Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          SWNJ7AAHwfny+C+KQrXGyqkPU9Pqj0BN99XyZEJV9OE=
Subject key identifier:   4A:50:69:3A:88:62:B7:92:AB:30:C9:96:F1:61:B0:C6:2B:57:BC:DC
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       0196C15D99AFAE127B9C803D57AFB301446C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          153A
Signing time:             Sun 11 May 2025 22:00:58 +0000
Manifest this update:     Sun 11 May 2025 22:00:58 +0000
Manifest next update:     Mon 12 May 2025 22:00:58 +0000
Files and hashes:         1: 3FckEHyuwzo_yFTVo6wwNAegPsE.roa (hash: 662O0Z8AJdVhCqtS4YSdo3bxoRyCFIabv03eTH2gQcE=)
                          2: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: cA51WGDpOu8XlLm9gT9deJT+g1+8rMFZl2qZDBu6AIE=)
                          3: tUnp3lCXtooKBCH_jA_Vfa2MjSQ.roa (hash: DX7nnKsn9/Gq5SSYvCSnPhv/mgOxdAVaf7ValTsSLAA=)
                          4: wtiq9-Vyox7Vay42XDneReyQxZY.roa (hash: X66Pzq8/S5DgF09aIXIT7Nn7GhBbYBlRcxr5BY5i+n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:99:af:ae:12:7b:9c:80:3d:57:af:b3:01:44:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: May 11 22:00:58 2025 GMT
            Not After : May 12 22:00:58 2025 GMT
        Subject: CN=4a50693a8862b792ab30c996f161b0c62b57bcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:9b:b9:ec:dc:51:f5:16:6d:e9:64:5f:cc:
                    20:a9:3d:df:38:37:87:12:28:ab:6e:7c:4d:aa:9c:
                    7a:d8:b0:2f:b9:99:a5:38:12:a2:6d:a2:a2:e2:31:
                    ab:83:77:42:8e:df:24:fb:07:b9:f9:55:14:66:b2:
                    28:0d:b2:f8:1c:f1:4f:b2:6b:2d:42:42:14:a6:d0:
                    d6:da:0b:30:bf:8d:83:c3:aa:21:88:06:c5:04:3a:
                    56:37:c5:80:a6:67:60:0a:22:61:e6:c1:f1:cb:eb:
                    09:b8:28:4f:35:8d:b6:12:ec:b9:1c:d6:b3:d8:8d:
                    db:fb:a7:63:f7:3a:7f:1f:82:e0:29:6b:dd:49:68:
                    d5:76:ec:1f:32:2f:da:6b:8a:6b:5c:86:e3:96:a8:
                    7e:4c:8c:dc:22:48:1f:4d:fd:b5:9e:3c:a4:79:50:
                    2e:c8:05:a6:73:89:fd:69:d6:ed:40:66:09:00:6c:
                    19:bb:a6:cb:8e:a6:77:03:12:4b:78:ec:14:26:21:
                    24:f5:30:79:1b:55:11:2b:0a:ff:80:e1:dc:36:eb:
                    01:5b:17:e3:43:0d:12:0b:5f:b9:a4:5e:ae:1a:73:
                    71:86:c6:74:6a:4d:63:d9:f7:74:ac:30:33:49:42:
                    e6:58:49:7a:fd:23:d0:ff:66:b7:0e:5b:c1:33:cf:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:69:3A:88:62:B7:92:AB:30:C9:96:F1:61:B0:C6:2B:57:BC:DC
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:78:fc:b0:27:c4:28:4e:1a:2f:83:f1:8b:4e:0b:73:69:
         03:35:95:68:65:07:d6:4b:c2:5d:e4:59:8d:fd:4d:24:94:ee:
         86:16:7d:33:65:1b:3a:75:e3:b1:09:4f:75:8e:f9:15:67:1b:
         b0:32:6d:eb:48:08:26:5a:c0:d0:98:ba:78:ed:9d:ea:e2:99:
         bd:e4:0c:0c:d3:d8:46:df:2a:37:c3:8b:3b:fe:13:2f:2b:21:
         7b:85:22:ca:f1:29:f3:f6:5c:f4:53:11:94:de:b4:b7:ab:61:
         d3:dd:a3:55:1b:4f:79:8a:0d:f5:b4:3e:e9:72:2c:e8:a7:d2:
         59:4b:b3:0f:31:da:6f:72:3f:f1:50:0b:2e:39:f7:3f:e3:c7:
         04:63:63:01:18:19:d7:fc:ec:9c:59:1e:80:cc:83:e6:2f:7e:
         99:95:9c:ee:2a:e8:38:c1:d1:21:37:fa:01:29:da:ac:f2:5e:
         da:1a:40:28:a1:e8:f4:73:92:28:be:8b:68:a9:fe:51:bc:5a:
         3d:fb:91:14:ee:eb:03:94:dd:4e:cf:25:57:59:dc:b4:43:a0:
         4f:ff:60:16:51:4b:b8:0e:12:9d:9c:9c:7d:36:a3:94:6c:c0:
         28:9f:34:26:13:33:80:1c:f9:56:df:2d:cc:dc:73:26:75:eb:
         a3:01:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:13:31 2025 by rpki-client