Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File:                     3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier:          V/MTYy2g+dji2UhFfvNyRp816vHVZGHYkOkhHyRffH0=
Subject key identifier:   14:A4:3C:05:71:7B:34:4D:CD:4A:0E:2E:71:18:F5:4A:3A:B7:A1:68
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer:       /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial:       0196D5519AC8618122BE1B4731D9652BD891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number:          06
Signing time:             Thu 15 May 2025 19:00:17 +0000
Manifest this update:     Thu 15 May 2025 19:00:17 +0000
Manifest next update:     Fri 16 May 2025 19:00:17 +0000
Files and hashes:         1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: re9pPK0C1O/uHQAk5mqBHqWvncC5wy9Ft7zBzmpknmI=)
                          2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d5:51:9a:c8:61:81:22:be:1b:47:31:d9:65:2b:d8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
        Validity
            Not Before: May 15 19:00:17 2025 GMT
            Not After : May 16 19:00:17 2025 GMT
        Subject: CN=14a43c05717b344dcd4a0e2e7118f54a3ab7a168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:37:ec:6b:c4:82:26:61:ed:f9:f1:b8:81:
                    af:88:46:c7:f1:5c:02:94:f4:cb:b3:6d:ab:09:56:
                    4b:ae:7f:dd:00:fe:46:f7:31:08:ad:68:fc:ad:24:
                    a8:e4:7c:9c:96:3a:f0:4b:d8:3c:09:26:ea:bb:9e:
                    27:c1:7a:17:8f:a7:8d:38:02:93:63:0e:a4:18:9c:
                    73:8d:52:c8:e4:c5:2e:c2:e6:48:47:e3:c5:6a:8d:
                    a2:88:72:6e:55:a3:bf:6c:db:77:84:3d:4b:37:7d:
                    e8:1b:84:fe:19:fb:20:80:12:74:3d:72:75:a4:50:
                    52:8e:a0:ba:71:84:ca:99:eb:cd:01:f8:b5:67:5b:
                    83:72:1f:46:49:b1:68:f1:d2:1b:50:29:d5:cf:f0:
                    49:c3:a1:d6:39:6a:e0:3a:aa:3f:05:12:c3:0b:85:
                    2c:ba:1c:5c:c2:80:22:00:fa:67:ca:aa:da:53:64:
                    e4:ec:6d:11:7d:94:14:7a:13:83:b3:a8:8f:7e:fa:
                    b8:d2:f8:95:64:44:b7:26:06:3d:21:4b:51:96:88:
                    97:8d:a2:0b:08:96:da:5a:4b:37:74:e6:fd:81:2f:
                    f7:bb:c8:a4:3b:8b:ce:e9:27:85:e5:4d:f3:06:9d:
                    cc:94:5d:b7:de:7c:2c:fe:40:4b:6b:49:9f:e7:f6:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A4:3C:05:71:7B:34:4D:CD:4A:0E:2E:71:18:F5:4A:3A:B7:A1:68
            X509v3 Authority Key Identifier:
                keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:df:c3:7a:ac:6c:b4:23:f9:7b:c1:42:98:67:b0:c6:00:9d:
         d6:9e:dd:be:d5:16:a4:55:96:96:c8:52:ec:19:50:d3:ae:3d:
         ec:20:b6:53:1e:65:3a:98:79:f3:85:9d:a8:f5:f8:82:d2:8e:
         c3:e8:55:15:16:7c:8f:04:08:11:ec:c2:e7:8d:56:74:ce:1d:
         9b:09:fd:ea:39:5e:02:fe:cd:fb:a8:d4:2b:b2:4a:87:b1:70:
         7b:ab:24:05:01:13:da:ba:81:53:03:34:b9:4c:79:34:7b:6c:
         de:5c:3b:88:43:c9:d0:21:5c:2e:91:f6:c1:d9:ac:35:93:ca:
         0d:4e:99:0f:a8:fa:78:fc:eb:ef:3b:98:d6:21:59:65:5b:66:
         cf:85:91:44:d2:d6:60:71:66:dc:a7:da:c9:75:76:5c:2f:22:
         b8:94:ef:70:c5:e2:10:46:5b:6a:b4:a1:58:2e:41:55:99:71:
         f4:f1:b5:f1:64:00:ac:ee:a8:f8:f4:9e:5c:cf:89:4b:1f:74:
         74:23:3f:45:11:69:67:1a:4f:d7:80:5a:31:a6:86:62:30:43:
         ad:fa:ec:7a:e6:f4:05:15:ec:3b:d6:76:c9:c9:43:ce:4c:93:
         e6:e3:b6:85:38:43:f5:68:83:d0:25:94:b7:ed:af:2d:a7:cd:
         c5:7c:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:03 2025 by rpki-client