Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File:                     0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier:          FtM5GlmidnH5POyPZTkLQr95gJIk4MgxMcg79N1wJ/o=
Subject key identifier:   02:86:69:A4:0B:F6:D7:CA:8D:AE:C3:E0:5F:D0:68:10:CC:C2:16:1D
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer:       /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial:       0196C2396C6A0D9C595F057A1D5D756CEBA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number:          150B
Signing time:             Mon 12 May 2025 02:01:04 +0000
Manifest this update:     Mon 12 May 2025 02:01:04 +0000
Manifest next update:     Tue 13 May 2025 02:01:04 +0000
Files and hashes:         1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: MtmOkloFuIJklXWrzPC0sEQfLSPeGVTgINHsVNBIiHQ=)
                          2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:6c:6a:0d:9c:59:5f:05:7a:1d:5d:75:6c:eb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
        Validity
            Not Before: May 12 02:01:04 2025 GMT
            Not After : May 13 02:01:04 2025 GMT
        Subject: CN=028669a40bf6d7ca8daec3e05fd06810ccc2161d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:05:93:75:32:8f:bd:9d:34:57:79:25:cd:
                    e4:64:2c:e6:65:26:a1:5a:e5:8a:f6:a4:53:c5:c1:
                    d5:40:07:a2:d0:2d:88:a7:73:1b:ff:e3:ce:2d:e0:
                    b0:73:9c:3b:8d:1d:2e:37:bb:7e:13:d3:42:9b:04:
                    6d:90:cd:b4:67:01:92:42:17:84:e4:ab:98:54:db:
                    d7:86:9d:cc:67:2a:96:40:d5:9d:d8:78:02:ed:1c:
                    13:b7:54:bc:46:83:af:e9:a1:22:de:f3:f2:ff:87:
                    44:48:0a:70:f2:05:cd:b5:56:cf:ca:4a:d8:fb:84:
                    da:ac:18:6e:5b:ce:d8:7d:9f:cd:74:5f:b5:28:59:
                    b4:6f:c8:8e:c4:ec:f2:fe:15:4c:48:be:29:04:ce:
                    52:42:4f:88:05:74:5b:16:f7:5d:e7:71:72:e3:e4:
                    b6:d8:03:52:8b:43:65:59:87:bb:c2:e1:21:19:62:
                    3b:f8:d5:6a:8f:08:4b:33:c1:79:40:3c:79:e0:1a:
                    fc:ea:90:f3:88:f8:02:d4:d9:62:8f:ec:53:5a:0f:
                    c4:fe:62:eb:44:8b:b5:8d:df:2d:59:86:86:ae:30:
                    97:d1:48:af:c5:a7:74:5f:52:9c:56:e5:0a:aa:02:
                    96:e4:b8:fc:cc:5a:c2:90:f3:1e:d9:6d:06:b4:9e:
                    8d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:86:69:A4:0B:F6:D7:CA:8D:AE:C3:E0:5F:D0:68:10:CC:C2:16:1D
            X509v3 Authority Key Identifier:
                keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ac:24:f4:c2:53:57:b1:f2:40:1f:7f:02:eb:59:ae:69:f7:
         03:42:85:83:82:30:5a:aa:9a:76:be:3b:7f:fe:d2:8a:fb:ef:
         26:3c:d3:49:ba:1d:7b:37:48:06:60:ee:0a:d4:ce:a8:5a:93:
         cb:a6:f2:58:6b:b2:5e:4c:aa:da:4e:06:2c:52:8d:c6:ae:20:
         e4:6a:8a:ec:53:89:5b:19:44:fb:00:66:70:3a:b4:2d:40:9e:
         7c:6f:01:32:94:29:7e:ae:9b:74:85:20:2e:1f:4f:de:d2:ea:
         ec:01:6c:c9:dc:3b:1b:7d:36:73:32:69:e7:af:d9:31:68:76:
         b3:3e:cc:ce:07:0b:4d:56:f3:fd:11:eb:35:76:04:a5:df:c5:
         52:f0:a9:a7:6c:46:be:c9:70:ca:6c:e9:19:40:7d:07:84:5b:
         db:c0:70:3a:4b:13:2c:65:e1:23:fd:62:a2:66:94:35:9c:e8:
         84:c1:55:46:ed:be:d8:7f:5e:34:5c:a6:71:03:b6:cc:db:d0:
         31:46:b5:6b:68:1e:9f:bb:c1:6f:d7:6e:5d:6e:ab:42:43:57:
         34:1e:8b:52:39:20:0f:25:a7:c6:d6:29:af:c4:7c:89:4e:89:
         bc:11:de:cc:1c:2a:42:61:32:50:a2:81:2f:c6:46:55:59:d3:
         8a:82:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:19:31 2025 by rpki-client