Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File:                     PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier:          ueQZo0V5Rx8LisydtJGbjrwzeSANkbnvIJdeM3ApMnY=
Subject key identifier:   33:DD:C9:C1:3F:8F:74:AC:16:C0:23:D1:F3:59:9F:BB:BD:B5:8A:EC
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer:       /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial:       01967EA1BD0EDDBDF4D24B8AD9FAD6E46E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number:          1515
Signing time:             Mon 28 Apr 2025 23:00:50 +0000
Manifest this update:     Mon 28 Apr 2025 23:00:50 +0000
Manifest next update:     Tue 29 Apr 2025 23:00:50 +0000
Files and hashes:         1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
                          2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: WhwhMISYDUdnpVhNXEGtn3/bji+ZNCa/JfLptfQvVLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a1:bd:0e:dd:bd:f4:d2:4b:8a:d9:fa:d6:e4:6e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
        Validity
            Not Before: Apr 28 23:00:50 2025 GMT
            Not After : Apr 29 23:00:50 2025 GMT
        Subject: CN=33ddc9c13f8f74ac16c023d1f3599fbbbdb58aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:06:a4:5c:9b:e1:65:d6:1c:92:9e:fe:a1:
                    cd:09:64:cb:b1:19:61:c7:be:73:fd:14:68:bb:2a:
                    d0:60:3d:3c:1d:13:9f:d5:d6:cf:55:df:be:a4:18:
                    d0:2d:08:f9:b3:42:f6:17:ed:99:ad:d0:23:dc:1b:
                    62:0e:52:a8:8c:52:be:ad:08:e3:11:b5:e8:3c:eb:
                    81:64:3e:71:b2:dc:9e:c6:91:c8:b4:ce:e5:99:99:
                    1e:1e:d0:13:33:56:77:97:bf:89:b3:38:fc:11:45:
                    6f:3e:ab:a2:f9:a8:7e:10:3c:06:b1:f7:fe:c3:b2:
                    45:33:97:f9:f3:2a:6c:f8:85:20:2c:7a:de:1a:ad:
                    0f:9e:59:88:78:3f:74:c6:96:93:0f:21:e3:a2:33:
                    a2:8b:90:8b:1b:db:da:7b:fe:02:e9:7b:6e:4b:7d:
                    0f:ca:c9:a3:45:78:58:7d:9c:27:f2:91:73:30:97:
                    36:11:64:c0:61:dc:72:2c:7c:ee:a0:47:86:c9:d6:
                    a4:81:e4:6a:a9:86:5f:48:f4:73:f2:17:92:af:9f:
                    de:53:de:85:7f:d1:1d:33:db:b0:1a:3f:ca:ab:e8:
                    b8:64:ab:c4:6f:30:12:b9:e0:d1:da:94:fd:27:33:
                    b9:65:8d:0f:af:7f:2d:2c:18:cf:02:02:1a:8e:e9:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DD:C9:C1:3F:8F:74:AC:16:C0:23:D1:F3:59:9F:BB:BD:B5:8A:EC
            X509v3 Authority Key Identifier:
                keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9a:8d:a3:aa:1b:9b:02:ed:cf:99:ff:8f:85:30:24:65:21:
         23:4a:90:af:85:a2:1f:65:e6:14:3f:ca:98:9c:96:3f:27:c3:
         76:5a:91:7e:15:8d:da:f9:99:fe:4b:88:ac:47:b5:70:0e:c9:
         81:6f:08:1d:12:4b:f3:0d:27:72:fb:d3:43:68:64:11:03:57:
         42:88:f1:95:ea:3a:cb:98:de:92:a8:0c:da:02:32:ad:ee:da:
         3e:e5:a2:75:1e:46:96:68:68:27:3a:ef:c0:96:88:1a:5e:43:
         d2:4f:81:c0:33:c5:40:d5:32:b0:b8:b3:4a:7a:da:ab:53:05:
         bd:bb:cc:e1:2b:1c:8f:c5:83:ee:43:bc:d5:98:0d:d3:67:19:
         f1:f6:c6:84:d3:ab:d7:34:4e:39:2f:aa:a1:df:b4:47:a8:38:
         d2:6e:e2:78:85:bd:33:40:c8:21:7d:a8:1d:1f:c9:63:7d:40:
         8b:bd:e2:b9:f3:58:19:ff:c1:70:a9:c2:90:1e:c9:8a:9b:e8:
         5a:1d:b8:39:4a:6b:4d:20:14:53:81:2a:97:ec:aa:97:bb:41:
         e9:9b:0c:31:54:90:70:94:83:b9:a7:17:98:b9:ed:c5:3c:3b:
         86:ad:c8:78:88:3d:3f:28:3c:11:e8:97:8c:3c:1f:e7:ba:a9:
         89:ee:8d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:05:59 2025 by rpki-client