Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File:                     PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier:          diCMnElkK1JoTKewEliEVlaorEmccYdovI7bs+lOlhA=
Subject key identifier:   B4:2C:E3:DD:D1:6B:91:AB:0F:CF:EA:43:82:D3:DF:D5:4B:27:B1:D8
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       0196789F82A78646188A86B11A9A7F9B5FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number:          1037
Signing time:             Sun 27 Apr 2025 19:00:41 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:41 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:41 +0000
Files and hashes:         1: IFYqWjpdJxRaG3uyQLqw79JLTGo.roa (hash: alQatZzeYH3fzwBxC+QNB+5aLjO5V+OfKBsHgM/Tlv8=)
                          2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: einOBxvUWRGtOkma2XA1bbkxuHPzlasu3/luLYgOrkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:82:a7:86:46:18:8a:86:b1:1a:9a:7f:9b:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Apr 27 19:00:41 2025 GMT
            Not After : Apr 28 19:00:41 2025 GMT
        Subject: CN=b42ce3ddd16b91ab0fcfea4382d3dfd54b27b1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:ad:da:e2:2e:b7:ca:8b:c3:02:19:9c:5c:
                    71:44:04:99:5f:d2:e8:90:23:fe:d5:23:75:16:1f:
                    e6:85:85:f4:fd:20:3e:80:e0:b4:7b:33:b6:ac:1d:
                    75:ca:8b:97:f6:aa:07:21:88:2d:fd:32:d1:d5:c3:
                    b0:00:81:7e:ec:02:bd:a3:09:cc:13:64:0e:1f:01:
                    1f:fd:aa:af:14:98:83:d6:d8:21:cb:e7:03:61:0e:
                    9e:10:c4:5b:6b:ff:f8:f0:0d:15:ed:c4:83:4b:82:
                    8e:05:de:a9:48:61:03:3f:e1:07:aa:26:86:68:7e:
                    d5:71:ac:ea:be:82:ba:a1:5a:94:b4:39:9b:35:b6:
                    da:29:e5:6c:a6:10:51:24:c4:82:cd:8e:7f:2a:7f:
                    54:57:ea:db:4f:66:79:55:b0:f5:9d:5f:9c:e0:c8:
                    f2:93:b7:25:a9:ef:04:29:63:4a:ee:2a:7b:fc:52:
                    5d:66:45:a6:4f:91:61:1a:01:dd:86:9e:20:bb:fd:
                    8d:8a:fe:39:9c:ac:0d:aa:60:f8:c2:ae:35:16:71:
                    da:ef:ad:ed:2f:00:d7:0a:8f:78:eb:60:58:9d:7e:
                    03:68:da:41:4f:91:ce:5a:53:d8:17:f7:2b:82:88:
                    9e:22:98:03:1d:04:2c:50:5a:81:9d:4c:1e:c2:de:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:E3:DD:D1:6B:91:AB:0F:CF:EA:43:82:D3:DF:D5:4B:27:B1:D8
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:6d:ea:74:26:bb:1a:ca:19:4b:e9:03:ef:89:af:50:07:
         f8:29:bd:6c:35:0b:77:d1:f7:b8:44:6c:4c:74:e9:d5:1a:54:
         39:88:03:ca:de:01:f2:ae:10:d7:71:50:8b:24:ae:d4:32:bc:
         30:9d:4b:06:f3:4c:8d:9e:bd:e7:c0:66:b7:d4:9a:e4:8f:44:
         d0:e0:7e:09:60:53:f5:f0:65:21:9d:12:29:e6:65:c4:42:fa:
         70:b6:27:ff:e5:63:6d:ab:62:11:fd:ad:45:83:30:75:40:42:
         0d:81:c9:42:f8:eb:71:dc:64:55:bd:5e:5f:86:51:1b:09:ab:
         04:ee:88:78:2f:3b:d9:0d:17:23:57:2c:29:2d:51:18:28:92:
         10:a6:47:c1:e4:7d:fd:57:3b:df:b2:02:05:a6:84:c4:7b:32:
         31:0e:18:c9:e7:91:9a:24:05:e7:bb:47:9c:79:f3:89:f9:f6:
         ad:3f:3d:ad:bd:05:6a:af:99:bf:69:ed:f4:80:3f:59:b0:ad:
         89:af:5f:65:06:c8:24:d2:0c:00:48:a8:29:75:d0:46:97:07:
         ad:d5:23:77:27:43:82:97:ea:f2:e7:6c:48:e6:84:80:1a:88:
         26:a2:95:e8:f8:f3:28:04:a7:f3:29:d8:ef:fd:2b:5b:cf:23:
         35:ab:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:13:49 2025 by rpki-client