Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft
File:                     pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft (raw, json)
Hash identifier:          kMXxlqUiYdBVT9i+FKblBe0q5C+vfP+say1JXzaIBsk=
Subject key identifier:   AF:57:E4:80:42:0A:51:2B:CE:C1:C5:2D:8F:F3:78:0A:ED:64:B2:68
Authority key identifier: A5:3C:57:B4:56:F0:6B:FE:B4:62:1C:96:A0:05:EA:CF:60:C6:F6:14
Certificate issuer:       /CN=a53c57b456f06bfeb4621c96a005eacf60c6f614
Certificate serial:       0196A6C20AE1D77D9BB019A17F63E2DA1D92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTxXtFbwa_60YhyWoAXqz2DG9hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft
Manifest number:          04D1
Signing time:             Tue 06 May 2025 18:00:56 +0000
Manifest this update:     Tue 06 May 2025 18:00:56 +0000
Manifest next update:     Wed 07 May 2025 18:00:56 +0000
Files and hashes:         1: V2LYd0sNAjO6YfvonMphKW30xj0.roa (hash: jCtsi06JPyPBO/Z5dTRGZpuiSKFLyXc5Zo0EtUSGfF0=)
                          2: pTxXtFbwa_60YhyWoAXqz2DG9hQ.crl (hash: XhT5Kq/vJeShMotDuBZ2/NLeVfbGFhTb246GqDYuk+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTxXtFbwa_60YhyWoAXqz2DG9hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c2:0a:e1:d7:7d:9b:b0:19:a1:7f:63:e2:da:1d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53c57b456f06bfeb4621c96a005eacf60c6f614
        Validity
            Not Before: May  6 18:00:56 2025 GMT
            Not After : May  7 18:00:56 2025 GMT
        Subject: CN=af57e480420a512bcec1c52d8ff3780aed64b268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:08:1f:7e:83:35:74:21:86:17:c7:69:f5:
                    6b:40:bc:c3:57:74:56:8e:89:db:d5:bb:fe:82:68:
                    3d:9c:75:b8:0c:79:c3:b1:fa:8f:21:bc:f6:0e:71:
                    3b:52:a0:08:ee:28:fe:31:0b:3f:38:4e:74:76:b1:
                    ea:6a:dd:9e:a1:da:c8:46:9c:2c:56:ae:93:5e:bd:
                    4a:f2:38:3a:8c:1f:8e:4d:7a:45:43:08:9e:5d:cd:
                    4c:03:f9:6d:fe:a3:21:3d:73:b8:75:d0:2a:9d:19:
                    1b:1d:92:4e:52:62:43:88:20:8b:3c:7f:92:6f:75:
                    72:f8:78:4a:a1:e4:57:1f:43:6b:cf:1a:fb:10:1c:
                    73:b4:b8:82:1b:fe:cc:6c:e0:a4:5d:cb:e7:93:64:
                    53:6d:90:2c:1c:40:3b:24:be:8c:be:b1:5a:4f:c4:
                    aa:9c:a9:94:9a:d0:5e:d0:8b:f0:6e:35:a5:35:41:
                    3f:d1:2c:ae:a0:f8:ec:88:de:24:bf:a2:9a:44:b6:
                    84:b0:3d:10:ce:12:cb:e2:a8:ae:b0:1c:cc:25:a2:
                    a8:13:88:6e:7f:f0:1c:28:e2:32:84:e1:0b:ee:02:
                    af:7b:95:2f:1c:0b:e9:44:5d:3c:f9:e9:c2:d7:c9:
                    14:78:51:61:7f:f5:b0:ef:33:3f:0a:de:77:54:13:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:E4:80:42:0A:51:2B:CE:C1:C5:2D:8F:F3:78:0A:ED:64:B2:68
            X509v3 Authority Key Identifier:
                keyid:A5:3C:57:B4:56:F0:6B:FE:B4:62:1C:96:A0:05:EA:CF:60:C6:F6:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTxXtFbwa_60YhyWoAXqz2DG9hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:09:d8:de:26:f5:8a:b4:87:f0:d7:38:4e:41:3f:49:ac:d7:
         8f:ad:7a:d0:8c:30:80:02:2e:e0:54:4c:8a:b3:b1:c9:d1:47:
         2f:02:48:9c:7e:17:0f:06:a1:01:70:f1:3f:18:f3:5c:8e:bf:
         9a:4e:1d:e7:c8:f0:59:66:de:d3:60:06:d3:45:b9:2b:0a:85:
         51:82:2f:43:d0:01:54:30:f0:e4:bf:1a:c1:2a:af:89:9c:31:
         1f:f7:35:27:12:1e:ee:45:7d:4f:84:a7:7d:95:b2:f8:cc:d4:
         11:01:10:38:b4:2c:ba:72:35:12:92:73:ba:02:51:79:89:45:
         95:b4:84:51:f7:ad:c1:f2:a0:0d:97:7d:2c:c1:a9:39:66:4b:
         20:d4:c7:ce:75:c2:0b:86:34:df:54:0f:6e:e6:13:f6:37:9b:
         bf:09:85:05:b8:6b:f4:eb:91:8d:e5:cd:4a:0c:35:c9:92:99:
         4a:fc:0c:35:68:28:57:f9:b1:3b:30:d8:b5:82:87:b3:59:9a:
         7a:3c:34:d7:c4:62:84:e9:ab:7e:1b:85:04:1b:64:f6:4b:f9:
         da:00:2e:9c:f4:d8:a9:fe:51:06:49:80:87:85:42:ab:92:a5:
         6a:2e:37:40:e5:17:3d:21:e2:1f:74:36:3d:f4:c8:9f:dc:47:
         61:07:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:25:22 2025 by rpki-client