Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          7fqIS5GOTiKcU69bgAcnpW0fT4kolIRDV409fmPaWl8=
Subject key identifier:   28:85:12:C6:31:62:41:88:95:3F:EB:7A:5E:1D:85:E0:C7:F4:EA:3C
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       0196A088A9E12AB3DD7D817B7449EE4DA818
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          1536
Signing time:             Mon 05 May 2025 13:00:32 +0000
Manifest this update:     Mon 05 May 2025 13:00:32 +0000
Manifest next update:     Tue 06 May 2025 13:00:32 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: +G9iuTZkKenuuD78eKrAodeYSHhhrxnbD0bDHHOwPYw=)
                          2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=)
                          3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=)
                          4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:88:a9:e1:2a:b3:dd:7d:81:7b:74:49:ee:4d:a8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: May  5 13:00:32 2025 GMT
            Not After : May  6 13:00:32 2025 GMT
        Subject: CN=288512c631624188953feb7a5e1d85e0c7f4ea3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:e0:b9:14:bb:b7:75:ba:8d:49:03:e5:52:
                    39:32:ca:d1:cd:af:0f:01:f5:fe:1d:4b:65:9e:76:
                    5b:2b:2a:c8:d5:4e:c7:ee:de:ee:f7:29:28:0c:04:
                    d9:96:ed:9e:ea:ee:e6:91:8c:39:f2:63:67:ce:a9:
                    3b:fe:d5:d7:af:2b:1b:aa:e9:45:3f:3d:71:4b:af:
                    46:cc:b7:f0:75:ca:dd:a7:ca:87:41:b1:25:07:38:
                    34:7b:c1:87:53:9e:51:36:50:5d:d0:85:41:1f:cf:
                    3c:49:36:85:a5:1f:98:86:42:ed:8e:65:15:07:8a:
                    7d:4b:1e:7e:92:e2:b7:4c:30:fa:ab:a1:c3:28:a9:
                    3f:0a:bc:a3:2d:1a:cd:79:4f:c1:ea:18:b4:de:ec:
                    a5:1d:59:c3:f7:24:bc:6a:1f:25:f9:00:77:5d:23:
                    82:eb:a2:7e:d8:8e:b2:c8:9e:5a:d8:bc:c6:8d:70:
                    7a:91:8f:3f:00:bd:4d:8b:53:d3:c0:61:a7:fa:fc:
                    91:0f:18:4d:d6:d7:c1:78:74:1a:57:31:ff:df:8d:
                    7c:91:e6:91:ea:f4:32:6e:1a:97:92:b9:44:57:83:
                    a9:cd:9b:eb:3a:f7:5c:2b:34:2b:ae:a7:a2:c6:71:
                    b9:78:2b:5a:5d:29:c7:de:0f:d4:68:58:98:e3:0e:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:85:12:C6:31:62:41:88:95:3F:EB:7A:5E:1D:85:E0:C7:F4:EA:3C
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:84:29:8a:51:05:b0:80:c9:ce:56:26:9b:00:f5:b6:0a:
         fd:83:44:ad:a7:b4:e9:c9:be:7a:51:f3:0b:eb:c8:47:cc:ae:
         0d:7e:b2:da:cc:c6:69:67:8a:f0:95:34:7a:f2:3f:60:6e:4a:
         69:53:89:b0:7f:3b:ec:6a:ed:c1:0c:d6:53:84:99:56:ff:37:
         57:e1:16:20:78:0d:40:d0:30:db:62:da:dd:ca:90:bb:b9:95:
         1f:a0:24:6e:b3:96:c2:cc:65:a9:96:56:95:87:eb:d0:5c:d8:
         01:ad:f1:7b:0f:4a:46:e2:0e:3d:e3:53:c3:68:5c:26:ee:0c:
         f2:c3:ec:18:9b:86:b9:b8:22:34:b1:f3:1f:7d:92:74:06:e8:
         8f:49:eb:c6:26:68:0e:15:d6:db:61:0e:96:ad:5f:35:a5:8b:
         43:5c:9a:91:da:ba:5e:e6:25:15:18:1d:2f:db:5a:0e:7f:cf:
         03:d1:11:62:17:db:9e:d1:22:f2:b9:cb:e5:e1:92:b6:04:64:
         28:e9:12:cb:03:35:f4:b6:65:e0:77:1f:41:90:45:5b:30:c6:
         0d:e7:02:48:22:be:8b:08:aa:f2:61:74:8e:8a:56:bf:72:a5:
         23:b7:f1:11:1a:78:cd:ed:56:67:44:2b:57:d3:e1:79:d1:b4:
         1a:46:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:51:13 2025 by rpki-client