Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          13MGYxXfm6PDLwI4P1AX44pxZh//6qBTocDyP8vX7RY=
Subject key identifier:   B9:27:A8:70:0F:50:D1:32:49:B4:66:8B:2F:91:39:EF:D7:38:E9:96
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       0196A2781194031E172CFF3CF371237F0C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          0495
Signing time:             Mon 05 May 2025 22:01:39 +0000
Manifest this update:     Mon 05 May 2025 22:01:39 +0000
Manifest next update:     Tue 06 May 2025 22:01:39 +0000
Files and hashes:         1: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: gXoPL0fVlCMeqlYZ0HYfsA5O2zdi2WZvm+jcfcT6ksc=)
                          2: fZ9isGtIlM4KCLTcv8R-iIf03v8.roa (hash: B9s0fxg99QLzPGHKR09eX4IAtgF+hQonUvqfnXhZlTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:78:11:94:03:1e:17:2c:ff:3c:f3:71:23:7f:0c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: May  5 22:01:39 2025 GMT
            Not After : May  6 22:01:39 2025 GMT
        Subject: CN=b927a8700f50d13249b4668b2f9139efd738e996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:6e:d7:c4:51:35:cd:ed:86:29:62:de:4d:
                    48:f9:51:79:bd:66:69:44:f7:06:b0:1d:89:c8:93:
                    0e:60:a0:a4:d6:c6:e9:d2:e0:44:84:63:4b:a2:6d:
                    39:d6:d5:11:30:d8:db:f8:27:48:ea:b6:ef:c1:ef:
                    41:ed:e2:78:41:cf:60:2c:61:48:63:97:a8:ab:59:
                    c2:6b:e2:28:43:86:80:ae:70:5f:5b:18:d7:20:7d:
                    ab:20:a2:c8:4f:12:dc:aa:21:fc:b0:58:a0:bd:9f:
                    8f:d6:63:50:0a:db:b6:4a:08:db:83:5a:26:30:50:
                    35:ee:6f:2c:16:f8:68:a2:b8:f5:be:2f:03:7a:f2:
                    86:1d:de:cf:c1:48:23:53:e7:20:92:aa:20:6c:60:
                    17:78:a7:a3:49:5f:f6:e3:ee:71:6a:f1:f7:d0:ce:
                    fd:d2:b9:19:61:2a:39:fc:f8:e8:b9:0c:2f:c3:c5:
                    90:b3:23:89:89:1a:95:af:d9:17:7d:99:69:a0:d2:
                    e1:08:fe:31:c5:9a:46:b6:14:6c:fa:a2:2d:cf:83:
                    57:b7:a5:fd:ab:03:4c:78:c1:0f:ad:a5:2e:22:d0:
                    f7:40:9f:a5:4f:36:a1:2e:e6:e1:9f:e2:58:76:a7:
                    86:01:51:f4:98:4b:45:71:29:49:1e:2b:02:90:98:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:27:A8:70:0F:50:D1:32:49:B4:66:8B:2F:91:39:EF:D7:38:E9:96
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d5:cb:87:5e:d6:89:93:12:04:77:2b:7f:05:f1:b2:a5:5f:
         7b:b0:53:54:5b:3c:4d:65:a7:78:42:65:65:7d:9c:5e:64:4b:
         48:ec:c1:a9:99:48:b8:10:13:6e:a1:86:62:2e:19:d6:6b:5e:
         37:fd:d5:3d:f6:37:f7:b5:8e:d5:6d:3d:9d:7a:21:13:3a:13:
         2f:0a:37:99:5c:bc:98:29:e1:c1:20:8b:e6:39:de:f1:5e:fd:
         60:34:70:2c:34:04:2c:9c:c1:b9:b7:5d:b1:d3:db:d5:84:9d:
         12:6e:80:44:3e:0a:3e:65:9f:58:14:f1:7c:89:8e:c7:d1:27:
         65:59:fc:9a:79:2c:21:02:44:2f:7a:a3:38:80:22:91:b7:8f:
         d8:40:5f:91:cc:72:55:65:ac:6c:a1:a2:93:e6:77:47:8d:5d:
         db:e3:96:3e:11:98:84:1c:0e:8a:01:be:9f:ed:00:6c:e4:7d:
         4d:39:95:3a:e3:e4:a3:52:82:bf:0e:53:09:85:07:a7:09:77:
         ee:4d:1f:bd:c1:18:e7:3e:ee:bc:e0:f9:cb:fa:c7:75:72:76:
         56:45:98:e1:70:bb:c1:2f:af:3e:51:7e:02:74:07:ff:67:db:
         72:83:7f:3a:fe:64:8c:86:40:b5:12:b3:5d:c0:5e:7d:1b:8f:
         b4:f8:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:35:36 2025 by rpki-client