Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File:                     PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier:          AHy/hqKVAF74KqM6vlaBREHb3TeMgpJfG+jQvqKFa/E=
Subject key identifier:   48:B5:4F:93:DB:44:86:E2:70:38:12:F7:FA:95:6B:FB:08:4D:71:7A
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer:       /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial:       0196B634E189692AC5A65BD1CC74D12DE045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number:          0D27
Signing time:             Fri 09 May 2025 18:00:40 +0000
Manifest this update:     Fri 09 May 2025 18:00:40 +0000
Manifest next update:     Sat 10 May 2025 18:00:40 +0000
Files and hashes:         1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=)
                          2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: Hrk0zC9ZRA/4U87YsB7ypDKnKd69dseJQr02w7lTdS4=)
                          3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:34:e1:89:69:2a:c5:a6:5b:d1:cc:74:d1:2d:e0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
        Validity
            Not Before: May  9 18:00:40 2025 GMT
            Not After : May 10 18:00:40 2025 GMT
        Subject: CN=48b54f93db4486e2703812f7fa956bfb084d717a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:81:d0:f5:b1:13:5b:cc:ba:57:b0:a3:5c:
                    dc:73:0b:0e:87:b3:66:cc:f3:64:81:3d:ff:11:34:
                    f8:e4:a1:6b:3a:6e:07:9f:12:b4:16:86:45:9a:2a:
                    c5:7a:7e:f3:97:23:00:1b:77:47:fd:39:d7:e2:e6:
                    05:98:3f:5f:ba:ac:82:ea:31:9b:df:4d:f1:21:d4:
                    97:e9:be:77:48:b1:47:4e:ef:cf:09:56:0c:68:4a:
                    ae:70:45:7c:b8:7a:5e:53:a8:09:5f:84:75:aa:f3:
                    c1:8c:63:03:e2:5e:ff:a7:5b:97:fc:ad:a1:05:13:
                    25:92:68:a3:4e:89:4d:12:7a:46:09:cb:6b:28:b3:
                    9a:69:f9:12:2a:2a:53:9a:b4:d9:33:50:04:7c:b4:
                    86:27:12:ad:f7:93:94:9e:73:f9:b1:9e:bb:1b:b2:
                    16:89:8b:64:24:a6:a6:0d:53:67:ec:e6:21:b7:2e:
                    a6:92:fb:29:43:63:83:a1:6c:26:86:53:58:d7:d2:
                    99:66:8e:2e:08:48:2e:9b:15:2d:54:10:35:5a:bb:
                    05:b6:54:3f:9d:26:21:e5:4e:82:32:ea:c0:19:f4:
                    eb:56:39:3c:10:7e:d0:78:a6:a4:0e:29:f0:f0:2c:
                    ba:68:66:32:d0:39:f0:2f:33:6f:36:b8:12:37:1c:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B5:4F:93:DB:44:86:E2:70:38:12:F7:FA:95:6B:FB:08:4D:71:7A
            X509v3 Authority Key Identifier:
                keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ba:3b:47:a3:25:40:eb:e1:c1:0c:85:22:7f:68:e1:3a:33:
         ea:30:42:8c:f4:11:20:4d:cd:ab:42:43:1c:fe:27:30:0b:5e:
         5a:84:f9:ce:2f:c0:44:ec:d8:1d:4a:52:04:09:0d:d6:09:8e:
         bc:f1:91:33:c6:6d:7e:32:45:8c:26:59:38:81:19:6b:d5:81:
         f5:e1:2f:a5:1e:6f:88:35:76:3a:25:bc:be:3f:3b:e4:1d:f3:
         33:28:b0:8a:10:f3:88:ba:a8:ff:ad:c0:e6:25:70:b5:d7:46:
         6f:d6:57:41:47:2b:c5:f4:e3:35:cd:4d:8b:3a:50:fc:13:39:
         c5:72:9b:2a:77:5c:35:3b:30:8e:f7:b0:50:b3:d9:71:6b:05:
         dd:16:ca:73:28:10:62:bf:3f:19:b6:bd:1e:e0:f9:83:59:9e:
         7c:b0:1a:e4:03:9c:fa:2b:c1:d5:27:ff:28:ce:95:70:0d:a5:
         d0:88:a2:ef:77:c2:a9:3c:0d:53:b7:d5:05:14:9e:3f:62:5c:
         7a:85:41:8c:fa:85:6f:8c:01:9c:75:3d:cb:05:8e:a3:a7:37:
         2d:79:3d:34:84:04:b2:1d:91:f4:55:17:79:88:cd:f0:2e:39:
         53:6e:c2:ed:88:98:b9:65:1e:21:ce:6e:e8:ca:5c:5e:77:96:
         2f:50:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:47:38 2025 by rpki-client