Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File:                     pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier:          k5qkzVWbM+0m7yRGC6eSNdt1bObgwRc/xYiKhxElaeg=
Subject key identifier:   3E:7E:5A:BE:92:FE:CD:69:35:26:1D:2B:78:CC:F6:3B:D3:33:88:06
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer:       /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial:       01969E9A36B042879157D59D0F8220309893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number:          07C7
Signing time:             Mon 05 May 2025 04:00:28 +0000
Manifest this update:     Mon 05 May 2025 04:00:28 +0000
Manifest next update:     Tue 06 May 2025 04:00:28 +0000
Files and hashes:         1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
                          2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: 8lxqg/Yai7KlSS0uK2+tN4IIFTZ81vqApYGnTaOMUXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:36:b0:42:87:91:57:d5:9d:0f:82:20:30:98:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
        Validity
            Not Before: May  5 04:00:28 2025 GMT
            Not After : May  6 04:00:28 2025 GMT
        Subject: CN=3e7e5abe92fecd6935261d2b78ccf63bd3338806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:43:7c:7c:48:bc:63:b0:4e:25:9a:9f:68:
                    06:c7:44:dd:90:be:ad:ef:f5:ec:66:e4:3a:6c:4b:
                    b8:c6:21:4a:d3:cd:f6:78:5e:e7:64:2a:4d:6d:11:
                    a8:71:77:c8:a7:8e:4f:4b:b0:42:d3:d5:17:17:31:
                    91:43:da:59:53:9f:2c:2d:5e:2d:bf:5e:f6:cd:f8:
                    e9:93:8f:24:16:a0:1f:6d:cc:94:17:a8:16:39:29:
                    e9:bf:92:60:40:db:c4:c6:36:1f:ee:89:07:67:77:
                    79:4d:d4:94:f2:44:ec:03:17:cd:38:2b:93:29:01:
                    9d:86:34:2e:43:05:fd:b8:5f:1f:99:8a:56:a1:ce:
                    83:5f:9e:f4:18:e4:2b:2a:6f:11:ef:09:81:79:2c:
                    ef:c5:36:6a:7c:77:d7:a8:78:ba:f7:83:cd:4a:ce:
                    89:8e:3c:d9:8d:87:fe:97:fd:24:7c:b4:19:0d:7e:
                    12:4c:6d:ee:6c:cd:67:b0:bc:fe:b3:35:5c:cb:e6:
                    8c:42:e0:7c:c5:76:bd:94:0f:97:dd:16:0b:bf:59:
                    e3:46:91:11:a8:b1:4f:15:45:79:3d:8e:90:6e:4b:
                    ff:56:da:8f:a7:af:92:36:61:54:ce:31:ab:22:bc:
                    e0:75:2c:89:67:f9:a4:f6:a4:ca:38:e3:11:0d:ce:
                    88:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7E:5A:BE:92:FE:CD:69:35:26:1D:2B:78:CC:F6:3B:D3:33:88:06
            X509v3 Authority Key Identifier:
                keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2f:13:1a:1a:91:3a:36:24:0b:4f:95:1b:65:ef:7d:5c:9f:
         42:57:18:9e:ca:86:e0:c4:ba:0b:b7:1d:aa:49:78:e2:f3:40:
         db:c7:5e:cf:00:a4:f6:80:c2:5d:10:3a:47:bf:74:ba:9f:b8:
         cf:35:a5:2d:1a:ed:08:68:ab:1c:47:6f:7b:c8:fc:8b:96:db:
         85:53:3f:ee:94:1f:ad:a5:6e:af:57:97:a8:04:13:e4:d5:e6:
         14:94:ab:99:1b:dd:3e:4d:98:97:38:41:5b:3c:06:b4:19:ef:
         b8:4e:97:88:54:fa:eb:0e:07:55:9b:5f:97:65:81:34:26:fe:
         56:f4:92:17:3c:20:5a:86:45:fd:91:05:f5:79:7f:38:2a:ae:
         cf:bb:f8:14:11:73:a5:82:ed:20:00:40:80:45:ae:d9:d5:64:
         75:98:ac:5d:47:9d:10:46:4e:53:3d:c5:bc:7b:d1:7d:7b:d7:
         97:df:93:c5:3e:6c:28:1a:cf:5a:ed:e2:87:91:ac:95:4b:23:
         37:db:74:8a:06:18:88:92:b0:72:26:70:82:62:be:03:bb:fd:
         c4:f3:39:77:33:48:c8:4a:9d:f5:2f:a6:4b:76:83:21:02:72:
         fc:6e:71:15:79:9f:16:cd:01:a9:26:ed:fd:ed:f9:43:81:ae:
         67:61:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:27 2025 by rpki-client