Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          LBhiWE9wW5i/eVkGSpXx/qZPpbmufLx1KsSk7Ab19J4=
Subject key identifier:   DC:FA:78:E4:3E:B3:3A:8C:56:F4:FE:77:2E:83:3F:8B:70:17:19:A1
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       01968F5E36106BABC63173DCF246F2DA2B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          151B
Signing time:             Fri 02 May 2025 05:00:38 +0000
Manifest this update:     Fri 02 May 2025 05:00:38 +0000
Manifest next update:     Sat 03 May 2025 05:00:38 +0000
Files and hashes:         1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
                          2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
                          3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: +VO093MiHixskJ9kgfgcU6+SA3fLYcBgySEjNBDoDJo=)
                          4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:5e:36:10:6b:ab:c6:31:73:dc:f2:46:f2:da:2b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: May  2 05:00:38 2025 GMT
            Not After : May  3 05:00:38 2025 GMT
        Subject: CN=dcfa78e43eb33a8c56f4fe772e833f8b701719a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:6e:d9:4b:60:f8:d1:07:68:40:49:92:ab:
                    d2:50:8a:18:b5:2e:1a:5e:12:c0:fe:37:8e:ad:85:
                    e9:f9:94:d5:e2:f8:00:6a:65:a6:23:fe:d1:b5:91:
                    8e:88:3c:75:eb:52:7f:f9:f7:5f:79:9a:54:07:b2:
                    fe:0b:17:0b:d1:4f:ce:df:04:f0:03:52:01:c1:5d:
                    fb:3e:61:77:1f:c7:a2:2f:d4:7b:ac:24:9a:48:22:
                    3c:80:5f:5a:09:42:19:22:35:98:00:ec:da:9e:98:
                    9c:39:7d:0d:be:8f:4a:30:e9:29:61:12:70:ad:3e:
                    4c:f8:66:16:e8:29:6a:90:c4:59:0f:40:89:bc:a2:
                    f6:82:ba:07:a2:db:a0:62:2b:44:26:71:91:69:32:
                    58:a3:92:58:42:5f:7d:10:d5:65:17:5c:63:85:83:
                    04:f1:15:3e:51:ba:f9:a8:72:97:e7:04:53:af:07:
                    56:37:50:f2:9f:5a:48:2c:09:bf:aa:e5:e5:d6:20:
                    86:2e:4c:c2:e7:12:bf:cf:a7:ce:c6:3f:99:87:fc:
                    44:cd:25:fc:8b:73:33:e0:90:9f:35:b2:c8:dc:df:
                    c2:a1:3f:5e:d3:88:cb:59:48:14:60:15:ec:22:d8:
                    f9:74:2f:1a:c6:08:c6:35:22:7f:cd:8f:06:0f:95:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FA:78:E4:3E:B3:3A:8C:56:F4:FE:77:2E:83:3F:8B:70:17:19:A1
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:10:7e:6e:9e:3c:56:06:af:ee:49:fa:c5:77:38:dd:00:2c:
         55:44:fa:56:15:ba:cf:0b:37:76:2d:5a:9a:b0:58:fe:f6:eb:
         2c:4b:e1:a7:b1:38:d3:e9:7d:28:5e:99:83:e4:b5:6a:1e:e0:
         45:c3:5f:6b:d5:09:7c:c0:14:70:e9:89:bc:3a:3d:0c:58:d3:
         a3:9e:4d:89:8f:33:24:8e:25:87:bd:fe:f6:06:ea:0c:83:92:
         ab:af:de:c6:3b:13:01:f3:0d:37:0d:ca:88:e1:34:ec:b6:26:
         ce:45:da:e2:3b:98:44:14:7d:a3:7e:dc:29:0a:9b:40:0e:73:
         ec:8b:98:a0:ba:f0:69:f3:36:59:d7:5b:82:bc:ba:95:78:39:
         24:ea:bf:5f:79:21:e0:42:86:75:17:e0:60:52:c2:af:53:7a:
         de:4e:d2:bc:59:b2:08:5e:ff:c2:0e:e7:fa:44:99:71:35:be:
         de:97:6f:fd:46:2b:a6:b2:1f:e5:3f:0b:a0:a6:83:3e:cf:87:
         cb:d5:77:04:bf:2e:d7:9d:81:16:60:3e:de:cd:94:83:5b:40:
         9f:06:be:e5:bc:22:12:c9:e2:fd:88:72:f3:3e:eb:59:e4:0c:
         90:d2:94:3b:99:95:ab:f6:f8:ca:09:37:7b:c5:6b:a4:6f:99:
         c0:cc:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:58:11 2025 by rpki-client