Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File:                     pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier:          kXR55qdqiUmTCHDvM21bTBAkbw623O0Mk33w32Xlw0A=
Subject key identifier:   29:09:A4:4E:A0:A6:D9:38:5F:6D:28:D1:3E:AF:34:03:D7:54:1D:49
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer:       /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial:       0196748C0F19FFF325CF79080D160E6BD349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 00:00:57 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:57 +0000
Manifest next update:     Mon 28 Apr 2025 00:00:57 +0000
Files and hashes:         1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
                          2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: ly6A/KgpzjKZ3fkVrgRsJOb8cRZXS8/lYaUVzFaiVDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8c:0f:19:ff:f3:25:cf:79:08:0d:16:0e:6b:d3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
        Validity
            Not Before: Apr 27 00:00:57 2025 GMT
            Not After : Apr 28 00:00:57 2025 GMT
        Subject: CN=2909a44ea0a6d9385f6d28d13eaf3403d7541d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:9e:29:b8:48:83:df:83:c3:db:04:0d:29:
                    37:29:03:46:63:77:e3:90:ea:39:b4:bc:5e:9b:87:
                    30:a7:b2:81:ad:9f:df:18:a6:69:72:f3:5a:6b:7b:
                    40:df:a7:b8:65:65:b0:96:f6:9a:e0:c3:39:ed:91:
                    ee:57:e0:49:6f:96:2b:4d:2e:8b:ef:e4:58:bc:42:
                    48:2c:c0:8d:4d:6d:94:a0:8a:c6:6f:a5:a9:23:08:
                    14:ca:c4:3f:12:36:24:4a:c7:29:4c:49:58:a4:14:
                    f5:a0:b4:20:4f:5e:5e:ec:d8:80:e3:00:3a:43:b4:
                    b8:a5:6a:c6:b6:5b:4a:44:29:c9:77:c7:95:49:50:
                    b1:c7:d2:d8:e5:bc:72:9e:19:91:a2:38:ea:ad:2e:
                    b5:a7:32:70:ad:b4:09:70:b6:8c:e4:63:b3:b3:78:
                    6b:55:f3:54:a4:e7:d4:5d:fc:16:ce:8d:9c:79:84:
                    2b:7b:f3:49:b5:dd:c9:d1:90:97:04:4e:ee:44:2c:
                    c3:c8:8c:fc:65:eb:18:bd:5d:4d:b9:78:70:ac:0d:
                    7a:a6:dd:ca:7b:77:26:b0:84:dd:f6:5a:50:cb:17:
                    7c:c1:9d:d9:88:b6:d7:b2:bf:e9:89:02:c5:9b:a6:
                    72:5b:ed:7f:a0:c9:4e:74:c5:b0:9a:4d:29:c0:22:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:A4:4E:A0:A6:D9:38:5F:6D:28:D1:3E:AF:34:03:D7:54:1D:49
            X509v3 Authority Key Identifier:
                keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:84:fe:06:7d:e5:66:ee:9c:7f:6c:f8:27:0f:df:df:85:
         b6:78:cc:3b:42:02:c5:f5:e9:76:83:c8:2c:e7:b1:ca:c9:ff:
         f3:47:32:3e:2e:38:27:e0:70:8a:51:8b:da:86:bd:79:a8:fe:
         34:b4:27:cc:c6:58:8f:ac:91:87:5e:81:8d:29:b7:45:b6:49:
         c8:1d:31:31:69:d7:e5:62:83:3f:47:8f:9e:4c:bc:c9:e4:f5:
         15:1d:96:d0:4b:45:7e:07:2a:11:a5:ac:5f:86:5b:8c:ac:3b:
         61:5d:1a:5f:17:67:46:a0:8d:db:69:21:8d:5e:47:8c:50:9e:
         b8:dc:bd:5a:04:88:59:39:67:b2:9a:17:62:9a:9c:fe:a4:9f:
         d8:02:7d:b8:3f:62:09:19:b5:38:69:8d:01:f3:db:d8:cb:0e:
         7b:fe:73:00:f2:24:c9:52:aa:83:a6:46:51:b4:72:98:81:23:
         e6:6e:0d:21:37:20:0c:d6:b0:b3:63:ae:35:df:36:0e:85:46:
         60:ab:e7:db:15:19:d6:bd:03:cb:fe:33:70:29:d3:d6:47:ee:
         ba:85:58:7d:fc:96:de:9b:e7:8b:49:b1:11:8b:01:03:ec:ce:
         33:f4:7c:a3:2e:b6:a3:0b:b5:8a:06:6e:68:35:62:98:0c:74:
         f7:7e:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:39 2025 by rpki-client