Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
File:                     Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft (raw, json)
Hash identifier:          See299XU8vL/lltw7siO8yghFi8b8Gpoekbs1myJph0=
Subject key identifier:   21:B4:6D:5B:EF:80:87:4B:78:93:B2:D9:9D:CD:F1:D3:16:05:93:22
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Certificate issuer:       /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial:       0196BF6EFB2B94F0674DC7DE02DEA1311F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
Manifest number:          0FD8
Signing time:             Sun 11 May 2025 13:00:43 +0000
Manifest this update:     Sun 11 May 2025 13:00:43 +0000
Manifest next update:     Mon 12 May 2025 13:00:43 +0000
Files and hashes:         1: Mkotcv7SVmhVByeOdk7RYd0Gupw.roa (hash: kugv35F9Yygi1KlvVSFAeTblpUz5gnszp5yric0gM3k=)
                          2: Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl (hash: EUQlYyj0YedEOyadAAtdo7D5ZH44fL3E9b/tepcuebI=)
                          3: cwlcUqjMTfEdbvTuuvejw-lUBd4.roa (hash: ZDYHX14do9hr1lUFKNqTx5RIBWwnueYI0rEZQZpyW1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6e:fb:2b:94:f0:67:4d:c7:de:02:de:a1:31:1f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
        Validity
            Not Before: May 11 13:00:43 2025 GMT
            Not After : May 12 13:00:43 2025 GMT
        Subject: CN=21b46d5bef80874b7893b2d99dcdf1d316059322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:e5:53:9c:66:96:5b:90:a2:b1:ce:77:69:
                    f2:41:b3:ae:fb:9a:68:29:cc:a1:40:b1:85:f9:3b:
                    c2:2f:31:74:3f:62:6f:2f:de:e3:09:19:ef:fc:c5:
                    49:20:21:c6:b3:13:4b:e9:87:fa:48:d7:aa:41:87:
                    f3:1e:0d:f6:52:ad:9b:0d:36:77:7d:61:b0:93:f9:
                    4d:e0:40:39:80:9c:39:ee:ce:08:79:1d:58:70:50:
                    85:51:8e:e4:95:14:9d:c0:13:5e:3b:c5:c6:1d:de:
                    3c:3d:c0:0c:41:10:e6:a1:67:29:04:60:bb:b3:e8:
                    4d:34:03:6f:cc:25:69:7f:01:70:ed:aa:36:3a:e0:
                    50:d7:45:a2:e8:ce:7f:e3:18:1b:87:f3:44:76:cb:
                    7b:ce:7c:0b:7c:3e:c6:1f:7c:51:28:0f:f1:f4:a8:
                    76:02:69:4c:dc:79:23:ef:f3:55:de:84:36:09:88:
                    b8:df:53:6b:0c:21:4b:11:c0:9a:9e:c8:4a:0f:fb:
                    93:f6:a4:e5:ef:3c:e4:0f:e1:e8:e2:d4:38:17:c0:
                    e2:c3:e4:7f:1b:e7:89:79:cb:48:9f:6e:b9:24:45:
                    c1:59:6a:13:06:57:04:82:37:96:6b:8f:70:c3:4d:
                    26:a3:cc:09:a3:07:14:ea:5d:0d:c8:62:b0:40:7b:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B4:6D:5B:EF:80:87:4B:78:93:B2:D9:9D:CD:F1:D3:16:05:93:22
            X509v3 Authority Key Identifier:
                keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:58:3b:c7:0b:a9:ab:9b:18:f8:e1:8c:37:3b:0d:83:f6:d3:
         1e:33:e0:11:dd:9c:d7:98:76:0c:53:a0:bf:5a:ee:5a:33:14:
         0b:59:a9:ce:e4:46:3c:5f:84:85:3c:e1:bc:3b:ed:d6:5e:c7:
         76:30:08:b2:75:20:7d:91:54:fc:44:68:b1:6a:7e:e2:47:f6:
         23:39:f8:c4:7a:82:5d:52:55:7f:79:bc:89:ac:73:20:ec:5c:
         66:76:9f:9f:49:45:55:0c:44:6b:94:77:43:20:77:26:a1:53:
         96:94:e8:35:94:c2:45:6b:f3:35:61:bf:c5:18:b3:c6:5b:13:
         11:c3:39:8b:c2:9d:71:7c:b9:20:14:8f:e8:43:80:25:02:f9:
         70:8f:ea:bf:26:03:1d:a8:51:d0:43:3f:e4:d8:38:40:f9:e1:
         15:40:d0:24:74:d2:65:10:a4:33:3f:80:f3:2c:83:79:b6:89:
         89:94:e5:43:e6:93:fb:8f:c5:7e:34:d4:41:06:1e:07:84:89:
         a2:ff:0e:8d:47:2c:fe:20:90:50:3e:a9:cc:66:85:e1:b1:b2:
         56:61:b7:02:31:aa:f4:4e:2f:12:83:c1:17:72:1b:12:4f:cd:
         23:43:28:7f:05:b5:e2:85:d0:b1:86:52:0b:85:b5:0e:ed:8a:
         65:22:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:51:56 2025 by rpki-client