Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File:                     zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier:          p43dw5x6W8jLbtbf7PhknJ/r0Jsv7Q/T1ra0VL+/ntk=
Subject key identifier:   B3:00:CC:9E:08:3D:E0:CA:F0:03:61:3D:12:6C:49:BC:2B:CB:BC:89
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer:       /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial:       01968F284605F00AB6AA146D50ADBA50FABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number:          0D19
Signing time:             Fri 02 May 2025 04:01:43 +0000
Manifest this update:     Fri 02 May 2025 04:01:43 +0000
Manifest next update:     Sat 03 May 2025 04:01:43 +0000
Files and hashes:         1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: zz5ol2xaChhg8w9SMYoypZh3Q/ep8Vnj3XYYh+gjsZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:28:46:05:f0:0a:b6:aa:14:6d:50:ad:ba:50:fa:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
        Validity
            Not Before: May  2 04:01:43 2025 GMT
            Not After : May  3 04:01:43 2025 GMT
        Subject: CN=b300cc9e083de0caf003613d126c49bc2bcbbc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:dc:e6:57:44:1d:b5:6c:d0:90:ff:2c:cc:
                    a5:60:d9:a1:83:11:6f:61:64:9f:e8:be:06:48:27:
                    d4:3f:d4:fb:77:a8:b6:79:e3:b0:0f:e8:6e:bb:3d:
                    9e:e0:4e:8e:e2:0e:34:21:00:ea:63:1d:e6:4c:f1:
                    82:43:46:85:3e:a2:dc:19:da:92:57:79:13:72:86:
                    4a:3a:44:19:e3:ba:c5:19:96:79:ee:07:bc:d1:54:
                    9b:5d:76:aa:c4:a8:89:04:2f:e0:4d:5f:62:e9:06:
                    b1:07:bf:0c:f6:7a:cd:22:6f:65:0f:a1:67:26:8a:
                    0b:63:8a:50:ed:cd:1f:19:6b:da:a9:ee:17:49:17:
                    2c:0f:c7:42:df:ab:f0:cf:72:fd:51:96:24:4b:50:
                    70:ec:4d:4b:af:10:35:d4:d4:c8:c9:7c:7a:ad:09:
                    25:f7:22:4c:4f:b2:fd:9b:df:c7:74:6c:b0:7d:3d:
                    17:db:14:53:1d:d8:4d:55:a4:ad:5b:5c:b1:73:4f:
                    c8:ae:ee:ec:a5:66:48:f5:fa:4b:19:9b:22:36:fd:
                    41:af:b4:52:31:e6:2e:f5:62:a8:e3:0a:1c:98:4b:
                    80:af:77:f9:79:99:63:a0:f0:30:62:c2:cc:fe:d1:
                    4e:70:2a:ec:e5:ec:06:30:22:05:fd:fc:d5:82:29:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:CC:9E:08:3D:E0:CA:F0:03:61:3D:12:6C:49:BC:2B:CB:BC:89
            X509v3 Authority Key Identifier:
                keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:4a:5e:d1:f5:23:14:aa:c3:c2:ee:17:8c:41:3d:49:84:
         70:36:1a:d1:b9:23:31:72:f9:e3:b0:54:9a:9c:fd:40:d3:ab:
         fe:4e:bd:a8:e0:fa:75:9d:35:2f:bb:28:f6:95:52:29:86:c9:
         e0:e1:1d:62:43:a8:c0:f5:6c:70:a5:7b:00:b0:ed:98:63:cb:
         85:6c:8c:39:59:bf:b2:23:8c:83:ce:b6:7d:c4:e0:86:f4:e2:
         2c:3f:be:01:d7:4a:1f:c3:3c:b9:5e:30:2b:33:18:1a:6f:a8:
         6d:e0:ef:aa:d6:c6:a6:de:1b:85:fe:99:42:cd:42:21:0f:02:
         37:94:1e:68:ff:f8:75:a1:2f:81:56:4e:0e:a9:0e:8b:0e:79:
         c4:7d:ae:a1:14:c1:ee:c9:4f:82:f6:b2:d9:fd:8f:a3:cd:48:
         f9:18:0a:d8:7f:16:40:8a:42:23:ec:c2:c2:ca:7a:82:4a:06:
         0e:eb:ed:3e:8f:90:74:c3:07:2c:c7:80:8f:09:45:47:ac:8e:
         c4:77:29:2a:dd:86:d5:26:b0:47:36:26:85:b5:28:86:f3:08:
         4c:4b:dc:98:4e:16:2c:92:83:57:7b:7c:cc:e7:87:ab:29:e8:
         f7:38:c0:15:cc:28:17:9d:8c:61:e6:d1:99:53:e3:54:20:fd:
         84:76:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:08:28 2025 by rpki-client