Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
File:                     MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft (raw, json)
Hash identifier:          Opo84Za3TkbdQ4p930HaXlzYUHnKUtk8Igbn2T1IJVA=
Subject key identifier:   ED:CF:BC:E2:06:9B:0A:5C:B7:EA:53:D7:2B:62:66:C9:D2:4A:9E:C3
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Certificate issuer:       /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial:       01968BEF4701A354A89C1A77E5ADC9FA57B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
Manifest number:          151D
Signing time:             Thu 01 May 2025 13:00:36 +0000
Manifest this update:     Thu 01 May 2025 13:00:36 +0000
Manifest next update:     Fri 02 May 2025 13:00:36 +0000
Files and hashes:         1: DStV17Hecan-6QQiecnzOLb7PtA.roa (hash: E6s1lLpFj1dG9iVyKbgkYVYs/gktTO6G9yKQPD1Kbsk=)
                          2: MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl (hash: hFyddvHI/C1sbwyC8wWmPbxODHkhXx/EZI+nuGfydFo=)
                          3: OOR2C4NfwLbcE74byGedRUcg34A.roa (hash: tExNqyl7DFFkGILQ3eOlKSLeSHLrbYUZ9m6SSiTSCJM=)
                          4: daYV5svP14BSfH0S8i-aZ5WBv5M.roa (hash: Hs0nBQ6m77zflugmlg/FABCDAsXWbLjyitCeWa+v+ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:ef:47:01:a3:54:a8:9c:1a:77:e5:ad:c9:fa:57:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
        Validity
            Not Before: May  1 13:00:36 2025 GMT
            Not After : May  2 13:00:36 2025 GMT
        Subject: CN=edcfbce2069b0a5cb7ea53d72b6266c9d24a9ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:15:aa:50:48:27:54:ce:1a:50:a0:e3:0c:
                    bd:c0:f2:ca:05:f1:20:b9:04:9c:df:9a:e8:ee:da:
                    27:2d:5b:ce:06:ad:3d:ac:6e:a5:40:aa:3d:33:4e:
                    78:a6:fc:45:5a:09:31:f3:f3:aa:62:ec:1f:fc:ac:
                    72:68:08:7e:0a:26:f4:93:b4:58:68:c1:24:ee:1e:
                    c0:b9:6e:13:28:c8:fd:57:de:79:98:35:cd:04:f9:
                    cd:cf:fe:03:4f:ad:62:d7:bd:48:7a:c7:12:c5:53:
                    0c:55:2f:d8:c2:e8:4a:a4:6c:aa:61:93:49:44:77:
                    29:d0:82:1c:af:72:85:53:1d:ad:79:89:26:e5:13:
                    e3:96:d4:24:e2:2e:96:c6:47:48:d7:08:a6:45:d3:
                    1c:f6:52:f1:e9:76:a4:03:5b:45:ba:6f:f6:52:e4:
                    c9:99:10:65:48:39:fe:5b:ce:d1:9c:62:bb:95:6c:
                    75:cd:13:07:2f:da:d9:a9:13:b3:8d:f4:5f:09:17:
                    56:06:80:94:15:55:6b:74:6d:ee:57:30:0e:65:81:
                    fa:fb:c3:6c:0f:c9:c9:87:39:21:41:01:46:b7:18:
                    ab:57:8e:e6:43:aa:83:f9:ff:17:e4:13:9e:68:8a:
                    de:5d:f6:87:2a:93:8c:33:31:72:86:4d:94:50:dd:
                    6e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CF:BC:E2:06:9B:0A:5C:B7:EA:53:D7:2B:62:66:C9:D2:4A:9E:C3
            X509v3 Authority Key Identifier:
                keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:9e:89:9c:26:39:e8:f6:00:7f:11:99:7f:25:07:8a:81:
         68:cb:79:79:07:75:cd:2b:1e:3b:36:3f:48:1e:24:8d:ef:2c:
         2c:4f:90:cb:f2:a5:8b:23:93:30:ee:41:90:f3:44:cf:c2:99:
         ab:b3:f7:d9:ad:6c:59:44:b7:fc:cd:69:c3:da:d8:e7:11:41:
         07:1a:50:87:83:d4:ea:5f:cc:b0:62:34:1f:9c:1c:cd:a5:00:
         d9:71:34:cf:b8:73:13:36:f9:b2:ef:5b:82:d6:26:fb:89:20:
         b1:25:ff:9e:cb:40:c4:76:ef:d1:94:d9:c4:ed:b1:00:fb:54:
         e1:df:cd:ad:10:93:50:67:31:54:58:ff:7d:de:8c:7d:aa:30:
         10:ce:5e:99:fb:bd:cf:55:64:c2:39:e2:e9:5d:be:e0:6f:3e:
         a0:50:b2:df:b4:13:48:8f:f5:d1:8c:1f:95:2a:7a:80:8a:09:
         d2:4e:d2:e4:61:14:93:75:b2:9f:69:a7:94:9c:76:82:8e:a8:
         24:20:dd:a5:5d:a1:08:73:1b:89:74:2c:5b:af:99:9a:bb:e7:
         5e:9a:c7:ff:1f:ed:3d:e8:cf:ae:89:6e:8f:01:4a:de:ff:07:
         1f:a0:0c:ca:dd:6c:ac:57:f3:16:1b:f1:d6:fa:fc:6d:33:b0:
         8d:e6:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:43 2025 by rpki-client