Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
File:                     pABDs-E67Tl_iTLPXRP_T0qv5ro.mft (raw, json)
Hash identifier:          mj4RowmVWvis4WyCYM3+NNw6k1ifCVOTvJEx4h/CSj8=
Subject key identifier:   CD:B6:5E:37:15:D3:53:A4:56:23:18:E8:34:36:31:F6:51:A7:E0:CE
Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
Certificate issuer:       /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Certificate serial:       0196C34C12F46AA85E039E01FC14018B9FC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
Manifest number:          07F3
Signing time:             Mon 12 May 2025 07:01:04 +0000
Manifest this update:     Mon 12 May 2025 07:01:04 +0000
Manifest next update:     Tue 13 May 2025 07:01:04 +0000
Files and hashes:         1: 6PmEXqzCqtOkV5rlVnjN7lD4y7o.roa (hash: oeYIl7mC76NEmwPAocr8euhDeieJStNOycGYHO+qVzg=)
                          2: pABDs-E67Tl_iTLPXRP_T0qv5ro.crl (hash: o8L5QU3Ic5Vpi1RZdDYblcxOarRvK3y72u9eZ3H67QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4c:12:f4:6a:a8:5e:03:9e:01:fc:14:01:8b:9f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
        Validity
            Not Before: May 12 07:01:04 2025 GMT
            Not After : May 13 07:01:04 2025 GMT
        Subject: CN=cdb65e3715d353a4562318e8343631f651a7e0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:27:34:04:57:3d:9e:0e:55:85:d3:ba:fc:
                    b9:30:3d:45:30:7d:f0:c6:06:f9:52:28:dc:a8:98:
                    f5:4e:6d:a8:cb:e7:2a:3d:21:d1:53:a7:20:fc:22:
                    e7:ec:4d:e1:60:5c:1d:59:9a:c6:36:d6:ce:a3:77:
                    76:10:29:1c:2c:fc:73:7f:b5:d7:40:6e:05:89:8e:
                    9f:60:2c:33:df:b6:75:fc:e4:6a:17:e8:fd:f5:3d:
                    ac:3a:e7:11:fd:a8:98:22:0b:04:a7:d7:99:06:1f:
                    c3:88:39:36:ef:92:56:8e:3f:3f:1c:59:41:ae:84:
                    e7:36:81:4a:62:09:43:90:b8:14:26:fc:5e:2e:0b:
                    dd:5d:02:9a:5f:09:20:85:e6:27:2e:e1:20:6a:0b:
                    f0:e3:93:48:ae:54:6c:63:b6:e3:f9:48:b2:ae:14:
                    b4:d0:3e:aa:2d:13:9c:d4:ab:91:66:fc:f8:f4:c6:
                    fc:cd:3e:71:46:b9:34:6b:0d:30:dd:fa:96:0a:5d:
                    63:35:52:2c:01:94:0e:95:c1:05:35:b5:f8:2e:a1:
                    51:52:f6:a7:d5:35:e2:c7:80:d0:cf:25:08:1e:f6:
                    2f:22:79:80:37:dd:68:5d:4e:b1:d4:f4:0f:5a:ac:
                    59:ac:f7:33:28:2b:84:38:26:b2:6b:dd:2d:da:d3:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:5E:37:15:D3:53:A4:56:23:18:E8:34:36:31:F6:51:A7:E0:CE
            X509v3 Authority Key Identifier:
                keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:7d:34:1f:c3:8d:83:9b:59:c8:38:eb:71:85:d1:ce:69:
         26:8a:9f:8b:22:39:e7:7c:d3:3f:f5:bb:b7:af:76:9b:b6:8d:
         65:94:66:2e:f7:ae:85:0a:b1:c3:d1:59:c8:b9:5c:cc:ac:1c:
         15:8d:b3:35:35:3f:98:1c:ec:34:00:b8:b8:ac:ca:b5:2b:44:
         96:ec:3b:cf:8e:57:2f:20:4d:66:93:db:8c:82:33:70:29:f3:
         d7:c5:72:7c:7a:60:42:54:17:01:88:f2:70:68:e4:b8:dd:98:
         79:bd:f6:3c:f4:84:6c:bd:19:26:54:fd:37:1c:93:6d:8a:05:
         31:8a:6b:ec:56:9e:84:e1:43:58:4b:f1:f7:77:59:5d:51:16:
         a0:56:db:01:e5:96:b6:13:62:52:b4:51:34:d0:fc:24:c9:14:
         81:39:76:79:64:e4:25:9b:95:dc:af:00:d8:6a:0e:2e:2f:b9:
         3b:3d:e7:5d:b3:16:9c:c7:95:39:2a:90:7c:df:00:75:53:27:
         8f:f4:64:0c:01:cf:13:b9:ea:e1:19:f5:2f:f1:3e:fd:a7:0f:
         f5:d6:79:51:6f:aa:9c:d1:a4:0a:40:50:8c:91:c9:af:68:90:
         99:b6:df:8d:a1:23:1e:4b:5b:2f:16:3e:74:16:c9:aa:70:79:
         ff:22:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:43:16 2025 by rpki-client