Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File:                     F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier:          y9AEa/ZxNXCkP0NQORQ5QN3kMpsl0GpAaIKc5mXRlpU=
Subject key identifier:   12:34:FE:FD:3D:36:69:28:27:95:13:CB:38:66:AA:32:0E:87:B9:1B
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer:       /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial:       0196C83B1FCB51EE5C650431E6E91FA9B4AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number:          0D97
Signing time:             Tue 13 May 2025 06:00:39 +0000
Manifest this update:     Tue 13 May 2025 06:00:39 +0000
Manifest next update:     Wed 14 May 2025 06:00:39 +0000
Files and hashes:         1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: nXUmqkI2TuDD70pagw+JTf8hZv5okpDNxaAoSRZZh5E=)
                          2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:3b:1f:cb:51:ee:5c:65:04:31:e6:e9:1f:a9:b4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
        Validity
            Not Before: May 13 06:00:39 2025 GMT
            Not After : May 14 06:00:39 2025 GMT
        Subject: CN=1234fefd3d366928279513cb3866aa320e87b91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:9f:db:9e:49:90:55:2a:7c:e3:8d:7d:3b:
                    ab:0c:c6:4b:ae:cd:92:a6:c3:b4:01:7e:6f:4c:1f:
                    63:32:53:c1:0b:51:86:0b:7a:14:67:0b:2d:11:01:
                    03:cf:f3:28:7e:0e:b6:1e:20:23:2d:47:1e:07:79:
                    04:8a:8f:bd:2b:58:82:40:23:3c:ae:09:dd:33:4f:
                    19:c0:72:c9:e1:f6:c5:2e:f3:13:11:44:9e:95:ab:
                    1f:f0:fc:c8:63:fb:a2:8f:4c:c5:16:35:da:58:92:
                    c9:69:4e:53:82:ab:b5:56:33:1f:8a:ad:c3:53:5d:
                    49:d7:d0:38:f9:13:91:22:30:4a:5e:84:d2:31:c7:
                    3d:45:be:ed:a4:40:10:63:9a:31:e9:bb:96:7a:97:
                    8c:3b:40:0a:45:8e:f2:94:a8:f3:0b:37:47:95:8d:
                    4c:ec:1b:8d:f5:52:74:b9:1a:fd:94:8b:d4:99:77:
                    1d:b3:3f:40:31:47:7e:be:d6:cd:c5:e6:c7:42:f9:
                    81:12:87:d2:38:38:3d:96:d3:96:ce:a7:e2:f4:05:
                    94:38:e3:51:7f:0c:40:05:3d:2e:5c:34:57:3e:6e:
                    c9:56:92:9c:9b:9b:80:84:ce:e0:b5:3f:69:04:b4:
                    61:83:17:a0:1c:d4:10:aa:60:35:4c:3a:ea:a8:14:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:34:FE:FD:3D:36:69:28:27:95:13:CB:38:66:AA:32:0E:87:B9:1B
            X509v3 Authority Key Identifier:
                keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:45:6b:84:0c:3e:0c:77:18:c2:62:50:51:b5:3c:25:90:46:
         e3:cc:b3:25:b8:de:2b:23:2e:f8:8e:72:cd:06:2d:dd:e1:4e:
         2e:d3:36:c0:30:64:5b:76:0d:fc:1e:86:e6:f5:ff:6d:a9:e8:
         13:2b:86:eb:df:4e:97:d6:91:49:ea:b0:a2:cb:e8:02:a0:2d:
         5f:b9:3b:08:29:e6:55:8d:05:79:67:03:84:63:88:09:3f:6c:
         93:7c:15:d0:69:d3:9f:2f:b3:d7:74:b4:11:05:dd:68:f5:9f:
         42:e7:d8:40:e5:96:21:81:56:28:16:17:60:e3:f4:3f:5b:ff:
         8a:7f:50:25:6d:05:2d:57:89:44:b6:bd:e3:94:0b:f1:86:e1:
         dc:f0:84:ea:ee:66:ac:a9:b0:b6:68:a3:b9:63:fa:89:1c:79:
         2a:0f:29:c7:44:2d:4f:d0:d0:d7:d1:ec:21:c8:11:70:9a:86:
         81:ee:a4:1f:26:1b:38:86:2d:ad:5c:24:11:03:c7:ab:ea:fb:
         63:28:3a:31:1a:6d:fa:1e:35:e9:e3:44:ca:ca:66:27:13:04:
         2a:27:ad:08:96:61:a3:80:b8:f0:35:46:20:28:9f:29:bd:08:
         06:64:5f:d8:21:ba:26:62:18:e8:aa:6f:68:28:31:6d:83:22:
         b2:7e:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:21:36 2025 by rpki-client