Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File:                     3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier:          3f+HQWLy1J/xmwdzcJ8yQaC/FwEctStRUYG+M98uZcM=
Subject key identifier:   7F:2C:0C:5E:FB:7C:9E:35:86:7E:0E:83:F3:C6:D6:B5:8D:6D:C1:73
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer:       /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial:       0197B820EFCCDFA477196CBA1A434B60937D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 20:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:55 +0000
Files and hashes:         1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: t7+hmnxFod+bPDpXtA8uktYNmPcAenVLLwhmxeFjvyA=)
                          2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
                          3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:ef:cc:df:a4:77:19:6c:ba:1a:43:4b:60:93:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
        Validity
            Not Before: Jun 28 20:00:55 2025 GMT
            Not After : Jun 29 20:00:55 2025 GMT
        Subject: CN=7f2c0c5efb7c9e35867e0e83f3c6d6b58d6dc173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:e8:27:d1:d0:59:0a:e8:20:6c:47:9b:95:
                    bd:b9:b2:90:1f:d2:1a:f5:db:cf:d1:b6:57:32:e1:
                    11:50:b7:2b:d0:fa:ae:e1:66:3e:63:de:c6:73:d8:
                    c2:0b:78:ef:18:a9:b3:dc:2b:c6:0a:37:85:17:a3:
                    e0:d5:01:52:54:1a:6f:fa:fe:2e:05:c7:77:c3:25:
                    5a:7c:75:c5:ce:6a:71:73:b8:71:35:a6:89:14:40:
                    86:b7:41:7d:b0:1a:30:37:dc:ce:56:78:de:ad:53:
                    30:ba:f7:f2:e4:16:53:06:10:01:ab:9c:03:15:7a:
                    04:31:ec:d4:c2:29:7d:53:87:ec:73:61:90:98:24:
                    28:b5:b7:0f:36:0c:55:5f:7f:7a:e0:0c:1a:00:f0:
                    da:83:95:e6:30:7a:c0:f3:14:5e:30:8d:28:f7:2a:
                    3e:8b:86:3a:be:36:2a:da:28:75:9d:74:5a:bf:64:
                    70:d6:6f:bd:56:c3:d5:23:b1:2e:19:be:8f:ec:5a:
                    05:49:26:2a:3f:cd:ab:c3:26:77:0c:2a:e1:6a:8f:
                    92:4b:e0:90:b4:a5:f6:44:dc:7b:e4:4d:c4:a8:73:
                    61:9a:f1:1f:d6:f8:7b:24:c9:d8:95:69:99:0a:5e:
                    82:5c:04:7e:e7:d0:18:9b:ef:fe:68:34:42:5d:3d:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2C:0C:5E:FB:7C:9E:35:86:7E:0E:83:F3:C6:D6:B5:8D:6D:C1:73
            X509v3 Authority Key Identifier:
                keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:29:42:d4:d5:e6:f0:d4:b2:6b:8f:5b:d2:bd:cd:fa:ad:8c:
         7e:cb:78:f0:8c:93:8c:c4:a4:d8:14:94:4a:31:aa:d0:c0:b5:
         c2:5d:b4:06:99:82:4d:a2:21:22:6d:9e:a9:da:e1:de:35:d7:
         21:2d:e0:0c:02:93:29:e6:ce:4f:65:50:91:16:3b:30:5c:a1:
         a3:88:de:0e:bd:82:25:37:e1:00:a5:86:bd:7a:09:4b:ac:e7:
         cb:b0:b9:1e:6c:c8:34:40:51:54:13:12:f7:a4:bc:3a:b5:9e:
         fd:c5:af:51:30:78:c8:66:c1:45:69:76:b1:66:35:da:06:b9:
         5e:2d:a7:d5:45:47:b6:50:ea:c2:01:4d:ec:6f:1c:49:22:b3:
         ec:ab:d0:23:b9:e4:99:35:27:ec:98:f8:15:c0:d6:78:ad:75:
         93:b1:62:c6:68:d0:50:20:3d:b6:84:38:71:b6:a1:d1:be:04:
         a1:9f:a0:b3:9e:0b:a3:ac:18:8f:af:7b:c2:de:0e:1a:bc:cf:
         54:90:d7:95:5f:fa:20:1e:2d:84:e5:77:df:d1:31:e0:fa:92:
         91:61:56:25:13:03:d9:73:6c:02:9e:aa:6f:a3:ad:0f:45:5a:
         56:70:e2:5a:b3:d6:b2:53:82:48:76:67:87:54:9b:11:42:21:
         cd:cd:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:54 2025 by rpki-client