Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File:                     PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier:          6nYOpkijssWAKpUmGGnS5I+eSEPnp4y7s8C4U5VoV0A=
Subject key identifier:   D5:F4:79:BB:5D:B1:E8:A1:32:E3:87:9E:0A:C3:13:BA:E9:E9:02:EB
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       0196C26FCDDBFA0793F695D2875F8C07F0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 03:00:29 +0000
Manifest this update:     Mon 12 May 2025 03:00:29 +0000
Manifest next update:     Tue 13 May 2025 03:00:29 +0000
Files and hashes:         1: 3-Ja7oUVjGguwh6QaF2yeAfwhyM.roa (hash: nrUNLtMMNN8x4oqm05IG63Gk5IknemEKbhNaDnkCTrY=)
                          2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: ssY0ol2QemhLYCxuxSTBcOY6y/MW3GsIaUEIajVsJGM=)
                          3: QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa (hash: xTswaXIuzP+4J3jL8v5PcwUSYu10jxnq7ts41cuAvZE=)
                          4: adzPWtlHDTvsggmKWbe4TnrcvIk.roa (hash: n14P1Q6Wx2eq+iqMHqpfTj36nMIIclkcTcwOpIeBWTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:6f:cd:db:fa:07:93:f6:95:d2:87:5f:8c:07:f0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: May 12 03:00:29 2025 GMT
            Not After : May 13 03:00:29 2025 GMT
        Subject: CN=d5f479bb5db1e8a132e3879e0ac313bae9e902eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:14:14:87:3d:61:a9:0a:40:03:e2:8d:5f:74:
                    4a:bf:5a:b5:f9:24:ff:d1:a6:50:b5:19:6f:00:f9:
                    f3:6d:ef:fd:7e:89:fe:9c:e5:65:bb:1a:dc:92:91:
                    32:0a:13:8d:11:10:fe:fc:de:ac:03:65:19:d6:98:
                    13:c9:10:b6:9a:04:86:83:dd:e5:51:f7:33:fb:07:
                    65:81:73:ec:5a:03:0f:41:dc:7a:74:b6:3b:ac:e6:
                    53:6f:f2:7b:b7:00:a2:32:82:ac:61:18:2f:65:e4:
                    1d:62:34:9f:da:a4:9b:c9:8b:b3:d8:5d:57:0c:00:
                    06:21:24:65:68:04:30:28:fe:05:8e:8b:8e:15:af:
                    6b:f8:03:49:8d:21:d1:23:c6:74:65:bc:4a:f5:ab:
                    e0:48:f1:25:da:5d:68:c2:40:a1:de:6f:84:a1:87:
                    01:c7:69:27:13:0a:c3:1e:02:15:f6:30:70:2c:82:
                    d9:f5:ea:39:60:f8:90:84:b5:21:70:5d:4e:47:bc:
                    57:19:b4:4b:07:27:61:3e:a2:76:27:ba:d1:86:58:
                    6d:3e:de:fe:bf:7f:54:09:3f:88:92:ab:65:93:98:
                    32:09:2d:28:6a:fa:0a:58:af:ff:64:72:c7:57:02:
                    34:8d:ef:b7:a4:51:70:33:64:51:90:91:dd:16:52:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:79:BB:5D:B1:E8:A1:32:E3:87:9E:0A:C3:13:BA:E9:E9:02:EB
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:07:a7:c7:21:af:9c:6e:08:90:a4:e6:99:dd:15:bc:78:28:
         24:af:9f:f2:66:4c:6f:93:b7:6c:72:a2:6b:43:75:6d:0b:21:
         60:50:90:3a:f1:a0:b6:44:7f:32:96:e1:15:af:ed:1d:e6:58:
         fd:c8:eb:8c:58:13:c7:6c:d6:cb:d1:12:10:9d:7b:b1:95:48:
         ae:df:56:a1:04:28:7e:5a:57:47:7c:0d:77:46:68:47:33:3f:
         29:5e:5a:fe:ac:e0:8e:02:76:48:0e:c7:de:79:1f:e7:9f:1b:
         9b:22:bb:43:d4:fd:1b:e9:66:8b:cc:ef:31:26:69:fa:2b:10:
         94:19:d2:89:e3:a5:2a:01:82:7e:c1:c3:be:61:b7:fe:bb:5c:
         92:e2:a5:c5:e4:d7:5e:44:9c:9b:a1:33:df:3f:16:c3:f6:1f:
         64:6e:49:83:2e:fb:39:29:87:a6:01:39:49:06:36:94:7c:6a:
         da:4f:38:fe:a7:a3:f3:e7:ed:db:69:bb:57:ac:79:f8:39:bb:
         c3:28:06:92:3d:25:84:dc:4f:2d:a6:97:57:62:75:2c:92:7c:
         6f:ed:81:a0:60:6c:2f:fa:b3:79:b7:ba:e4:3b:6f:ee:f8:32:
         44:52:80:be:05:c4:74:fa:8f:60:71:f7:38:bf:69:3e:ae:00:
         54:4d:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:08:17 2025 by rpki-client