Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File:                     pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier:          6M124PP9GC71DpoeZ77mgZ3ECOI5pKinfSWzNnzwkpo=
Subject key identifier:   E1:D3:43:F0:DB:28:87:AB:43:BE:73:ED:07:85:FE:9B:F6:45:71:4B
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer:       /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial:       0196B3D94F5BE05ECFA3CCFAEADF965ECD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number:          0922
Signing time:             Fri 09 May 2025 07:01:25 +0000
Manifest this update:     Fri 09 May 2025 07:01:25 +0000
Manifest next update:     Sat 10 May 2025 07:01:25 +0000
Files and hashes:         1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: 17US0aceeDmq7wCW98ICvejo1rSCkCNfyv6EmVoGGPM=)
                          2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d9:4f:5b:e0:5e:cf:a3:cc:fa:ea:df:96:5e:cd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
        Validity
            Not Before: May  9 07:01:25 2025 GMT
            Not After : May 10 07:01:25 2025 GMT
        Subject: CN=e1d343f0db2887ab43be73ed0785fe9bf645714b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ba:4d:c9:f2:1d:14:d5:d0:56:18:0c:ed:a4:
                    56:aa:c7:fe:b2:05:6b:ec:66:82:e7:9d:c1:50:14:
                    24:d5:22:b7:e8:34:72:f6:af:12:4b:a2:b0:e6:ca:
                    2a:17:dc:26:37:13:64:df:ee:00:a8:36:24:c8:dc:
                    aa:d1:1a:b8:6a:c3:3c:49:cf:47:b7:87:23:06:b0:
                    64:1d:2e:c0:c4:46:c3:b6:73:9f:05:f1:72:a0:52:
                    e3:d1:4a:c3:1d:4f:bc:83:88:ba:2a:2d:15:5f:a8:
                    7f:d3:c5:e2:6f:72:89:61:ce:13:5c:15:36:7b:c8:
                    d6:cf:36:d8:67:4d:bd:c6:61:3e:26:bb:fd:26:2c:
                    a1:57:c5:3d:2b:42:9b:b5:33:83:4c:a1:2b:40:25:
                    f2:b4:58:3e:e4:c7:84:52:80:5c:ec:e8:80:d7:3a:
                    d7:52:28:f0:df:a3:7d:5f:4a:af:c5:e6:23:8d:b7:
                    c4:7e:44:88:eb:cc:30:a5:68:aa:0c:37:68:c4:14:
                    d2:8b:be:11:09:67:6f:6a:22:dd:c0:41:02:83:9d:
                    f2:63:cc:59:8d:e2:dc:6f:47:c3:93:f3:08:c2:06:
                    8e:94:0b:8c:78:e7:ef:2b:5b:ab:20:ce:5f:e5:0e:
                    17:a6:a6:5e:3f:05:c8:19:02:ef:1d:ac:44:b6:eb:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D3:43:F0:DB:28:87:AB:43:BE:73:ED:07:85:FE:9B:F6:45:71:4B
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:94:18:38:19:f3:87:59:d4:40:7c:04:79:52:a8:73:c4:9b:
         81:ba:c4:6a:20:a9:dd:03:a4:10:a1:6d:57:56:cb:16:81:d8:
         44:2f:b0:33:ca:d8:ab:c7:03:d2:e5:04:c5:97:b0:26:8d:77:
         45:70:d5:2e:d3:7e:8b:e8:55:7f:e4:09:50:52:10:b0:57:b9:
         09:da:3d:ca:47:20:44:1e:b6:1a:97:36:91:d3:4d:bd:b4:43:
         13:db:cb:3e:d2:d0:f2:05:15:30:e5:af:46:3e:15:9e:4f:c8:
         72:6b:b7:d1:b5:d4:d2:09:c1:d2:32:21:c6:f7:f4:eb:bf:62:
         33:79:f2:6a:c6:1f:1e:19:43:40:cf:63:3b:99:ba:f9:73:86:
         b0:83:90:9d:e1:27:35:4e:c6:f0:6e:83:52:15:0c:94:a6:22:
         c2:a9:f9:8b:2a:d3:44:8a:14:46:26:92:ed:42:0c:e4:10:3a:
         18:9a:da:ce:ef:57:43:13:96:fa:73:d7:19:e9:9c:47:48:33:
         ed:1e:96:25:c5:2c:67:18:c3:24:48:21:27:09:8f:80:5a:de:
         b5:eb:c9:ac:4e:4e:ed:fb:23:75:4f:f7:d6:6a:44:1f:4b:4a:
         2c:f8:e1:04:51:32:cf:d8:dc:dd:b0:5a:44:f0:25:25:9a:79:
         e5:73:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:27:08 2025 by rpki-client