Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File:                     1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier:          osBFeTOfFB/3uJPgstGp7jEd1qjkGGWQD6BGmzKDCjA=
Subject key identifier:   A0:1B:D5:40:E5:12:28:74:59:4C:F6:88:A6:29:55:6D:8F:2B:16:C5
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer:       /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial:       019689C9A63D31D6DEF8D00E4833C5B775A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number:          151D
Signing time:             Thu 01 May 2025 03:00:15 +0000
Manifest this update:     Thu 01 May 2025 03:00:15 +0000
Manifest next update:     Fri 02 May 2025 03:00:15 +0000
Files and hashes:         1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: GtPb8HOg1/x6OGbv5fOqxBOFkxzOPieltQtKIA5SQKI=)
                          2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
                          3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
                          4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
                          5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
                          6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
                          7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
                          8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:c9:a6:3d:31:d6:de:f8:d0:0e:48:33:c5:b7:75:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
        Validity
            Not Before: May  1 03:00:15 2025 GMT
            Not After : May  2 03:00:15 2025 GMT
        Subject: CN=a01bd540e5122874594cf688a629556d8f2b16c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:10:0b:db:71:91:fc:ed:cb:35:c9:bb:4f:
                    13:bf:65:18:e1:06:11:f2:61:a7:bd:6a:00:86:5d:
                    af:86:43:71:cc:eb:d2:bf:61:98:95:14:9d:a3:4e:
                    82:7a:ae:df:aa:5f:b8:2e:c8:4f:6c:81:81:63:a7:
                    af:1c:d8:76:98:78:52:03:a7:91:8d:e9:c5:fb:2e:
                    06:39:2c:00:c2:4f:6b:a2:2a:1b:64:e9:98:2d:f8:
                    9f:02:b5:8a:bd:8b:1b:bc:80:e9:66:21:f2:50:61:
                    4a:32:f6:83:1c:5c:8a:95:b8:21:7a:20:43:a0:5d:
                    22:57:d3:c6:0a:7f:01:c5:1a:8a:66:49:6a:0e:e3:
                    dc:43:ad:80:63:81:64:9e:81:31:19:af:28:f4:7f:
                    a9:78:b5:9a:e5:41:8f:1f:f0:fd:ad:af:6b:ed:9b:
                    47:4c:94:d8:6d:78:1e:de:88:0f:45:06:cc:be:e4:
                    13:08:5e:27:8e:62:d7:50:39:3d:f6:c8:93:9d:54:
                    a1:1a:9d:ee:42:95:e5:d1:d5:23:b5:1d:09:43:0e:
                    80:bb:cc:62:c0:9c:2a:ff:9f:36:e3:8c:6f:f2:72:
                    85:77:8b:bb:60:41:ba:d3:9c:12:9a:0d:ab:fa:e9:
                    2c:c7:e2:b0:a1:0e:b5:06:c0:9d:40:86:e0:90:0e:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1B:D5:40:E5:12:28:74:59:4C:F6:88:A6:29:55:6D:8F:2B:16:C5
            X509v3 Authority Key Identifier:
                keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:4c:ad:b2:bb:e5:56:29:11:3d:c6:54:f3:d3:a1:6e:6a:
         21:1f:89:87:1b:33:00:2d:c7:b8:81:0c:2f:83:bd:22:2e:2e:
         9f:3a:04:24:d1:5b:8a:cd:4c:2c:30:1a:af:29:e7:50:11:a3:
         0b:6d:bf:8d:0d:43:53:a1:20:99:c9:52:ad:9c:c2:3c:ae:59:
         bb:77:51:ce:8b:63:5a:87:5f:31:82:89:5c:bc:7c:b8:50:48:
         85:ba:57:bd:aa:d9:2f:82:6a:f4:95:f6:73:0c:45:cf:f7:97:
         35:cd:7b:18:3a:58:aa:fb:0b:b9:6d:f8:48:57:8a:2b:15:8a:
         24:ed:55:0e:b9:74:99:d5:ea:3f:7b:52:17:85:38:e4:dc:43:
         52:d5:41:d3:3f:10:f8:b1:60:28:0e:7b:be:7f:26:33:8b:df:
         c0:bf:c0:e9:92:cc:47:14:ca:f9:35:e6:1e:9d:5e:63:23:4c:
         2e:fc:8f:12:8f:4d:86:fc:27:3b:2c:7a:a3:8f:cf:0b:2e:9f:
         56:8b:85:52:4b:3e:0d:a1:2c:9b:90:9c:09:6a:4f:bb:6e:e1:
         74:16:6f:9a:55:15:74:63:3c:4d:f3:31:c7:6a:cd:e0:e9:e5:
         21:ce:72:ed:19:d8:5f:c6:23:72:26:42:b1:e7:46:14:f6:61:
         c4:a9:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:18:57 2025 by rpki-client