Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File:                     Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier:          upjIBis34wZm+bVuf5TkknbtCJpESGY+CO4mItEK4/k=
Subject key identifier:   A4:9B:7C:15:CC:F3:B1:74:FE:9B:5A:DF:53:16:BD:9A:DE:8E:95:D5
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer:       /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial:       0196ABB12844C9D6DB8C0FFBB7A114FF7E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number:          0DD3
Signing time:             Wed 07 May 2025 17:00:36 +0000
Manifest this update:     Wed 07 May 2025 17:00:36 +0000
Manifest next update:     Thu 08 May 2025 17:00:36 +0000
Files and hashes:         1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=)
                          2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: uqcLVktMb23Yfet6qcT9mYG7yQzFtT740hbDNVyZf7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:b1:28:44:c9:d6:db:8c:0f:fb:b7:a1:14:ff:7e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
        Validity
            Not Before: May  7 17:00:36 2025 GMT
            Not After : May  8 17:00:36 2025 GMT
        Subject: CN=a49b7c15ccf3b174fe9b5adf5316bd9ade8e95d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:d0:2b:c0:55:e5:4f:95:08:93:db:83:36:
                    c2:1a:32:5f:e1:5d:f5:89:37:df:c4:81:fe:8d:df:
                    ce:10:38:22:3d:ab:c9:b1:43:d4:f6:82:53:5c:65:
                    86:18:9e:66:9e:2c:11:3e:4a:55:97:0c:29:48:8c:
                    80:f2:02:f0:88:b7:03:e2:bd:01:7f:ca:e0:e6:98:
                    fd:cc:98:45:47:9b:e3:74:db:1a:e5:60:eb:83:4a:
                    6f:ab:ca:ef:fe:e3:8e:21:53:e1:4e:b0:76:40:b6:
                    b0:44:34:be:16:7b:01:7c:c8:a9:b3:e5:4c:52:64:
                    41:00:e3:91:ec:19:5e:e1:0b:6f:b4:bb:7e:c2:26:
                    63:2e:be:ae:b2:9b:8b:70:9a:0b:dc:3a:51:ee:ed:
                    45:c3:d9:07:6c:cc:c4:8d:d8:e9:20:8a:f7:81:3a:
                    6c:0a:e7:22:f6:2f:49:08:74:87:14:a9:c0:c0:80:
                    fa:3d:82:b6:34:54:7b:08:0d:d8:33:94:c8:f4:38:
                    1f:02:16:8c:6e:31:49:e0:f9:f1:f0:6f:02:42:50:
                    4f:a8:09:ba:67:db:35:36:93:78:0a:da:14:88:f3:
                    54:7d:a7:df:91:b3:2c:21:d2:17:5f:c7:0f:4c:6b:
                    bb:c9:4f:cb:f9:dc:ba:ed:e2:4a:ac:1b:bd:7a:30:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9B:7C:15:CC:F3:B1:74:FE:9B:5A:DF:53:16:BD:9A:DE:8E:95:D5
            X509v3 Authority Key Identifier:
                keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:1c:f1:80:e9:c5:bd:2a:bc:12:45:91:ed:84:d9:63:94:
         bb:0e:39:0c:aa:71:b1:7a:8b:60:54:71:9a:31:59:6b:e7:83:
         42:4c:52:5f:bb:42:f8:81:a7:9f:8d:91:cd:a6:17:5a:8e:fb:
         2f:e1:bd:e2:15:ae:45:78:6e:75:6e:7e:8e:ea:36:ad:45:37:
         de:a0:54:56:16:c6:90:d8:c8:7b:98:ee:33:d5:99:27:20:3b:
         21:83:f4:6f:62:e5:d3:3f:40:f1:9c:a3:fe:c0:a1:00:5c:01:
         79:b0:26:b6:89:25:04:d1:2d:2d:2a:e3:26:d9:65:89:68:bc:
         26:2f:be:35:9a:b8:c7:1f:29:68:bf:8c:dc:30:71:27:91:1e:
         81:89:67:a2:65:4f:8b:a7:43:73:33:f5:a7:3f:c3:7d:fa:fc:
         8d:cf:b1:a0:a3:17:71:d9:fe:ae:c2:d6:0b:69:dd:00:d4:27:
         4a:ce:ea:0d:df:16:61:dc:7f:90:cc:15:25:f5:6c:b0:9e:56:
         f0:74:f7:c5:91:0b:b4:a3:2f:b2:80:88:f0:bd:f9:b8:b9:5f:
         dc:11:5a:96:81:5e:d2:97:c5:ac:ae:3e:c4:0e:94:ad:5f:ed:
         42:7b:a6:81:42:b8:d1:41:2a:31:fc:a5:b1:4d:9d:32:96:92:
         9c:91:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:31:46 2025 by rpki-client