Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File:                     Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier:          gNvHHtYz/o5Ybw5yxMtGnGehD5xzwggz4qjzqF0pC2U=
Subject key identifier:   CE:B3:A6:A6:25:F2:C5:57:EB:46:43:ED:39:83:E3:A0:B5:15:9A:E3
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer:       /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial:       0196BB5B176E225E84CE1C76EA45C9619CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number:          1536
Signing time:             Sat 10 May 2025 18:00:31 +0000
Manifest this update:     Sat 10 May 2025 18:00:31 +0000
Manifest next update:     Sun 11 May 2025 18:00:31 +0000
Files and hashes:         1: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: f5EXIbyr2JOZaYZiaw5ygvXX4V1j33cvoybWpb5ptnc=)
                          2: yUqCwPk0Ei-cViitt4Gqnb4KxdE.roa (hash: rJJZNa4cHpwDRyt4aQOGhddvG2b+c/8oiLA2xlie2pA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:17:6e:22:5e:84:ce:1c:76:ea:45:c9:61:9c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
        Validity
            Not Before: May 10 18:00:31 2025 GMT
            Not After : May 11 18:00:31 2025 GMT
        Subject: CN=ceb3a6a625f2c557eb4643ed3983e3a0b5159ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:ef:99:37:09:a7:80:42:95:b7:5a:3f:47:
                    bd:15:0d:94:3f:e8:8f:76:d8:e6:e1:23:08:32:59:
                    c0:b9:79:98:04:bc:90:34:92:1c:a2:7f:66:cc:73:
                    84:28:f7:07:6d:6f:a4:3f:21:f1:bb:ed:c7:3b:21:
                    18:2c:a7:ba:1e:15:ba:5e:99:6a:6c:d8:2f:2a:b5:
                    17:2b:5e:22:62:be:bd:6d:0b:1e:37:19:af:2b:90:
                    ab:e9:d1:64:6a:93:0c:21:76:44:0a:c4:4a:eb:13:
                    c7:c7:2e:00:35:b6:1b:37:0a:5e:d0:fb:6e:82:e0:
                    cc:2a:5b:56:67:71:87:e2:67:96:16:83:ee:77:88:
                    bc:0a:44:5e:43:09:66:ba:ac:91:95:1b:9d:b9:bc:
                    3e:c4:3a:c0:06:91:fc:61:5c:06:7d:a0:2e:82:08:
                    57:00:59:00:61:63:af:a3:e9:12:6d:77:82:16:61:
                    13:71:d3:1a:e8:9b:b7:8a:ad:48:f0:1f:c6:72:3b:
                    cd:97:c1:b1:e5:b5:2e:3f:94:bc:89:86:91:af:7e:
                    98:31:14:7d:76:88:a1:b1:ef:09:d0:93:44:98:3b:
                    37:3d:d7:3a:0b:f4:0a:70:e1:1a:a8:af:36:c9:66:
                    c4:85:16:67:cf:f9:6e:0b:53:2b:b8:f9:79:95:e6:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B3:A6:A6:25:F2:C5:57:EB:46:43:ED:39:83:E3:A0:B5:15:9A:E3
            X509v3 Authority Key Identifier:
                keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:87:3c:56:c7:69:69:58:6e:9d:33:f1:9c:2e:dd:a6:a4:
         f0:c5:f6:ab:5c:39:a2:d8:e1:b0:fd:c3:8c:a0:18:ed:43:13:
         af:bf:23:cc:6f:94:b4:31:ab:88:15:39:1c:cf:4c:36:d0:13:
         d0:45:51:71:6d:a3:0e:d8:67:97:82:4c:dc:e7:df:b1:00:cb:
         07:fd:68:fd:78:ad:a0:3f:81:c2:f6:32:1a:c9:67:03:1f:a1:
         f9:5a:22:ab:50:30:3d:ce:0b:28:5d:14:d9:8e:1a:4a:61:05:
         6a:c4:ea:3e:6a:99:40:06:bd:61:02:31:ab:0d:47:5c:3d:12:
         be:34:15:3f:fc:d5:04:cd:1f:29:74:5a:88:d7:d5:70:79:09:
         45:47:86:da:16:81:ae:c9:71:5c:11:77:e5:63:a2:6e:16:de:
         35:b9:78:bb:89:51:94:17:78:66:1a:90:07:a3:83:7c:7c:ec:
         37:6d:59:d9:0d:a3:2e:87:ea:89:69:a1:5e:fc:cf:ac:14:7c:
         34:d7:bb:1c:2d:db:cd:c6:f0:8e:39:0c:52:6e:73:92:66:6d:
         9c:a3:74:b2:e1:bc:55:e4:92:97:87:4a:92:e3:e3:6a:55:51:
         71:9e:20:02:66:4e:8d:b1:fc:be:45:91:79:2a:09:0d:11:3e:
         6b:6c:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:01:29 2025 by rpki-client