Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File:                     83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier:          xXVp4ZUmZRVg/4ggfACbL71UyhXi/m5hyXcg1L8M1uo=
Subject key identifier:   3D:FC:8D:4B:0D:D9:CD:8E:05:4A:4F:0E:D9:52:31:E2:8C:FD:05:B1
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer:       /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial:       0196767A764B51B85FB7A4C531FD2130B031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:59 +0000
Files and hashes:         1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: hdY/urbkkUgc8/u/vZtsyu9yyp3CalBaCLOzBQ5B2hs=)
                          2: RQIIwfPKKX5p7u0Y-C_D5Y-bKBI.roa (hash: KiLJtwlRDmcGob+kpYuioRY1Q/RLPjcl0rdsa4MFnrs=)
                          3: xelQwmSnZUsP7vwyXYG-OjnLzks.roa (hash: VANd7e1T8sboSWcnlJJpwtTBZNkVD3ZVwPQJ+ivjoHw=)
                          4: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (hash: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:76:4b:51:b8:5f:b7:a4:c5:31:fd:21:30:b0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
        Validity
            Not Before: Apr 27 09:00:59 2025 GMT
            Not After : Apr 28 09:00:59 2025 GMT
        Subject: CN=3dfc8d4b0dd9cd8e054a4f0ed95231e28cfd05b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:bb:e7:90:ec:57:65:c7:3c:be:15:5a:bd:
                    d0:a6:0f:2e:00:1b:70:80:3b:7a:3f:2d:17:58:8e:
                    5e:b4:5c:fb:64:23:cc:95:6d:80:e5:95:e3:33:41:
                    79:82:06:07:ba:97:5d:c9:33:10:02:c7:42:b0:8c:
                    a9:17:2f:21:25:ea:f4:03:a8:be:2f:37:3e:d5:9c:
                    d5:a4:bb:a7:6a:89:4c:fd:67:46:c0:cc:e1:90:e1:
                    b7:c5:83:c7:e3:a7:45:f9:a5:9b:33:0f:16:cb:94:
                    b8:68:6d:00:b0:67:a2:ac:df:d4:75:54:26:f0:95:
                    9c:97:15:32:c4:7f:44:b0:92:cf:d7:80:25:a1:54:
                    ae:fb:6a:d8:4e:c4:2b:b1:bb:85:9a:14:41:58:34:
                    90:fa:0e:30:b8:82:0e:ac:4b:10:66:e6:e9:91:8c:
                    b9:95:9d:27:72:de:84:05:1b:a7:e1:a5:4f:0c:38:
                    1e:06:43:b0:e2:63:65:48:26:b4:cf:7c:3f:51:83:
                    0e:70:f0:ae:c3:62:df:31:2d:8c:22:5b:15:04:0d:
                    ad:4f:c2:76:e6:b3:29:9d:f5:6b:6e:65:08:0b:2c:
                    93:29:ca:e5:ca:d3:7d:da:9d:f5:73:cc:fd:1c:4a:
                    07:b4:bb:ac:e3:f1:43:e4:22:5c:f9:43:9c:78:d6:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FC:8D:4B:0D:D9:CD:8E:05:4A:4F:0E:D9:52:31:E2:8C:FD:05:B1
            X509v3 Authority Key Identifier:
                keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:cd:81:ac:b6:2d:59:05:7e:e3:2d:40:7c:cc:9d:8d:4c:
         6d:52:75:aa:a1:42:39:48:36:f6:ad:68:45:72:92:41:ff:39:
         52:ed:96:b3:35:4f:06:f5:d6:94:48:0d:e3:07:73:ce:c5:34:
         bc:42:2a:95:f9:be:46:98:ce:b3:3c:6b:18:7c:bd:73:67:72:
         b5:05:3b:dd:ec:b0:ea:fd:e5:79:e0:6a:04:05:a0:b1:77:62:
         7d:6d:ed:d9:09:33:76:92:98:c0:6d:0f:2b:af:e3:16:4f:34:
         14:46:83:ae:ec:f0:46:00:e8:74:8f:9b:f6:6b:4a:ea:96:64:
         16:f0:d5:27:dc:a1:10:67:b5:93:6a:eb:56:93:59:14:f8:42:
         b3:72:ac:b5:cf:cb:19:0c:04:cf:f5:0c:44:b8:3a:b1:e4:c3:
         7c:14:d1:83:bd:2f:93:24:e4:ae:ae:7c:b6:09:dc:d5:db:6a:
         69:97:c4:f5:4a:ce:6d:f4:30:f6:3f:a7:62:b0:5d:c9:63:e6:
         02:82:65:0f:72:23:b4:13:9a:e6:ed:6a:2b:3b:90:97:d8:c9:
         37:24:2a:f6:5f:06:a2:ba:ff:f9:41:35:26:85:31:a8:42:53:
         4b:ce:17:ee:28:c3:79:fe:73:08:84:9d:9d:ed:e5:64:2f:9d:
         dd:3b:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:01 2025 by rpki-client