Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File:                     PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier:          Itu6ukVDjV3M6pzzwMDSKxeQ33W8L4+Fz61VKUNiNd4=
Subject key identifier:   0A:0D:5A:76:FC:82:CD:E4:FE:C0:6B:34:0A:CC:57:D1:5D:BD:5A:A2
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer:       /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial:       0196CA604151A65A812EBA31B649E76B4E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number:          153D
Signing time:             Tue 13 May 2025 16:00:27 +0000
Manifest this update:     Tue 13 May 2025 16:00:27 +0000
Manifest next update:     Wed 14 May 2025 16:00:27 +0000
Files and hashes:         1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: jHsSdJy03qj/KtX9lEp1AsvLXYe46eX85OnuH+lV+f4=)
                          2: dNeuYEAQmOoidPn9sPTHpBf3kwM.roa (hash: XKk9IUkG18VeN9nDomy3arFXLgPu8Jw+AjyCy/j87MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:60:41:51:a6:5a:81:2e:ba:31:b6:49:e7:6b:4e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
        Validity
            Not Before: May 13 16:00:27 2025 GMT
            Not After : May 14 16:00:27 2025 GMT
        Subject: CN=0a0d5a76fc82cde4fec06b340acc57d15dbd5aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:aa:bd:ae:41:e3:cd:22:6c:7d:f2:6a:ba:
                    52:ad:a8:19:71:fa:2f:e3:3d:cb:a1:df:2a:05:f7:
                    50:72:2b:1e:e4:e6:49:2e:ac:ee:1e:51:36:94:40:
                    b4:a2:bc:e8:5a:43:c2:90:d4:7b:c9:0a:13:4d:c7:
                    ac:0c:ed:4e:88:a3:5f:63:cb:f6:4f:5c:f2:37:c1:
                    78:53:b5:72:c9:57:34:9b:e3:73:5a:b6:85:5a:63:
                    c3:c0:89:a4:2c:ae:f1:17:2f:94:4c:51:9b:7a:fc:
                    8f:48:e6:b1:69:25:d5:2a:dc:7d:46:cc:90:16:94:
                    fc:e9:c7:e7:2c:f0:8d:2c:7d:3f:8a:dd:2e:68:32:
                    fe:50:91:2c:bb:33:d0:50:d3:51:9b:41:aa:c4:3b:
                    86:0e:ce:8c:9c:1a:08:f6:1c:2a:50:f9:db:9c:a8:
                    b3:bf:ea:12:88:94:e3:b2:57:26:7a:a8:36:d8:7b:
                    60:03:96:19:82:49:b5:a7:47:c8:40:aa:95:3d:10:
                    ec:78:a4:67:fc:38:6b:d0:58:da:1a:93:47:1d:04:
                    6e:fe:37:2a:d1:8e:bb:e6:f4:db:fb:2d:f2:92:ce:
                    75:03:d7:84:b5:cd:47:ce:af:31:33:f1:dc:ff:dc:
                    65:39:49:eb:b6:7f:e3:b8:15:ec:6e:87:b8:53:b3:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0D:5A:76:FC:82:CD:E4:FE:C0:6B:34:0A:CC:57:D1:5D:BD:5A:A2
            X509v3 Authority Key Identifier:
                keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:63:1d:10:f8:be:44:2a:fe:31:a8:01:6e:f5:9f:78:59:fe:
         b9:00:7a:fa:f2:7a:b1:c1:3b:71:0d:55:99:52:8c:e3:e1:6f:
         5e:e3:35:5b:4c:9d:01:bf:b7:6d:a2:cd:5f:22:80:16:d1:55:
         32:3c:3e:32:ba:78:1c:23:22:cd:eb:5c:65:cf:3b:64:cf:30:
         63:d4:00:07:82:a2:b8:cd:cb:7f:51:18:ad:47:90:fe:f8:c0:
         dc:f3:3d:8d:39:d4:14:88:be:28:89:d7:88:6c:01:f4:af:61:
         a1:9a:8f:52:4c:4e:d4:61:07:b5:64:69:da:2f:24:4a:a2:4f:
         dd:2b:82:51:9b:01:26:49:eb:2a:07:a1:e4:e3:bf:8a:b9:29:
         e6:38:5c:23:12:10:0e:53:3d:c7:0c:f2:fd:00:6f:1d:c5:20:
         bd:00:58:87:c9:95:00:50:07:b8:5f:0a:27:f2:97:aa:19:a3:
         6a:dd:2c:13:36:8b:f5:13:18:a3:65:f0:21:75:86:fd:b8:0d:
         6c:86:cb:ef:b8:fd:49:b5:9d:cf:f6:10:c3:cc:8a:7d:81:bf:
         2d:99:49:5a:e6:15:78:ff:4c:a0:48:54:72:e6:2d:4e:49:f6:
         ba:10:60:f7:0c:80:25:38:5e:c9:b6:94:6f:c9:09:0e:bf:d6:
         5d:92:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:01:15 2025 by rpki-client