Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File:                     pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier:          HknoN7fZpKpCiv5E3Xdi7ww+l3Pxtf5zWDq1K2Qqz0A=
Subject key identifier:   85:63:98:E7:2B:65:AC:43:7A:18:5A:8C:01:33:13:40:C9:CE:94:B0
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer:       /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial:       0196C382969876247008BEB087C04135A3F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number:          05C0
Signing time:             Mon 12 May 2025 08:00:37 +0000
Manifest this update:     Mon 12 May 2025 08:00:37 +0000
Manifest next update:     Tue 13 May 2025 08:00:37 +0000
Files and hashes:         1: gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa (hash: LNpaqhIXeGRj9rxSqG8l9W+yrY/Iu+GRMv3w/Y4Inpo=)
                          2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: 1OWbWjfAwFUkeVaQJURdVJM0ffrKOJexXbwZOq+QdkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:82:96:98:76:24:70:08:be:b0:87:c0:41:35:a3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
        Validity
            Not Before: May 12 08:00:37 2025 GMT
            Not After : May 13 08:00:37 2025 GMT
        Subject: CN=856398e72b65ac437a185a8c01331340c9ce94b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:85:35:67:b6:5e:bf:44:28:19:4c:0a:48:00:
                    5e:e6:7d:f4:27:b7:8e:dc:e6:19:de:28:f5:d5:8a:
                    1a:6d:5a:68:da:e6:8a:df:3c:8a:f6:ae:a1:ab:38:
                    17:45:26:f9:e9:b7:37:11:cd:d7:03:fd:7e:78:33:
                    9c:bc:3b:55:55:e6:22:5f:05:e7:31:df:a4:0c:8a:
                    c2:5e:27:64:3b:9f:85:90:a3:38:c1:0e:45:63:7e:
                    d0:1b:f9:ef:26:27:1c:25:6a:3d:f6:65:65:10:52:
                    f9:24:37:1d:24:39:0f:11:67:d5:21:82:c4:bf:6e:
                    1e:ab:e6:b2:9e:a5:16:45:3c:96:b7:1d:41:4c:8b:
                    a1:1b:42:2e:18:5c:22:1a:7f:42:13:35:2f:15:86:
                    7e:7f:bc:f5:70:88:a9:4a:59:90:eb:63:b3:3f:8b:
                    0d:cc:ee:b0:69:26:d8:dd:8d:67:d1:5f:62:97:b3:
                    a7:8e:12:07:25:22:36:24:a0:36:20:f9:fa:bd:62:
                    08:cf:4a:44:c7:e1:36:06:00:7d:7a:0e:2e:3e:83:
                    11:11:dd:8b:ac:65:1f:49:c4:89:dc:fc:12:74:08:
                    fa:ff:e6:b1:7f:2f:87:5e:bc:48:39:4a:14:a9:16:
                    c6:b8:b3:8d:ad:ad:36:24:a2:7b:be:e1:e3:55:83:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:63:98:E7:2B:65:AC:43:7A:18:5A:8C:01:33:13:40:C9:CE:94:B0
            X509v3 Authority Key Identifier:
                keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:eb:54:2f:9f:28:45:8b:a9:cd:fc:e4:0e:80:0e:98:67:
         5f:db:45:04:d3:c1:8d:d6:60:f6:f9:b3:db:20:fa:94:d1:00:
         0f:b7:70:9c:09:40:dc:05:7a:5e:96:b5:42:c0:9d:96:eb:64:
         77:2f:d6:3c:a3:68:2f:52:cb:b2:b7:25:b6:ad:91:42:22:d8:
         9f:a8:15:2a:e1:78:26:59:59:91:78:7d:cb:e5:bf:4b:3d:31:
         8e:d6:27:0b:a0:c3:71:cb:bc:62:8e:a3:65:f3:4d:68:7b:6c:
         d8:5e:ba:00:ea:2d:f9:4d:ad:c2:ec:2b:bc:34:c9:f9:80:00:
         fb:dd:0a:35:a0:b3:99:ba:f9:87:12:47:a8:6c:f5:77:f4:f0:
         fc:c9:20:30:bb:e8:09:a3:16:0e:12:df:f9:5e:50:ee:73:86:
         1f:4e:e2:fe:8e:dd:7f:b2:e6:ce:67:36:e1:89:5b:4c:1b:eb:
         c4:f4:1d:51:40:27:5d:34:dc:df:ac:be:51:20:75:a7:cc:3d:
         00:c5:cc:43:db:89:2b:7f:c3:e3:62:b5:30:e8:0f:4a:42:7f:
         d9:7e:17:75:4f:44:d3:17:97:f2:9d:e6:d9:7b:8b:6c:b5:42:
         7b:f5:24:6c:50:78:94:54:d1:e2:61:32:a9:fd:29:3f:ad:07:
         67:d6:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:01:53 2025 by rpki-client