Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File:                     3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier:          2yYVpntdEHIvnRnL/xi15HSY4gRs07T50h1y9P4KGyk=
Subject key identifier:   6B:83:B6:9E:8A:A5:50:6C:45:C8:FE:B8:D3:85:47:BE:04:B5:6A:4E
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer:       /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial:       0196BCDBC75CC5C727DE6B5F8956F17EC1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 01:00:42 +0000
Manifest this update:     Sun 11 May 2025 01:00:42 +0000
Manifest next update:     Mon 12 May 2025 01:00:42 +0000
Files and hashes:         1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: pc/4ZphjArgpkZ3ysAkccLk+oSFWL/IngCEQwWnBqdo=)
                          2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:c7:5c:c5:c7:27:de:6b:5f:89:56:f1:7e:c1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
        Validity
            Not Before: May 11 01:00:42 2025 GMT
            Not After : May 12 01:00:42 2025 GMT
        Subject: CN=6b83b69e8aa5506c45c8feb8d38547be04b56a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:eb:d8:02:08:df:3f:1f:c4:f0:22:26:1f:
                    34:15:f8:c4:18:1c:8e:96:99:42:69:6b:d6:73:ca:
                    37:c6:4e:dc:38:a2:2b:fa:76:3b:26:63:82:1b:69:
                    b1:35:30:98:f5:26:bb:f2:1d:b7:aa:b6:0d:5f:20:
                    00:0e:45:ab:2e:c2:df:98:26:29:09:bf:e9:39:f1:
                    a8:35:28:45:08:2f:5a:45:5a:3f:8d:02:e0:bb:a9:
                    3a:00:f1:f8:07:c1:d1:63:6a:2e:86:80:a9:9f:85:
                    8a:7b:c1:ed:d0:25:2e:0b:14:c7:e3:a0:8c:98:a6:
                    8a:0c:a8:84:44:2b:92:4d:71:a6:f6:8f:05:20:d1:
                    06:5a:26:76:ed:26:c1:e8:dc:df:31:85:0a:18:4f:
                    73:18:30:2d:7a:82:24:ad:c8:06:d2:91:7c:56:69:
                    b4:8b:ec:8d:db:e1:ae:76:9f:65:a4:4c:80:20:02:
                    2f:ba:05:0a:c5:09:fd:31:41:22:e9:54:c3:8b:16:
                    75:5d:f0:91:d5:82:ff:d1:80:48:7e:11:f5:8e:a1:
                    1d:f6:73:60:5d:2d:b2:14:6d:ac:56:86:1a:9d:b4:
                    9f:72:3b:3f:75:0f:57:6f:f7:43:6b:9a:88:44:70:
                    90:9d:e5:83:f3:0b:07:e5:28:c3:96:7b:ec:c3:be:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:83:B6:9E:8A:A5:50:6C:45:C8:FE:B8:D3:85:47:BE:04:B5:6A:4E
            X509v3 Authority Key Identifier:
                keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:3a:d6:b1:27:44:87:f7:20:71:31:f8:16:46:73:d0:6a:
         6d:8a:b9:69:02:bc:c3:79:ea:e3:72:7e:5e:37:37:a6:99:2b:
         42:68:3f:4a:f3:34:cf:d0:93:a6:50:c2:c1:e4:da:9a:26:53:
         06:5c:6c:5d:26:67:8d:73:74:8b:92:c6:02:9e:6b:56:8f:b2:
         03:61:11:d8:a8:87:8e:0e:b6:9c:5f:22:00:d1:f5:71:93:86:
         21:46:29:21:34:a8:0d:d1:3e:2a:15:5e:44:db:61:43:6a:a2:
         9e:8a:a9:d5:2f:d1:96:60:3b:2c:19:28:d8:ea:f6:60:02:c1:
         9a:01:6e:f0:d2:1b:8b:13:61:b9:93:3f:69:28:56:4c:a3:d7:
         48:2b:1b:8a:74:d7:d9:e4:f1:98:85:0d:8d:a9:9f:f7:fc:7a:
         ea:87:e4:7e:05:32:81:ee:e6:b1:45:69:80:b4:29:c5:e8:1a:
         48:cb:c9:fa:3f:96:f5:59:7c:01:dc:f4:b2:2e:92:92:6a:83:
         87:0a:2a:c1:76:d2:e6:05:bd:ef:54:16:b2:23:17:34:f2:4d:
         dd:32:0d:13:e0:0e:29:fd:9a:09:b0:44:94:0f:a6:c2:4e:56:
         6d:d8:dd:be:9b:df:19:d5:b5:03:7b:b9:5b:2f:b7:1c:98:3b:
         d9:1d:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:26:58 2025 by rpki-client