Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File:                     t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier:          3fbk2ddN4rd3I5AVqehDAeOZJqUZUhCvLZQ1FIJg/BU=
Subject key identifier:   81:C9:66:79:8D:81:B3:DD:4B:15:A5:AB:F8:AE:6D:75:A8:F5:24:12
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer:       /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial:       0196C427C0DE8678A0983FD9EE26A09F5394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number:          1546
Signing time:             Mon 12 May 2025 11:01:01 +0000
Manifest this update:     Mon 12 May 2025 11:01:01 +0000
Manifest next update:     Tue 13 May 2025 11:01:01 +0000
Files and hashes:         1: 5u8coXS2L7jFRThHfB77uIc4NNI.roa (hash: 7eehYagAlN3yFJLLgyiJoH0sdJb5Ul8pcLa6KTeR8yo=)
                          2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: 4zHggQxR+RLkjYhWOHDFlADTr31vsV3tdRPO5iPNnXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:c0:de:86:78:a0:98:3f:d9:ee:26:a0:9f:53:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
        Validity
            Not Before: May 12 11:01:01 2025 GMT
            Not After : May 13 11:01:01 2025 GMT
        Subject: CN=81c966798d81b3dd4b15a5abf8ae6d75a8f52412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:bd:70:da:df:0b:fd:e8:e1:b7:2e:04:6a:
                    e4:8b:21:f5:d6:bc:be:c1:49:de:8e:b0:83:30:78:
                    99:a6:1e:50:17:e3:9d:35:e9:99:fe:96:4a:c5:81:
                    03:24:82:61:42:60:08:77:13:0d:6d:68:1d:7c:b1:
                    e0:6f:8d:b4:4f:b3:af:3a:6c:c8:98:0b:9f:15:76:
                    dc:3e:2a:16:c1:c5:68:5f:d0:3d:ba:f8:ae:ff:1b:
                    00:53:b4:37:fe:ae:8d:45:17:8e:17:fb:6e:96:6b:
                    ce:69:04:1c:94:37:d1:f6:6d:77:15:74:c2:5b:76:
                    34:00:11:01:8f:5f:4b:83:de:73:15:3c:fd:2a:ad:
                    77:89:2c:ad:f5:47:d3:14:70:bf:96:b6:a2:bd:90:
                    b8:bf:8f:fe:ad:fb:56:dd:93:8f:ca:6e:99:a1:f4:
                    11:de:b8:b6:be:f6:9a:37:0d:d6:b4:41:57:2b:fc:
                    53:b3:a2:85:2b:4b:8f:86:b6:d5:43:67:64:a4:5b:
                    c0:37:43:21:ec:55:09:de:d3:50:17:fe:b2:2e:98:
                    36:f1:1d:1d:b2:d5:7e:60:f5:e3:40:ec:e7:15:72:
                    b3:60:dc:e5:6d:06:79:7e:2d:14:69:71:30:50:a3:
                    32:9f:4d:c0:51:be:c9:58:ff:40:ac:9d:69:7d:45:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:66:79:8D:81:B3:DD:4B:15:A5:AB:F8:AE:6D:75:A8:F5:24:12
            X509v3 Authority Key Identifier:
                keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:ba:2c:aa:c1:4a:b0:cd:28:01:54:f5:4a:0b:53:8d:52:
         79:19:d4:0a:af:46:2e:39:96:f1:2d:9a:55:bf:84:49:c4:aa:
         2b:38:b4:e5:8b:03:e5:e2:9b:90:35:d4:55:0a:8d:56:4c:32:
         14:b0:3f:e7:d3:c7:f6:34:3b:1e:8d:23:88:f9:40:15:90:b9:
         63:22:44:80:65:2d:27:20:4f:da:2f:79:9a:ad:cc:c6:e7:e2:
         10:ec:16:7b:84:22:6f:9a:f5:26:78:d5:fc:d5:1f:e9:8e:6e:
         b8:44:1c:eb:a6:12:dc:36:20:f3:bf:36:2b:dc:94:09:28:bd:
         28:4f:35:ba:62:10:1e:97:86:57:dd:57:11:87:57:1a:f9:74:
         9b:f2:2a:3a:3d:c1:b8:2a:9d:31:9a:cd:1b:9b:50:57:9d:01:
         9f:ef:a5:4f:e6:c1:1d:a6:24:e0:f3:98:f3:e4:63:41:f1:6b:
         07:99:9e:90:ae:d5:0c:fa:9c:78:c4:97:88:08:4e:89:cd:2a:
         29:b1:38:1c:c6:a2:05:49:a1:3c:84:4a:c4:41:e1:6e:7f:35:
         36:59:5d:83:60:8c:03:18:4f:00:09:a1:39:88:31:7c:d8:5a:
         66:41:58:68:19:27:f8:f6:c3:a1:9a:a1:68:d1:d6:f0:7f:89:
         a2:a7:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:42:16 2025 by rpki-client