Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File:                     3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier:          eJ0g6GEjnKBe46LgmZq1iEhLkANiiU5NA5nq57jyueo=
Subject key identifier:   FF:5E:09:E0:52:97:F9:D5:F5:F4:27:E5:6C:3F:13:69:D5:78:1E:38
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer:       /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial:       0196D7AE2F0AE49F042A474A027D789AA82E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number:          0C7D
Signing time:             Fri 16 May 2025 06:00:38 +0000
Manifest this update:     Fri 16 May 2025 06:00:38 +0000
Manifest next update:     Sat 17 May 2025 06:00:38 +0000
Files and hashes:         1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: XaZriH+EvMTOL5rbr62+Yl3uUSongb5sWY5XR3N5RvE=)
                          2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
                          3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:ae:2f:0a:e4:9f:04:2a:47:4a:02:7d:78:9a:a8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
        Validity
            Not Before: May 16 06:00:38 2025 GMT
            Not After : May 17 06:00:38 2025 GMT
        Subject: CN=ff5e09e05297f9d5f5f427e56c3f1369d5781e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:78:f9:d9:29:50:d2:0f:09:0a:a1:a2:4f:
                    6e:cf:8a:c8:8b:9a:a4:25:b5:48:fd:e7:a9:28:0e:
                    27:b0:be:85:a5:55:a3:fc:2d:4d:5c:81:86:f8:c9:
                    ca:99:91:c3:b9:ca:c5:06:16:6e:3a:29:e2:fe:03:
                    da:b1:42:10:50:c8:e7:45:b2:df:a3:f9:db:bb:3d:
                    7b:84:a7:fa:fb:eb:06:bb:ac:ff:1c:6b:7b:68:28:
                    4b:32:73:25:10:cd:41:f6:cf:cf:db:10:29:ab:1e:
                    67:06:8e:43:2e:21:07:8d:81:b6:99:54:29:07:9f:
                    0d:d5:c6:41:cd:cd:31:93:7b:16:b5:0f:0c:80:76:
                    99:8c:eb:82:59:fc:7d:cd:66:f7:11:54:79:8f:f8:
                    b5:98:7e:61:69:65:4d:04:2a:35:b1:cb:6c:1f:82:
                    7b:e1:de:16:1f:82:8e:d4:26:41:1d:0d:b2:29:67:
                    7b:a3:0c:37:a5:6f:5a:38:a4:97:c8:05:be:0c:65:
                    7d:0d:19:ec:2e:f1:29:00:73:60:d5:25:e0:1c:60:
                    68:1e:ff:d4:ec:d1:d9:21:de:17:42:8a:41:fd:2b:
                    67:ac:35:b1:ff:3a:d9:fe:88:5b:d5:a8:42:05:1f:
                    ff:67:89:59:1d:02:92:d1:47:a5:29:46:8e:f6:43:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:09:E0:52:97:F9:D5:F5:F4:27:E5:6C:3F:13:69:D5:78:1E:38
            X509v3 Authority Key Identifier:
                keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0e:4a:39:2e:56:f4:de:25:bb:4b:d3:a8:2e:62:aa:41:aa:
         30:7b:19:28:0c:87:92:f1:07:62:0d:24:ec:f0:d2:18:7d:48:
         18:26:46:47:a9:ef:54:0e:0c:54:e5:ed:a8:2e:96:d0:45:88:
         36:c5:e5:40:7f:fc:f0:3a:97:93:79:9b:e6:2c:55:49:37:4d:
         5b:cd:69:09:d9:fe:fc:0c:92:53:ef:52:e0:5a:fa:24:a0:4f:
         3b:11:8c:5b:26:3b:fa:1e:41:e6:c4:c9:df:82:32:8a:fa:2f:
         f9:3d:ee:ff:32:9b:60:5a:b1:a7:a8:c8:d6:97:d3:35:4a:da:
         e8:cb:de:6f:99:6a:40:ce:5b:f0:bc:6c:ed:87:c7:8e:e2:0c:
         c7:72:38:a6:11:cd:47:57:1b:d6:df:7a:5e:16:93:cf:2e:2e:
         02:86:86:2d:4e:6e:f8:3d:3d:65:fc:d7:1d:c1:a0:2d:7c:d8:
         d0:be:87:6e:4c:05:5e:2e:23:21:df:9e:b1:d0:80:30:c7:ac:
         85:aa:48:3e:9f:d9:94:2c:9b:f8:dc:55:d9:b5:5e:f1:57:4e:
         1b:43:54:ac:82:ee:25:d1:aa:1c:e4:9f:29:dd:86:bb:1e:7e:
         b4:a3:b9:9d:01:05:8a:3a:fe:81:d0:fc:14:0d:ce:38:90:e0:
         88:7e:46:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbXri8K5J8EKkdKAn14mqguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWEyNzQ0NDU4MjZlM2Q3OTVjM2VkMThjMjc3MDBlZWFj
MWNhNjIwHhcNMjUwNTE2MDYwMDM4WhcNMjUwNTE3MDYwMDM4WjAzMTEwLwYDVQQD
EyhmZjVlMDllMDUyOTdmOWQ1ZjVmNDI3ZTU2YzNmMTM2OWQ1NzgxZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oB4+dkpUNIPCQqhok9uz4rIi5qk
JbVI/eepKA4nsL6FpVWj/C1NXIGG+MnKmZHDucrFBhZuOini/gPasUIQUMjnRbLf
o/nbuz17hKf6++sGu6z/HGt7aChLMnMlEM1B9s/P2xApqx5nBo5DLiEHjYG2mVQp
B58N1cZBzc0xk3sWtQ8MgHaZjOuCWfx9zWb3EVR5j/i1mH5haWVNBCo1sctsH4J7
4d4WH4KO1CZBHQ2yKWd7oww3pW9aOKSXyAW+DGV9DRnsLvEpAHNg1SXgHGBoHv/U
7NHZId4XQopB/StnrDWx/zrZ/ohb1ahCBR//Z4lZHQKS0UelKUaO9kOHPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9eCeBSl/nV9fQn5Ww/E2nVeB44MB8GA1UdIwQY
MBaAFNyqJ0RFgm49eVw+0YwncA7qwcpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTIt
OWE4MjQzZTg0ZTU0LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTItOWE4MjQzZTg0ZTU0
LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw5KOS5W
9N4lu0vTqC5iqkGqMHsZKAyHkvEHYg0k7PDSGH1IGCZGR6nvVA4MVOXtqC6W0EWI
NsXlQH/88DqXk3mb5ixVSTdNW81pCdn+/AySU+9S4Fr6JKBPOxGMWyY7+h5B5sTJ
34Iyivov+T3u/zKbYFqxp6jI1pfTNUra6Mveb5lqQM5b8Lxs7YfHjuIMx3I4phHN
R1cb1t96XhaTzy4uAoaGLU5u+D09ZfzXHcGgLXzY0L6HbkwFXi4jId+esdCAMMes
hapIPp/ZlCyb+NxV2bVe8VdOG0NUrILuJdGqHOSfKd2Gux5+tKO5nQEFijr+gdD8
FA3OOJDgiH5GKg==
-----END CERTIFICATE-----
Generated at Fri May 16 12:15:46 2025 by rpki-client