Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File:                     pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier:          zztMcRruG8yaHMQiwnCWVnpvITSXqwF3vT0cqjMfKvc=
Subject key identifier:   F7:B5:BD:CE:8F:77:DB:79:AA:65:C4:6C:34:12:70:CF:FE:06:3B:C7
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer:       /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial:       0196B1EA1A0B26FF83805E05DD6D957C596B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number:          1546
Signing time:             Thu 08 May 2025 22:00:31 +0000
Manifest this update:     Thu 08 May 2025 22:00:31 +0000
Manifest next update:     Fri 09 May 2025 22:00:31 +0000
Files and hashes:         1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=)
                          2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: nARfGuZ8PB3HbkYIEm0RIzfGkbC3yUM6G8bL5k9MHpg=)
                          3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:1a:0b:26:ff:83:80:5e:05:dd:6d:95:7c:59:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
        Validity
            Not Before: May  8 22:00:31 2025 GMT
            Not After : May  9 22:00:31 2025 GMT
        Subject: CN=f7b5bdce8f77db79aa65c46c341270cffe063bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:88:2c:55:86:1d:df:6d:50:bd:97:dd:dd:
                    af:25:c9:0b:8f:78:f8:cc:95:81:15:30:ee:da:05:
                    c6:7e:af:18:84:24:81:cd:94:03:7a:f8:a5:2c:55:
                    00:ed:bf:bc:69:d6:3a:c5:e6:70:bd:b1:6d:80:23:
                    a8:a5:6b:11:4a:67:5a:15:41:88:d7:8a:a9:ef:c6:
                    fa:64:cf:37:1f:2a:2b:19:2e:89:71:8c:84:a7:85:
                    d8:73:9e:92:16:11:2e:8c:21:41:93:ea:a2:5e:80:
                    34:0a:3f:fa:1b:28:ac:11:65:01:bf:f2:96:c5:a3:
                    23:9f:25:ac:4f:4a:76:a4:29:2e:eb:fe:ba:dc:9e:
                    09:9a:ba:4a:1f:7c:13:6d:91:b8:a3:17:a7:7b:0a:
                    4b:33:f6:3e:8d:63:b0:2e:74:a0:57:ab:dd:e4:48:
                    8e:e1:c2:b0:09:7c:b6:19:ef:8a:94:8b:ea:34:54:
                    23:a3:ce:5d:bf:da:46:83:c7:7b:ca:d1:ce:bf:8b:
                    f3:39:17:91:a7:49:ac:eb:73:5d:d1:98:ce:57:c1:
                    14:91:e4:75:0f:4a:ce:02:67:a9:eb:9c:05:25:3b:
                    f3:e6:54:38:a7:2a:0d:67:5b:31:0e:ec:18:5f:b6:
                    bf:c8:b6:f8:4a:0d:62:e3:e9:56:6b:b7:2d:a6:5e:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B5:BD:CE:8F:77:DB:79:AA:65:C4:6C:34:12:70:CF:FE:06:3B:C7
            X509v3 Authority Key Identifier:
                keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:15:3c:ab:7d:55:8a:14:2a:80:cc:ba:4f:cd:06:bb:37:
         4f:5d:11:dd:89:e6:22:2a:a6:c9:82:56:79:f4:aa:03:6c:d0:
         78:8d:09:29:9e:88:86:34:b5:7b:5f:2a:37:02:ba:18:ce:d1:
         5d:08:86:bb:72:67:cb:f7:43:7b:d7:a7:8c:90:d1:41:b5:af:
         f9:53:3c:00:c1:e8:26:91:5f:c2:ae:b0:7c:16:52:82:5e:d2:
         41:87:93:0c:a8:b1:0d:39:5b:f3:40:d5:79:88:7f:ff:c6:b5:
         9e:13:1c:35:47:d9:1c:7c:ba:a9:2b:14:a4:10:08:ed:59:a4:
         b7:53:21:41:17:6e:49:a4:6e:0b:8d:a1:d2:31:3d:70:c8:b5:
         16:c7:60:26:af:10:b1:82:8a:40:1c:0b:a2:78:a7:8f:1a:21:
         84:ac:c0:26:e3:2b:fc:ca:62:64:b7:d0:cc:57:08:59:9b:8a:
         5d:68:a7:c8:00:56:72:35:04:6b:73:7b:f6:0a:c4:f4:86:64:
         d1:de:1b:9d:89:15:9b:a7:64:d8:85:94:49:f4:b4:5f:3f:d0:
         cc:eb:05:2c:b9:dc:0e:43:10:f4:2a:3d:34:1c:cd:c2:1f:b9:
         52:6c:72:67:8e:a3:54:7c:a1:84:5b:2a:1f:39:a2:d8:e8:2f:
         29:a0:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:16:47 2025 by rpki-client