Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
File:                     pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json)
Hash identifier:          4emff/ftCXOKjmO7IQUN/mNp0nTpavRB//Vv10hDGXk=
Subject key identifier:   32:CE:45:24:9A:F9:70:B5:1E:4D:73:8C:75:32:08:73:E8:C3:8C:B2
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Certificate issuer:       /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial:       0196CDCF430321335EC9A5AF68BE301BBD4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 08:00:34 +0000
Manifest this update:     Wed 14 May 2025 08:00:34 +0000
Manifest next update:     Thu 15 May 2025 08:00:34 +0000
Files and hashes:         1: eZY2teiRCMuc8ordB3siE6vvyrU.roa (hash: eYVuxyQrp/ArDQADFzcG2OxANFHCCc8GbHzB/2LAyF8=)
                          2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: Mv5x+oEjeL29T1ASsJhIRHRqc77PTFdMLvUutixc+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:cf:43:03:21:33:5e:c9:a5:af:68:be:30:1b:bd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
        Validity
            Not Before: May 14 08:00:34 2025 GMT
            Not After : May 15 08:00:34 2025 GMT
        Subject: CN=32ce45249af970b51e4d738c75320873e8c38cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:a8:70:3c:d7:e5:30:40:ea:3a:e8:0d:cc:
                    3f:72:40:c2:f4:83:da:08:b4:5e:99:d8:8e:df:42:
                    6a:bb:83:04:f2:de:e5:c9:3d:45:7f:44:3a:cd:17:
                    c4:c1:f8:55:3b:6a:ff:4f:3e:3d:d7:81:5a:4f:6c:
                    03:fa:3b:11:8a:b4:68:a9:db:35:e3:c3:27:dd:c2:
                    81:6f:98:fe:e2:bd:a5:1e:4e:da:33:5b:3a:dc:b3:
                    1c:6b:1e:21:11:58:24:b6:df:36:99:38:f5:fc:6c:
                    54:b1:6b:8c:d6:66:cd:98:48:be:af:e9:97:a4:94:
                    cf:e2:a0:60:d5:4a:8c:63:68:b5:57:8a:d5:89:dd:
                    ed:0f:fc:ee:30:0c:0d:78:7e:f4:9f:82:d5:8d:f5:
                    4d:40:63:50:01:b3:db:e8:a8:ba:2c:1f:c6:ae:6e:
                    55:08:68:48:7e:0c:e5:9b:de:85:cc:5d:ab:1c:ef:
                    54:f0:80:e3:0e:ec:22:29:75:45:07:ef:51:2a:33:
                    8e:ba:ea:68:98:53:87:60:ca:44:4c:08:f9:bb:8b:
                    8c:9e:ca:e0:f5:d3:ba:99:02:ea:9a:23:65:10:ba:
                    be:bb:25:70:15:46:86:39:b3:9e:ff:4e:86:06:61:
                    81:06:65:f0:44:2d:12:41:60:74:62:d5:2c:f4:74:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CE:45:24:9A:F9:70:B5:1E:4D:73:8C:75:32:08:73:E8:C3:8C:B2
            X509v3 Authority Key Identifier:
                keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:2f:ac:44:24:11:2f:c1:cd:c1:f0:d1:d7:c1:a7:59:9f:d9:
         42:a1:07:dd:df:f6:1b:27:24:a5:81:5b:50:3a:3a:95:f6:94:
         a7:b3:82:20:5a:0e:c3:2d:0b:f2:b4:98:3b:7c:8b:6c:04:8c:
         6a:e7:e7:f1:90:82:78:8e:14:6e:d4:e0:e3:76:32:95:4e:1c:
         3c:70:5a:d4:62:e2:d7:e0:71:fe:32:1b:ee:4c:e4:e2:1e:4a:
         33:6c:a4:c7:2d:08:8f:7c:c9:1e:d8:4a:b4:9d:90:26:b2:9a:
         45:35:dd:68:b5:25:16:d5:60:72:64:87:29:7c:32:c6:5d:0a:
         31:61:50:60:f3:a9:ab:f9:8e:97:9e:6c:b0:1f:51:13:5c:9a:
         b6:c8:99:a7:4c:a5:a0:99:14:28:b4:09:52:f0:11:20:41:9c:
         fb:66:12:3b:5b:d0:db:20:a2:f6:94:1a:99:96:84:21:df:88:
         ae:05:04:48:5d:d3:4b:64:dc:34:46:44:69:b4:b4:59:1d:09:
         f2:77:55:9a:86:28:c0:85:9e:be:2c:34:c2:c7:c7:d8:4a:38:
         82:af:b1:2a:1e:b2:d4:42:cc:bf:6f:c1:8d:5a:5f:64:7f:a6:
         ef:fb:87:7e:04:a2:91:fd:b9:ff:50:ea:b9:85:50:85:79:46:
         e4:1d:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:35:17 2025 by rpki-client