Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File:                     3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier:          jMuVB1DyZ7kaUo6WNev2cpXAGIidYnVHCXO8yr+rQzA=
Subject key identifier:   F4:B1:FD:B4:47:51:B4:CE:DA:F0:39:4F:6B:9F:2C:76:A7:7F:9A:70
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer:       /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial:       0197B6A22551678BFDDA9D61BE7C8CED4A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 13:02:49 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:49 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:49 +0000
Files and hashes:         1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: m6F3T0BUaLsGlvvi1nnQoEko7w5rlcmMrhonv7/a/Ik=)
                          2: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (hash: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=)
                          3: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (hash: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:25:51:67:8b:fd:da:9d:61:be:7c:8c:ed:4a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
        Validity
            Not Before: Jun 28 13:02:49 2025 GMT
            Not After : Jun 29 13:02:49 2025 GMT
        Subject: CN=f4b1fdb44751b4cedaf0394f6b9f2c76a77f9a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:e0:f0:0c:72:20:6c:3a:07:31:8d:4a:3c:
                    22:5d:06:be:11:33:ef:48:64:ee:76:96:4d:ba:0d:
                    4c:1f:e2:66:3e:d0:f1:a1:27:26:eb:93:32:3a:78:
                    ab:15:40:08:d0:15:e2:a7:35:c3:06:82:ef:dc:02:
                    ae:14:97:4e:67:ac:9f:a1:ae:c1:00:eb:ab:d9:a8:
                    31:8f:18:69:65:51:82:c6:3f:d1:df:31:e0:73:c6:
                    8d:ef:ce:b6:11:1f:d0:a9:2d:1e:b8:11:4c:23:2c:
                    8c:05:d7:2f:cc:2d:67:13:50:f1:71:f5:bc:1d:0e:
                    9e:f2:55:72:35:74:14:2a:e3:5c:a6:91:46:8e:88:
                    20:99:26:2a:ca:b8:4a:8d:eb:e7:56:40:0c:c6:3d:
                    c5:52:29:5e:94:15:d3:f0:ca:cc:b3:60:9a:0f:bd:
                    41:2c:8e:33:86:23:f9:8a:e8:1f:5f:cf:a2:f6:8b:
                    da:c8:13:92:b0:86:16:8b:d6:cd:ed:51:6e:7c:c8:
                    7d:7d:2b:62:78:ce:34:cd:0d:d2:ec:88:c2:f5:20:
                    74:74:a3:a1:c6:23:b9:59:3d:39:63:63:8c:b6:e5:
                    9e:ea:bf:94:db:d2:c3:41:f6:c7:80:a1:d8:45:86:
                    8a:a2:01:7f:9b:12:ad:e7:d1:45:5c:88:b2:50:61:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:FD:B4:47:51:B4:CE:DA:F0:39:4F:6B:9F:2C:76:A7:7F:9A:70
            X509v3 Authority Key Identifier:
                keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ff:4e:85:24:ae:b2:56:3b:61:a4:77:b3:c7:7b:62:08:0a:
         4f:0f:d2:62:08:e9:1a:7e:9b:6f:3c:e2:88:74:9d:c6:50:83:
         67:77:a5:e0:c3:40:c7:8d:a0:ba:3a:db:86:dd:e0:3f:44:d1:
         3a:45:2b:76:e2:fb:9e:b1:e1:6f:44:0d:9c:17:ef:24:cb:41:
         0d:17:d5:36:b8:f4:cf:49:7a:3a:d6:b0:97:e8:64:fb:03:b8:
         9f:0f:a3:0c:b4:cc:a8:12:31:92:0d:6a:ca:76:40:1e:f0:52:
         f6:2e:c9:cf:68:57:e9:85:de:4c:8f:70:1d:aa:ed:3a:bd:f9:
         0e:a9:80:68:06:e9:14:03:89:fa:d0:26:10:5f:a7:6f:c2:e8:
         86:b7:f2:b8:79:75:a9:d5:3b:d2:d0:51:d8:91:07:61:60:58:
         af:b9:bf:22:2d:34:1f:3f:e3:5b:aa:d6:7f:06:fd:6b:52:e8:
         61:99:5a:e8:c7:4f:23:16:cb:45:16:ee:74:0b:f8:af:84:0e:
         90:c0:4c:56:0f:08:01:a0:2c:bb:e7:d3:2d:db:99:55:ba:55:
         a7:0e:b5:ba:f8:c9:a9:9e:a5:fa:ce:26:3d:12:26:d2:81:64:
         36:8c:5c:db:93:39:a5:3a:80:20:01:06:e7:23:eb:81:12:cc:
         9f:5b:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:23 2025 by rpki-client