Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File:                     3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier:          YA0HzepCXw8QlRJpL1gbJhId5bExvbaY1seg5nwl4D8=
Subject key identifier:   0D:2A:8B:61:FA:1B:22:BC:AA:42:A0:23:7B:D2:5E:24:3A:8D:48:83
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer:       /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial:       0196CCF380161CA85ECACA8AE37ACA6D03CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number:          1491
Signing time:             Wed 14 May 2025 04:00:32 +0000
Manifest this update:     Wed 14 May 2025 04:00:32 +0000
Manifest next update:     Thu 15 May 2025 04:00:32 +0000
Files and hashes:         1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: DCoQ1h81yp97e5hITnTmfPIFKQMaonCfsOJjn4aXXMo=)
                          2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
                          3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
                          4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f3:80:16:1c:a8:5e:ca:ca:8a:e3:7a:ca:6d:03:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
        Validity
            Not Before: May 14 04:00:32 2025 GMT
            Not After : May 15 04:00:32 2025 GMT
        Subject: CN=0d2a8b61fa1b22bcaa42a0237bd25e243a8d4883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:31:a7:8e:3b:48:38:1a:27:d1:af:e6:a2:
                    b8:9f:d2:cd:07:26:5e:65:79:83:e0:b0:19:df:44:
                    a4:8d:79:4f:9a:ac:2d:79:f1:0b:6c:64:23:58:d3:
                    1c:17:a4:ea:3a:75:00:0c:77:de:56:6d:92:91:98:
                    e8:79:00:67:aa:45:25:56:1f:62:8b:0a:14:89:ba:
                    3d:7f:28:2b:ee:fa:52:e2:17:ee:97:72:f6:3f:3d:
                    4e:18:7c:42:87:6b:9a:1c:fe:75:03:6b:d9:32:5e:
                    51:31:30:6c:a8:3c:a1:0f:22:76:df:4d:5a:ff:7c:
                    fd:8a:e2:1b:a6:4f:bc:ab:65:da:a3:14:cc:b1:22:
                    f3:22:ba:4c:46:9a:63:11:72:90:06:2c:5a:7d:31:
                    29:6e:d9:8d:80:b6:d1:6a:bd:0e:4b:51:92:b3:22:
                    e4:51:ac:a5:77:a3:76:97:cb:06:9c:aa:f2:2a:57:
                    8b:20:8a:95:76:a1:6d:b9:4f:83:08:a5:12:f3:ec:
                    68:8a:5f:fb:bd:11:4d:24:be:91:4f:e4:ce:46:73:
                    d2:6d:e3:bd:30:c1:0c:10:f4:87:48:ea:2f:fb:06:
                    d8:81:bb:e2:93:05:1a:e2:16:5b:dd:66:3f:ec:86:
                    22:14:cd:4c:1a:db:34:44:77:c2:9c:c6:15:8f:12:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:8B:61:FA:1B:22:BC:AA:42:A0:23:7B:D2:5E:24:3A:8D:48:83
            X509v3 Authority Key Identifier:
                keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:96:f5:69:af:62:77:e5:c1:30:ad:be:bb:9e:e5:37:73:51:
         bc:e6:dd:36:25:d5:15:ce:36:40:fd:cf:b1:7a:b9:52:ca:9e:
         f2:42:a3:d4:84:a5:b5:dc:d4:85:fa:cc:9f:3e:10:97:e4:e5:
         21:f6:d7:78:15:99:fe:e7:4d:16:48:7f:d4:53:7d:3e:d7:49:
         f1:29:f2:61:ad:9f:38:f7:94:8a:0e:41:01:d3:5b:72:52:f0:
         b7:68:26:e3:b9:45:cc:55:46:06:ff:a7:b8:c9:78:e7:78:64:
         a7:62:31:8b:af:7e:79:10:97:05:19:ee:a9:dc:f2:8a:ff:55:
         9f:ce:83:a3:7e:42:db:bf:57:d5:1d:c7:9b:e3:57:e3:64:a3:
         eb:44:3a:99:bf:69:9f:d0:d4:5f:7d:a2:29:bd:3a:1a:45:b9:
         29:f2:45:bb:7f:b3:e8:7c:f1:af:3a:90:a7:e1:b3:1c:29:ab:
         49:f2:80:d4:7e:5a:f6:ac:95:2a:1e:4e:74:db:da:55:8e:a2:
         40:86:92:61:a8:00:1d:90:52:74:cf:72:e8:03:6a:44:f9:e0:
         be:7f:84:23:01:b6:a3:5e:1c:0b:d7:64:e8:b1:ab:4f:fe:c9:
         74:ac:b8:57:e0:c2:fa:fc:d6:13:7c:62:49:09:6d:20:c8:37:
         0d:c5:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:19:57 2025 by rpki-client