Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File:                     3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier:          BJ4nw+SGyBBXtk7XwEa2NmlOmp3K8qqLe4H+NkXJMLI=
Subject key identifier:   75:8F:0E:DE:C5:AA:00:06:CE:22:B1:75:2C:20:DB:D6:52:D8:80:3D
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer:       /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial:       0196BCA4C8269FC2D2EE0E3E6BFAF7600996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number:          154E
Signing time:             Sun 11 May 2025 00:00:37 +0000
Manifest this update:     Sun 11 May 2025 00:00:37 +0000
Manifest next update:     Mon 12 May 2025 00:00:37 +0000
Files and hashes:         1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: rFoVfiXEUlEl9zS/b9eCkqINKh/OcsXa9t2imcA2FKo=)
                          2: 7Dxx4GUfZshom9FbPHAxp-Z60ho.roa (hash: LXHxUD8d853bp48Kp4bHizsdXxzmRHG+cP9w4z3LY9k=)
                          3: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
                          4: dbK-R91ZSUb0vmB9yu9XwDJ_RDw.roa (hash: YNxHBvfEGT+DFTrI9P9oVpm7y0mnqXQpEkbudzfn+nA=)
                          5: m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa (hash: aOHIBtHSW3A5XSJ7tUzd+YLEbCI85PGx7m5TzFvcEu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:a4:c8:26:9f:c2:d2:ee:0e:3e:6b:fa:f7:60:09:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
        Validity
            Not Before: May 11 00:00:37 2025 GMT
            Not After : May 12 00:00:37 2025 GMT
        Subject: CN=758f0edec5aa0006ce22b1752c20dbd652d8803d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:19:dc:60:4e:a3:6e:70:80:e2:62:5d:f9:
                    5c:8c:d9:38:b7:df:b6:28:75:bd:09:4e:84:81:5e:
                    35:e6:f6:59:8f:ee:58:ae:d5:64:20:ed:ce:03:ca:
                    73:69:f5:f3:76:f2:e5:a7:67:d3:ee:00:f0:e3:57:
                    25:f1:7c:32:a2:88:9f:69:6d:f1:0c:ec:eb:c3:20:
                    66:06:d8:fe:40:bf:b2:c6:38:b9:fd:5d:61:23:14:
                    b1:84:34:e3:c2:8e:54:0e:b0:8c:0a:67:3d:c1:6e:
                    4a:49:38:88:6d:28:69:d1:35:2d:32:f3:4a:fa:67:
                    7d:b1:bf:31:d7:1c:18:67:10:cf:40:aa:8f:5c:77:
                    2b:c1:07:36:fb:88:a1:99:9c:0a:50:87:f2:29:3b:
                    90:43:32:a7:60:cd:b7:71:d5:1b:76:ac:04:25:d7:
                    0a:e3:52:b3:51:0d:72:4c:69:c4:b1:0f:db:c6:40:
                    21:fc:90:1d:88:42:af:a8:a0:a1:06:2f:0a:5a:76:
                    d7:b6:44:7d:ff:1a:78:e5:11:24:5a:93:ab:3e:4c:
                    bd:e4:c2:b3:36:a4:ac:d5:97:6a:36:15:b5:f0:8e:
                    ee:76:18:14:1c:a7:8c:0f:68:b8:d3:e1:31:20:da:
                    dd:6d:14:54:e3:8f:d4:00:e1:aa:95:46:50:c4:21:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8F:0E:DE:C5:AA:00:06:CE:22:B1:75:2C:20:DB:D6:52:D8:80:3D
            X509v3 Authority Key Identifier:
                keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:c6:99:b7:41:93:b5:ea:a0:08:63:56:18:b7:b2:4d:06:
         44:1e:a6:79:55:07:0c:78:72:a3:1d:a7:c6:56:db:f5:2f:b4:
         18:9f:f2:8f:f8:7c:2c:61:3b:de:5d:25:d4:e0:23:2d:bd:5f:
         da:9a:65:c0:bd:29:c6:20:a0:e0:45:1c:2f:ab:78:c4:3c:d5:
         af:92:71:64:a4:cc:70:6a:57:f6:41:2a:82:b5:d6:d0:c9:a5:
         68:fa:1a:27:50:71:28:90:77:dc:49:45:bd:27:97:b9:ae:ff:
         ca:65:be:c9:0e:19:e8:f3:61:dc:c2:c8:9c:31:a6:c8:90:87:
         0e:3c:05:d3:ff:10:43:3d:7d:fd:99:27:4b:ab:e5:31:a6:4d:
         d0:8e:3c:3e:5a:34:78:1a:ae:41:70:10:e0:86:9e:8c:7d:e6:
         65:e6:3f:d3:2c:0b:4e:6a:7c:2a:1b:29:13:84:f2:8a:1b:d1:
         52:89:0a:19:8e:ba:c1:58:da:f6:90:e1:b4:df:b2:eb:d3:e2:
         39:d1:ae:50:28:12:2c:a5:44:1f:59:54:ee:93:5c:20:33:26:
         67:74:d8:e0:9e:4d:fb:2e:2e:9a:37:ef:39:c6:f3:2a:a3:e7:
         b1:c4:af:43:65:3a:07:19:58:a7:7e:be:b1:31:a1:2b:20:10:
         ff:1d:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:14:19 2025 by rpki-client