Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File:                     _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier:          emNsxeLqIHnkezH95eCCeqnorklL2go/8wE35OUxXRg=
Subject key identifier:   AC:35:8D:10:9B:52:ED:BE:C1:21:B8:E1:8B:D0:BC:77:23:50:BB:5A
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer:       /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial:       01969D19DB4D33B256B6089CAD48E326BB79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number:          03A0
Signing time:             Sun 04 May 2025 21:00:39 +0000
Manifest this update:     Sun 04 May 2025 21:00:39 +0000
Manifest next update:     Mon 05 May 2025 21:00:39 +0000
Files and hashes:         1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=)
                          2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=)
                          3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=)
                          4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: RL9KtaDlxWfb94b6Q17xuU68VVcg4g96sxie10MYTS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:19:db:4d:33:b2:56:b6:08:9c:ad:48:e3:26:bb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
        Validity
            Not Before: May  4 21:00:39 2025 GMT
            Not After : May  5 21:00:39 2025 GMT
        Subject: CN=ac358d109b52edbec121b8e18bd0bc772350bb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:e8:e9:69:fb:6a:45:68:db:ad:33:d3:b3:
                    54:c3:3d:38:79:37:24:6e:89:54:3d:57:06:c4:4b:
                    2d:b2:16:77:4a:a1:12:c2:f5:b9:db:99:e7:d2:5d:
                    d7:20:ab:b7:7b:10:21:f4:06:91:a3:a9:13:5a:5f:
                    1c:9f:96:3e:bd:f8:63:05:92:5b:08:c7:fa:bf:3e:
                    c2:c0:7a:73:c9:a5:a9:01:cb:26:f7:73:bd:8f:fc:
                    a0:29:03:44:c6:70:6b:4f:d9:d2:df:74:1c:09:7b:
                    7f:0a:8e:8e:96:e2:a0:54:fd:dc:7f:d9:d2:3e:3a:
                    3d:39:27:c5:9c:02:6b:92:c6:68:67:42:01:10:2b:
                    32:36:ac:cb:18:54:19:b6:8e:46:fe:c1:15:fd:2e:
                    de:2f:a8:40:3c:7c:9a:a9:00:15:60:c7:b5:af:d9:
                    74:37:a6:ad:65:a6:a6:b7:ec:e0:71:d2:ec:6f:7f:
                    a5:b9:47:f8:02:70:e4:2d:90:a9:58:a7:7b:1d:54:
                    ae:89:3b:b6:82:b3:40:5b:92:c2:eb:cb:a3:d3:8a:
                    eb:bb:2a:d8:ac:86:8e:ed:08:7d:2a:ef:c5:ef:25:
                    8a:f4:cc:9e:ce:73:25:ca:ec:3d:38:8e:c0:3d:49:
                    32:84:ee:e6:0e:aa:94:37:e3:f4:af:8d:18:a9:48:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:35:8D:10:9B:52:ED:BE:C1:21:B8:E1:8B:D0:BC:77:23:50:BB:5A
            X509v3 Authority Key Identifier:
                keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:88:a8:61:1e:74:0a:b9:9a:bd:dd:0f:ca:21:e5:3e:d2:36:
         37:95:ce:07:51:33:2f:c4:67:82:f4:6c:f9:8a:fd:c0:77:e5:
         4d:48:b8:31:31:8f:de:d8:35:7d:44:90:38:4c:84:cd:ac:19:
         06:51:be:e0:4d:16:97:91:09:54:f1:12:ab:b4:e9:42:9d:ec:
         5c:96:b5:d5:a1:99:75:da:9e:d2:42:59:05:76:63:02:e1:ce:
         34:54:9f:92:56:64:12:4a:cc:97:5a:09:8f:d7:09:19:3c:96:
         bf:ab:f6:81:4d:b5:db:a2:38:12:f5:8f:1d:f3:da:fa:35:64:
         13:6f:d2:18:8a:90:3f:18:96:45:3b:8d:04:3b:80:16:6e:c4:
         b4:df:8d:3f:09:84:db:cc:5e:89:41:56:26:83:ea:9b:c0:ba:
         c3:44:21:07:d2:bc:eb:43:e2:71:19:4a:10:ec:8e:ac:56:01:
         f6:f8:93:9a:a7:44:0b:8e:8c:a5:52:37:6a:44:a5:b3:6b:8d:
         a3:a8:80:fb:17:5f:0b:8b:19:ab:39:e6:76:c6:23:9e:3c:96:
         d3:c1:ec:09:94:77:7d:a2:b0:e8:3b:b5:6c:7a:7c:3d:0a:eb:
         01:8e:c5:e0:9b:00:3f:a0:13:5c:37:d6:75:a7:0e:eb:30:e0:
         0d:99:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:23:57 2025 by rpki-client