Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          THezfBeuNiuWhIZ7YX04i4OEEADiSoT3Xbbi/B2R54A=
Subject key identifier:   C6:A7:6D:8E:ED:07:19:5B:D6:91:BB:7E:6A:A5:2B:3F:F1:76:A2:DC
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       01967755E625F73B77A607E6325B6969ACAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 13:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:40 +0000
Files and hashes:         1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
                          2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: FUbCvEj75gLWaw8811A01/WZ5/mRMDRy3Gg6RQfloFU=)
                          3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
                          4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
                          5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:e6:25:f7:3b:77:a6:07:e6:32:5b:69:69:ac:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Apr 27 13:00:40 2025 GMT
            Not After : Apr 28 13:00:40 2025 GMT
        Subject: CN=c6a76d8eed07195bd691bb7e6aa52b3ff176a2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:61:25:db:30:74:e2:c6:03:09:fa:65:bc:
                    01:24:35:b4:8a:2e:09:ac:42:2d:d4:1c:89:2b:79:
                    26:af:bd:4a:d5:12:db:d8:65:65:0f:bf:75:17:dc:
                    87:91:e3:c5:66:8b:15:58:c6:68:e1:75:de:47:dd:
                    89:cf:b2:86:99:b4:62:6b:04:b5:5c:a4:76:3d:f8:
                    2b:e6:55:30:0c:40:44:11:63:44:bd:01:e3:24:e2:
                    8b:2e:19:f3:e7:bf:fa:ec:89:61:90:6a:08:07:95:
                    0a:e7:64:f8:b7:6e:b4:f0:b0:cd:24:18:df:e8:3b:
                    a0:8c:00:94:f8:4e:2c:ea:0a:df:c4:33:11:0e:f1:
                    50:31:87:62:fc:73:70:28:ed:19:6c:87:3d:b2:15:
                    bf:61:49:a1:0f:87:48:64:6c:2e:d4:16:ac:4b:68:
                    9c:6c:e0:af:4c:20:7c:91:60:4a:54:a2:7a:21:7d:
                    84:a7:b0:47:8e:f8:b9:81:ea:a6:34:10:de:8a:f5:
                    5f:17:2a:e7:2b:fd:5f:33:57:bd:aa:4c:d3:e5:73:
                    d1:b2:d2:1a:08:33:2b:1b:6d:fd:74:23:b4:11:97:
                    f7:3b:12:4d:bb:e3:6d:73:f0:e9:e5:69:80:9f:30:
                    61:17:51:2d:62:3f:de:af:79:64:6e:46:c8:4e:b8:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:6D:8E:ED:07:19:5B:D6:91:BB:7E:6A:A5:2B:3F:F1:76:A2:DC
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f5:7d:3f:53:50:11:9f:62:54:20:6a:71:73:cb:2e:7b:9c:
         b4:8d:8e:86:2e:89:d2:61:07:60:3c:32:64:1c:aa:d6:97:49:
         dd:e0:69:71:82:4b:a0:c3:e7:8f:45:20:8c:f4:5f:bf:47:e1:
         66:df:2b:81:8a:35:1f:57:9f:35:64:5e:c0:91:c3:41:17:ec:
         76:7a:46:43:56:f1:fb:68:e9:9e:ff:ea:a8:bd:0f:f8:11:45:
         73:5d:0a:72:3b:71:66:e1:a9:c2:eb:59:57:a9:d4:1d:ee:6d:
         8d:98:ac:5f:94:87:41:36:51:77:15:16:8e:b8:2f:37:5d:9b:
         28:32:92:12:ba:f1:42:58:0d:65:22:d7:a8:8e:ac:51:07:a8:
         29:63:94:79:4f:70:bc:e4:75:1d:02:4c:76:a2:b1:e8:8e:19:
         ee:ac:a2:c8:c8:d1:e5:76:6a:79:14:62:92:65:39:9d:c7:9e:
         0f:3a:cc:6f:d4:b9:cb:36:74:7b:25:7a:5e:f7:1c:d8:03:ed:
         5b:28:2d:74:83:cb:32:be:d8:e6:ee:0d:98:42:5a:58:1f:d3:
         f0:6c:d2:c4:64:b8:fd:58:e3:7e:0f:fd:bb:d0:f8:12:e8:aa:
         9c:56:c1:7e:67:dc:ab:f3:88:38:80:68:33:c2:50:79:d8:09:
         bb:84:c0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:46:46 2025 by rpki-client