Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
File:                     rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json)
Hash identifier:          g1iDuyojkbOImNqkrJu6oSQfyqIqA9z4PQenVZtSKdg=
Subject key identifier:   06:A2:E1:FF:B4:F2:E8:B7:4E:D8:53:36:4A:08:3B:B6:D5:4B:46:C9
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Certificate issuer:       /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial:       0196CEAAEDEC311ADB913B15BD9AF6675F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
Manifest number:          0782
Signing time:             Wed 14 May 2025 12:00:30 +0000
Manifest this update:     Wed 14 May 2025 12:00:30 +0000
Manifest next update:     Thu 15 May 2025 12:00:30 +0000
Files and hashes:         1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: c08oWszrdc3HvUjiUd56XFmtIGztravFEKusuCHJPr8=)
                          2: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (hash: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:aa:ed:ec:31:1a:db:91:3b:15:bd:9a:f6:67:5f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
        Validity
            Not Before: May 14 12:00:30 2025 GMT
            Not After : May 15 12:00:30 2025 GMT
        Subject: CN=06a2e1ffb4f2e8b74ed853364a083bb6d54b46c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:8c:28:88:a7:ef:3f:2a:b8:03:ee:53:03:
                    8a:91:3e:e5:6c:0a:0e:81:ea:d0:72:2b:bb:02:31:
                    16:f5:88:9b:d2:66:8c:14:b6:ac:7e:c4:34:36:9b:
                    c1:5b:42:9c:cb:66:4c:3b:ea:46:cd:2f:ce:3c:19:
                    62:bf:a4:3f:78:63:a2:b6:d5:23:3c:58:c0:94:07:
                    43:24:1d:cb:d3:04:2b:83:ed:0b:46:ff:9f:a5:33:
                    a8:82:5d:f2:2c:fc:73:df:39:2a:68:71:f7:7e:56:
                    94:96:7f:ed:a4:30:37:cd:bf:5a:0d:47:14:1f:ca:
                    50:2c:6b:44:03:c3:3e:ce:32:1d:00:1c:50:e7:2a:
                    35:e7:82:29:be:f9:5b:97:64:e7:67:c7:69:77:60:
                    86:09:83:45:ac:2c:5d:7d:d3:cb:1f:38:0a:a3:b0:
                    36:a9:54:76:9b:aa:71:12:a9:fb:45:fb:0c:86:93:
                    d0:83:8e:dd:d9:94:ef:e7:29:46:71:7d:13:c9:19:
                    b8:2b:16:19:a9:cb:f9:ea:64:04:69:ef:af:cf:93:
                    6a:61:a9:eb:2a:25:4e:6e:b2:c3:9c:8e:18:a3:3a:
                    78:33:73:26:25:d7:86:94:11:05:5e:78:27:c2:83:
                    75:4e:b7:de:09:24:80:fb:70:f6:12:88:a2:2b:71:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A2:E1:FF:B4:F2:E8:B7:4E:D8:53:36:4A:08:3B:B6:D5:4B:46:C9
            X509v3 Authority Key Identifier:
                keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a9:06:f8:f2:da:65:53:66:7f:d8:17:8c:59:d6:1b:ed:f4:
         88:e8:1a:35:7d:13:95:76:a3:28:f3:29:aa:ea:58:75:9e:c5:
         a0:0f:a4:45:72:fa:ba:35:a1:cc:86:92:f8:15:bc:2f:fd:af:
         37:cd:d0:d0:b5:02:74:63:ec:8e:8a:d9:f2:f1:40:05:98:ae:
         d7:36:a0:65:6e:9c:e1:ab:2d:08:48:fa:2e:59:c1:4b:ed:7a:
         56:d8:12:bd:fa:42:10:e5:12:18:5f:e2:04:bd:77:6f:1e:24:
         37:d0:fb:9e:4b:b8:ac:e6:76:ae:32:60:0a:8c:45:0b:6f:f8:
         5d:97:b1:32:d9:46:10:7a:72:06:e1:ee:07:40:a2:39:cd:8c:
         b9:fc:6d:3d:13:70:dd:90:27:4b:b8:1b:a5:6e:6b:2f:4c:a5:
         7b:75:3b:4f:0f:71:3f:47:b4:22:75:a8:b4:0b:5f:46:4c:be:
         b6:fa:19:74:f7:a8:a0:0c:83:29:5d:ca:b0:63:8a:d7:cb:88:
         45:8c:94:9b:6c:bd:c9:6f:ee:e3:1a:f7:01:e4:57:36:68:49:
         a7:78:f3:56:07:15:cd:65:4a:5d:cb:58:42:d7:0e:b1:6a:54:
         d1:48:05:01:db:10:16:56:88:61:54:13:f5:de:36:9d:e3:d4:
         47:16:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:14:26 2025 by rpki-client