Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File:                     PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier:          2b4i3uw532Ss6GHFbrbV5QwlwskbDBb3Yk1jixKThLo=
Subject key identifier:   1D:8D:91:95:06:6B:CF:EE:58:25:0C:24:66:B0:B5:84:1D:BD:A7:63
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer:       /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial:       0196CBA9F44A7D5D3D79379C683A047A8A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number:          0C65
Signing time:             Tue 13 May 2025 22:00:35 +0000
Manifest this update:     Tue 13 May 2025 22:00:35 +0000
Manifest next update:     Wed 14 May 2025 22:00:35 +0000
Files and hashes:         1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=)
                          2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: SPvxVU+xJ1wCBZ5zTbd5PAbq+mYt/lpBMxyZfmEVGls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:a9:f4:4a:7d:5d:3d:79:37:9c:68:3a:04:7a:8a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
        Validity
            Not Before: May 13 22:00:35 2025 GMT
            Not After : May 14 22:00:35 2025 GMT
        Subject: CN=1d8d9195066bcfee58250c2466b0b5841dbda763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:cc:49:5f:63:a4:76:82:be:cb:a0:91:b4:
                    73:da:d3:2a:05:81:1f:46:06:84:29:3c:20:65:9f:
                    06:3c:d7:3a:e2:98:f7:9e:48:de:85:17:bd:58:f1:
                    76:db:2e:dc:1b:83:08:6b:7d:5d:b1:f4:8a:4c:99:
                    31:67:2f:c8:2a:57:f0:71:88:4a:e9:c3:d3:1f:6f:
                    5e:ce:46:77:ac:df:6c:f4:e4:79:94:88:a2:26:5a:
                    cf:fc:ea:70:26:31:c3:fc:85:6f:4e:b3:f5:ca:37:
                    da:3f:58:45:b8:6e:5f:d9:cd:1c:0a:21:62:b3:0b:
                    59:a4:36:4d:60:a2:31:33:e6:3f:77:c3:f8:6a:a8:
                    2d:10:7c:2a:38:b9:3e:46:da:1d:90:45:ec:86:08:
                    b5:dc:9b:fd:48:9c:3a:c5:f8:74:1d:14:2f:19:5a:
                    ed:be:66:f3:d2:45:e3:de:18:a3:fd:fe:44:39:3b:
                    c2:c0:87:04:e8:8b:66:ed:1e:b6:74:2f:b2:f9:f2:
                    f6:58:80:6c:2b:88:b5:03:de:e2:b4:3d:87:3d:6e:
                    3e:54:e4:6a:68:1a:20:93:80:87:31:6c:aa:68:d5:
                    3a:5f:54:68:a6:e5:21:1e:00:bf:ff:7b:2b:3a:7d:
                    4e:13:72:4c:da:28:54:75:9f:db:0d:ff:0b:84:ab:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8D:91:95:06:6B:CF:EE:58:25:0C:24:66:B0:B5:84:1D:BD:A7:63
            X509v3 Authority Key Identifier:
                keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:75:0b:a2:1c:a6:d2:00:c6:e5:b0:10:52:c1:4e:91:fe:20:
         e3:a1:76:f4:a8:c9:2e:f5:c3:01:27:6a:4a:24:c2:9e:4d:2c:
         50:10:71:88:9d:6b:4a:f7:ca:a8:7f:bd:85:db:d7:4a:e2:9c:
         a0:a7:9a:40:ef:c1:e6:2b:84:1d:81:f0:05:27:87:ac:cd:75:
         a9:a4:b2:d0:71:00:bc:d8:3a:a3:8e:9f:d0:c9:73:92:11:ff:
         47:d8:eb:5b:7d:c3:d1:8e:fd:ab:83:af:7f:32:4d:19:11:f6:
         50:e5:ce:c5:45:7a:8e:9c:ca:45:d7:27:6f:c1:72:32:95:ab:
         c7:61:fb:2a:78:35:5e:a1:9b:3b:cd:7f:e1:ad:83:54:3e:96:
         61:6f:7c:d0:44:ea:d4:8a:d8:aa:22:0f:de:aa:53:53:25:48:
         0d:9e:ef:bb:af:5a:1a:9f:36:a9:8e:44:df:0c:e7:27:b4:cb:
         47:8f:e5:fc:f2:76:a6:69:cb:6f:c3:33:47:37:43:9f:66:34:
         d1:4e:ed:4a:47:45:47:91:88:5b:30:a0:0b:fd:ea:76:ce:9a:
         dc:69:ee:21:29:a7:b1:5e:b2:55:b2:b0:f8:d7:fa:0e:7b:5d:
         4f:41:e4:d7:9a:da:cd:d1:ab:6c:90:a8:79:66:ed:82:84:ff:
         3a:d2:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:20:23 2025 by rpki-client