Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File:                     3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier:          F5FiCwLg+7rxVgjNh5a8HjKYhrnxNZoKDMXgXErLS1U=
Subject key identifier:   B7:4B:BE:32:88:3D:B6:AE:57:4E:CE:E7:BC:B8:B6:A6:42:80:64:33
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer:       /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial:       0196CE064A6A6BAD1577D54FED8028AC0F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number:          11C5
Signing time:             Wed 14 May 2025 09:00:40 +0000
Manifest this update:     Wed 14 May 2025 09:00:40 +0000
Manifest next update:     Thu 15 May 2025 09:00:40 +0000
Files and hashes:         1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: TxpgjGLLbzqw+9Y5hiV2wruG5VG7pXTltlRhRcbAxmM=)
                          2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:06:4a:6a:6b:ad:15:77:d5:4f:ed:80:28:ac:0f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
        Validity
            Not Before: May 14 09:00:40 2025 GMT
            Not After : May 15 09:00:40 2025 GMT
        Subject: CN=b74bbe32883db6ae574ecee7bcb8b6a642806433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:f3:b5:6e:ef:49:12:00:9d:bd:a9:89:10:
                    1d:31:4f:19:6b:a8:98:46:94:ef:ec:cd:a0:b8:0f:
                    22:8f:60:58:8a:36:e2:6e:f7:61:d8:ee:b2:92:f9:
                    a3:f1:1b:d3:e2:f5:1e:e4:78:d1:36:53:91:91:c4:
                    9f:f0:e3:c1:e4:95:4a:c6:a3:cb:43:4f:f5:23:2b:
                    3b:4d:ba:6c:58:26:57:f3:48:c1:c0:78:3c:4b:da:
                    17:7c:0e:99:42:df:0c:c8:42:76:f9:99:5a:ed:ff:
                    a7:cc:b8:7a:4f:e3:0b:1f:cf:94:18:21:2c:cc:e9:
                    28:ab:65:ae:36:6a:b8:a3:03:60:1e:e0:de:85:c3:
                    1e:a0:03:03:61:24:d8:cf:a7:7a:5f:12:cf:70:4f:
                    f3:be:24:e3:fa:b6:06:89:6e:08:b5:e0:ae:0e:22:
                    a8:85:37:55:d6:9d:38:e8:18:2e:49:b8:17:b7:46:
                    d7:2c:eb:bf:f5:9e:bf:b9:6b:1e:33:83:3b:ef:bc:
                    58:aa:d3:07:8f:7c:74:e4:c1:33:68:eb:6b:7d:aa:
                    df:2b:1f:50:44:d6:69:ac:15:84:c9:3b:ed:cb:08:
                    89:1a:65:8d:ae:89:d4:cb:81:64:10:8d:e6:dd:17:
                    c0:4f:5b:f1:0e:d8:2d:21:f9:ae:b1:00:b2:25:7d:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4B:BE:32:88:3D:B6:AE:57:4E:CE:E7:BC:B8:B6:A6:42:80:64:33
            X509v3 Authority Key Identifier:
                keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:ba:a6:64:b1:de:5f:e6:f2:c6:e8:64:2d:11:ec:29:42:
         99:c9:a7:f3:90:70:eb:da:ae:08:bc:67:fd:21:d4:a3:b9:aa:
         56:3f:9f:99:6f:03:ab:b0:55:20:ca:ff:34:60:be:4d:97:eb:
         fa:2a:93:8c:71:80:0a:30:e7:03:13:77:10:c7:98:da:c0:d8:
         b1:cb:b7:1f:8b:d6:2b:42:48:67:cd:90:cd:7d:90:31:52:37:
         48:9c:09:fa:cc:2d:5f:bb:fc:2d:a1:91:16:5c:39:44:72:8e:
         50:f9:12:0d:6d:cd:63:91:bc:9e:10:6b:29:ca:9a:a5:98:62:
         ed:1d:cf:70:43:20:ff:a1:cc:35:53:64:b5:28:95:ba:f9:61:
         e1:1a:95:90:53:03:a8:bb:77:c7:14:e8:72:b5:e7:97:4c:92:
         ee:63:f5:f2:a9:cb:d8:eb:21:80:de:36:f3:7e:46:b9:37:e3:
         d3:23:21:d2:bb:a8:9a:0d:3e:49:ed:eb:e2:d8:7b:ae:3c:e2:
         1d:75:be:14:b2:f1:12:2e:10:af:84:12:d7:30:1e:e2:31:aa:
         99:ef:9e:00:e6:94:e1:df:49:10:78:b4:eb:cc:79:e8:00:cf:
         ba:d2:08:73:3c:1f:df:10:38:dc:e2:85:ce:0c:e1:cd:b0:c4:
         dc:1e:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:44:06 2025 by rpki-client