67:b3:29:12:
                    c0:4d:9e:30:8a:f6:a5:91:c0:fa:9e:02:25:94:54:
                    7b:c3:47:75:70:2b:b6:5a:24:88:f5:a2:4f:7b:95:
                    15:f9:d6:68:04:94:a8:60:ae:22:8a:ca:6a:ad:b2:
                    45:19:a1:36:51:79:66:ca:15:fb:fb:f1:ab:97:4d:
                    01:e7:a6:49:27:cb:fc:03:7b:ae:1e:a0:c5:da:47:
                    a8:d4:32:5e:d0:5d:7b:4f:c0:c9:e5:7a:27:04:b3:
                    f8:a9:d0:15:8d:2b:3a:66:a7:0a:86:6a:e4:14:ff:
                    90:d4:5d:81:10:69:2e:cf:bf:4c:17:35:35:55:29:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:B9:3E:D5:6A:07:50:65:1C:75:7B:B3:1E:A4:5E:FF:B3:31:44
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:09:ef:07:45:6c:dc:fd:1d:d7:e8:67:42:1f:02:30:42:bf:
         56:f8:e9:dc:0d:65:c4:ff:8f:6e:9d:ea:ef:76:b1:7c:02:93:
         5c:37:50:1a:29:98:a9:9d:00:0a:5a:92:dc:73:c9:52:82:ca:
         55:22:f6:10:09:b7:4c:74:10:b8:d7:8f:2c:f9:6a:ba:ea:99:
         ff:7c:93:50:7b:7a:af:92:9c:89:e3:f9:25:fc:7a:e0:e1:90:
         1d:05:6b:22:71:39:6e:1d:37:cf:28:24:05:76:ae:2a:f6:b7:
         f4:c3:7c:2b:3d:c0:63:23:33:53:95:1a:aa:79:8e:18:2d:d7:
         8c:53:82:36:1a:06:bc:07:a8:44:bd:7d:1d:45:2c:0a:9a:96:
         5d:f8:a7:ba:86:8b:5c:02:93:6d:2f:57:47:8c:3e:3d:1a:03:
         c9:07:d5:e1:59:a4:5d:87:44:0b:dc:da:d1:35:77:89:f1:14:
         d4:10:c7:cf:93:b5:b0:97:e5:1b:95:e6:8a:66:55:06:09:42:
         4f:dd:cb:a4:cd:45:c6:cc:6e:d8:66:c1:53:69:82:d5:5c:57:
         97:c2:01:6a:30:fc:45:bb:e3:61:d1:b0:f4:51:59:31:5e:aa:
         c0:25:34:3e:5c:01:d1:5d:59:bd:f8:7e:1a:77:ae:11:cf:3c:
         93:e6:cd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:09 2025 by rpki-client