Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File:                     _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier:          SgmXFjtDHdm9KHRVK6aHr2c/zqUOsOIi1HOCCq38B3U=
Subject key identifier:   52:94:3A:93:E2:74:B8:A7:91:3F:4D:F0:51:9A:70:A4:00:5E:C7:27
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer:       /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial:       019675D53924608EFF499F012994CABF9115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 06:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:30 +0000
Files and hashes:         1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
                          2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: tJ+3//B6ImdBMYgD5FFD//JCq+8gzXcLZJzIppyILUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:39:24:60:8e:ff:49:9f:01:29:94:ca:bf:91:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
        Validity
            Not Before: Apr 27 06:00:30 2025 GMT
            Not After : Apr 28 06:00:30 2025 GMT
        Subject: CN=52943a93e274b8a7913f4df0519a70a4005ec727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f7:65:06:03:39:0d:1e:b5:35:0a:27:de:2a:
                    6c:10:0b:52:a0:cd:9e:b5:b0:52:f9:b5:74:7f:27:
                    11:2f:22:59:85:32:87:69:84:ee:ac:6e:52:f9:32:
                    92:ab:21:e9:4d:36:1b:a2:02:01:4b:35:4b:01:67:
                    f1:87:b8:a5:e8:33:5e:29:63:08:c7:07:c8:ff:c1:
                    86:3e:79:d3:3e:b8:68:3d:47:e8:5b:32:d0:ff:74:
                    f4:90:23:ef:e5:dc:3a:79:38:42:e9:fa:cb:fe:7f:
                    26:b2:8d:58:a0:e6:60:d7:bb:8e:2c:c8:71:27:3d:
                    c6:08:30:7f:9d:4a:4b:b4:2e:f2:0b:73:b8:e7:20:
                    c5:c8:51:8a:dd:33:37:24:23:f9:bc:87:e3:50:86:
                    6e:d8:2b:cc:e5:cf:c3:10:ee:89:42:91:45:6a:ad:
                    70:0e:6b:a4:f0:b5:2b:bd:e4:59:b7:3a:0d:4c:d1:
                    9a:f0:50:67:3e:c2:a8:92:c2:88:e6:49:d0:ba:b4:
                    d7:8e:ec:4f:2e:37:39:ee:da:96:e4:cc:2b:94:e9:
                    f7:16:39:17:e6:e5:b1:e6:5e:35:39:77:ff:91:e3:
                    62:dd:9e:b8:44:c0:63:50:73:6d:ce:38:4e:b8:3a:
                    ea:11:49:3d:f4:a9:1b:0b:6f:c4:9c:7e:b7:a5:bf:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:3A:93:E2:74:B8:A7:91:3F:4D:F0:51:9A:70:A4:00:5E:C7:27
            X509v3 Authority Key Identifier:
                keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e2:4c:27:7f:48:a0:32:1d:84:99:a2:34:57:2c:27:8b:1f:
         43:ee:d0:7c:94:fe:65:a1:4f:3c:0d:1c:1a:85:24:98:28:c1:
         90:01:f4:5b:6f:30:ab:1f:cb:08:ae:30:51:90:cd:fe:c4:c3:
         da:66:70:e0:95:87:ef:66:c2:b8:6a:2e:e9:86:e7:ca:07:38:
         44:dc:16:e8:a1:d3:f3:70:4b:a1:61:ec:2f:6a:f1:e8:18:08:
         7f:7b:e5:9a:74:db:bb:8d:bf:c4:48:a6:f4:a5:63:c2:d1:6a:
         ef:be:2e:e9:32:9d:ba:81:10:b7:15:6a:ab:02:5e:13:dc:89:
         15:cb:82:19:ab:48:fa:8b:7e:ef:d6:89:72:a2:cc:8b:6d:2d:
         6d:17:d1:a8:40:f0:fc:6d:69:25:e0:d7:a8:90:f6:75:3d:e6:
         e3:94:ef:3c:ec:41:e1:7c:e0:86:96:ea:97:e8:cf:30:69:66:
         26:49:6d:25:fe:b3:02:7c:60:cf:b0:e4:53:f5:63:e6:20:8f:
         5d:2c:3e:17:30:09:3d:dc:b8:4d:17:4c:56:43:f6:2a:2e:98:
         9b:20:a9:ab:8e:f4:55:7c:7c:e9:2d:3f:3c:5b:df:53:c0:cc:
         f6:85:18:05:51:41:95:67:39:4e:89:d0:d1:ae:69:45:9e:a0:
         c0:0d:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:40 2025 by rpki-client