Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File:                     puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier:          4SB8oCdTW4xbEyN7b9Qh7y+zCM6CT0hi5K96AYOehhw=
Subject key identifier:   7F:9B:98:6D:B4:57:FB:32:0E:23:5E:F5:14:1F:54:5C:FF:3D:83:47
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer:       /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial:       01969DBEAFD734F22AEBD06EEFB7C40DA704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number:          147D
Signing time:             Mon 05 May 2025 00:00:41 +0000
Manifest this update:     Mon 05 May 2025 00:00:41 +0000
Manifest next update:     Tue 06 May 2025 00:00:41 +0000
Files and hashes:         1: m4oaOJvUbTCnMfIaVthxaAca0Fo.roa (hash: 63YgwjxraN8fKu5dlPjbo9SecMVJoKvca3zxswMIA4c=)
                          2: n3U4T0b_eZvC8-6ycL0d5_eDNuM.roa (hash: 9t7F6PBfxlnF6OlI2OhDxP2xK45ENz8bFdMmt86tiuo=)
                          3: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: 3K6CNn7tX4INCeQVkvzvZGws+sYyR1oEXHu9PyW6EMY=)
                          4: tDmGVhL-hfe86EtwqqFgtbugIGI.roa (hash: yybIZyz2WHKbdDgnIhAh2oqd5wKR3WI3gpGpCQsuSFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:af:d7:34:f2:2a:eb:d0:6e:ef:b7:c4:0d:a7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
        Validity
            Not Before: May  5 00:00:41 2025 GMT
            Not After : May  6 00:00:41 2025 GMT
        Subject: CN=7f9b986db457fb320e235ef5141f545cff3d8347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:58:5f:e2:44:f8:7f:a5:37:6b:bd:0b:16:bc:
                    30:ae:ff:8e:36:91:e0:8e:78:13:67:2e:6c:1b:aa:
                    e3:c1:06:c5:bc:4e:2d:1b:0d:cc:96:17:b6:82:c7:
                    d7:86:6d:a4:7a:55:a1:fb:18:90:b5:cc:8f:4c:e5:
                    e9:2e:c4:e0:e1:88:7a:cd:3f:6e:ab:a6:9c:2d:01:
                    02:b1:83:56:3b:e7:b2:de:56:28:eb:97:4f:1a:3f:
                    ff:93:4a:da:dc:9e:2c:32:18:32:a5:dd:50:c9:38:
                    2c:fc:ea:64:c1:83:c1:b3:f7:33:c5:53:5b:78:ce:
                    ce:e2:5b:6d:39:41:ef:12:3d:ed:af:67:b7:72:09:
                    6d:2c:b4:0c:6e:7d:b1:73:14:35:a5:3b:dd:b2:e9:
                    e8:dc:a1:aa:35:1d:d0:1a:f7:29:2b:9a:57:6f:44:
                    52:ff:e7:e9:27:6a:59:ba:84:60:3c:1b:2a:20:f8:
                    2c:fb:fe:7a:d9:f2:db:9d:e0:83:67:16:b8:cb:1c:
                    89:7a:fb:59:f8:49:4a:23:3c:b2:ec:d9:50:38:a4:
                    3f:3b:e5:75:a9:b4:1c:f3:75:f9:ac:a3:71:d0:ec:
                    2d:e5:32:06:45:9b:33:52:0b:3d:7d:1e:6d:44:bd:
                    31:fb:ae:e3:52:c2:25:d7:79:8d:ab:6f:3e:bd:d7:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9B:98:6D:B4:57:FB:32:0E:23:5E:F5:14:1F:54:5C:FF:3D:83:47
            X509v3 Authority Key Identifier:
                keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2c:c5:f0:cb:e3:0d:79:59:a4:5e:36:ee:67:48:25:46:1c:
         86:d9:e8:f3:12:47:10:c4:8c:4f:12:05:39:a3:93:ae:bf:e2:
         f4:d5:bc:75:ef:41:88:f6:93:1e:4f:cf:f3:04:b7:ec:f5:bd:
         f1:fb:7e:b7:d8:fc:a0:b1:64:6d:4e:6a:38:82:1f:9a:ef:e3:
         0d:82:c2:2d:a7:90:65:3e:9f:b5:d4:d4:d4:59:eb:ea:47:e3:
         84:13:62:cb:8d:a0:98:e0:2c:cc:f8:38:58:49:7f:d9:11:28:
         16:20:7f:c8:7f:be:02:71:ff:42:b2:24:00:62:07:b7:ac:2f:
         c8:70:ba:58:ec:24:c0:b0:bb:df:96:0d:82:89:aa:7f:02:f6:
         c6:8b:8f:89:16:33:b6:56:a0:ca:6f:98:72:65:8e:0e:22:a1:
         46:81:8a:b6:33:f8:3c:fd:b3:b3:a3:bb:3f:36:1b:bd:d3:0c:
         58:d5:cc:48:31:1f:6f:5a:5c:12:45:5a:39:73:4d:8d:be:ec:
         95:17:d3:da:25:31:81:b4:f0:b2:12:3c:50:0a:27:44:80:f5:
         eb:2f:0b:85:c8:ef:f9:aa:0f:cd:78:c6:2a:81:c2:53:f2:9d:
         46:75:a6:83:55:0a:d6:f8:a3:4c:20:a5:a0:63:ef:10:99:55:
         bc:64:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:03:38 2025 by rpki-client