Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File:                     3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier:          TOALnTWHL5G3fz7uhhFno9UgJLhiUSjsVR6+cR7X5II=
Subject key identifier:   F7:DC:DA:48:5F:E6:DA:AB:00:1C:43:C7:6D:91:CF:32:7C:A8:B9:06
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer:       /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial:       0196C6837387D2778C409D3544F3295845A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number:          0309
Signing time:             Mon 12 May 2025 22:00:25 +0000
Manifest this update:     Mon 12 May 2025 22:00:25 +0000
Manifest next update:     Tue 13 May 2025 22:00:25 +0000
Files and hashes:         1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: JP8w8hI7DJ+/H5nEXlo9MCtfeoF8yXsn0Lx5iz9oFhk=)
                          2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:73:87:d2:77:8c:40:9d:35:44:f3:29:58:45:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
        Validity
            Not Before: May 12 22:00:25 2025 GMT
            Not After : May 13 22:00:25 2025 GMT
        Subject: CN=f7dcda485fe6daab001c43c76d91cf327ca8b906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:27:69:08:27:bf:33:62:28:84:39:21:c7:
                    21:14:a8:65:1d:a4:e3:58:6a:1d:bf:d1:f1:23:4a:
                    9d:7a:42:64:57:5d:cf:65:70:bb:89:74:bb:35:b2:
                    4a:08:c1:82:f8:82:c8:5b:3c:bf:43:63:ae:58:c6:
                    ac:a1:e2:88:8f:13:86:5a:fa:a8:f2:d4:0a:31:34:
                    21:e2:f5:5a:7e:85:0f:d6:f0:5a:4b:fa:34:48:8f:
                    35:0d:bb:86:28:cb:3b:b7:ef:05:c0:72:a0:84:20:
                    7b:4e:31:74:3a:05:c6:62:15:8f:db:40:9c:94:af:
                    6c:24:fd:9f:56:4e:4a:14:13:e0:06:e8:72:46:af:
                    90:1d:10:ce:59:b9:31:a7:38:1c:65:80:8c:a0:c3:
                    3e:d3:ba:27:91:ff:5b:6b:53:a5:18:af:6e:f9:73:
                    fd:9a:50:29:7a:cf:44:f6:66:a8:ee:bd:a9:f4:df:
                    cb:44:0b:4c:75:b9:39:84:df:82:31:ce:41:5e:28:
                    2f:6a:74:1e:4a:e0:28:2e:82:a0:52:f8:b8:c9:79:
                    a6:1d:8a:de:90:d2:ad:54:86:60:ca:1f:84:b7:70:
                    d2:0f:87:61:a3:81:1a:97:e2:d7:4d:be:07:0c:ab:
                    f2:af:44:ef:40:a4:cd:72:63:12:c5:8f:a2:ce:77:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DC:DA:48:5F:E6:DA:AB:00:1C:43:C7:6D:91:CF:32:7C:A8:B9:06
            X509v3 Authority Key Identifier:
                keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:6a:a9:6e:61:5b:c2:a9:2c:31:f0:c6:1f:fc:4c:8b:3e:
         7c:df:a7:df:f1:af:9f:2e:05:61:8d:34:70:0f:65:7c:de:a5:
         c1:dc:78:ac:e3:40:63:81:28:38:28:f1:70:20:c1:5b:13:3f:
         7d:1e:7e:d5:1e:6f:69:4a:19:9b:f7:59:02:83:9c:97:ae:fa:
         e0:da:04:ca:8a:14:1c:6e:87:31:e9:93:f9:27:97:e0:56:b2:
         ca:0b:f0:45:1f:df:0a:2b:33:dd:37:0d:67:52:b2:87:af:f7:
         d6:cf:8b:39:d6:96:bd:a1:1e:e7:25:79:3a:92:98:e3:d6:bb:
         71:4c:06:70:c3:07:97:54:28:d7:fa:44:4b:ca:14:8e:18:91:
         00:58:db:f5:54:e2:5c:c7:64:54:79:8b:72:5a:32:a7:7d:88:
         e1:e9:06:4a:e3:f2:2f:5b:81:09:91:ca:ad:e3:19:6b:4f:20:
         d1:12:ad:b0:1e:39:81:91:ed:b6:11:26:09:0d:82:4f:cb:14:
         93:8d:29:d1:10:ed:25:1a:91:1b:d3:f9:3b:f4:11:ce:e7:41:
         8e:31:7a:b9:a8:56:32:fd:e4:b8:a3:88:d4:19:52:83:36:be:
         ba:03:e1:59:9c:ca:aa:8f:ab:82:1d:d5:df:c8:11:3f:93:2c:
         d8:1a:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:48:01 2025 by rpki-client