Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File:                     3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier:          mXEiWHlX4jNBZwKKYSMpoI0eZJPTCVotgpqBMzvGkxg=
Subject key identifier:   D7:20:C0:F4:79:54:F2:A0:84:91:1B:2D:60:27:12:63:93:03:24:9A
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer:       /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial:       0196DAAEF969413606093D7714F6C433A4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number:          1369
Signing time:             Fri 16 May 2025 20:00:22 +0000
Manifest this update:     Fri 16 May 2025 20:00:22 +0000
Manifest next update:     Sat 17 May 2025 20:00:22 +0000
Files and hashes:         1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: rpZ6TTSn+Bbk0EvSTqWS5qoieJRew46xQ8KBnwNCdqU=)
                          2: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (hash: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=)
                          3: _WS_KUWo5VlHoso4BGtRKVhHyHo.roa (hash: EHMdLaq+K6Q6inb3xq+fso0i3zQ47TR+r4l4lfO+5pU=)
                          4: lwrL3dIIXO_mCBQdap7KZ_iDBFc.roa (hash: F6VpIkHy8PT/lwz9faa43UWmWxDgyYUpuXzG7yHnlKI=)
                          5: uLirnnwX72a0N3OriOBn_DEyQSk.roa (hash: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:da:ae:f9:69:41:36:06:09:3d:77:14:f6:c4:33:a4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
        Validity
            Not Before: May 16 20:00:22 2025 GMT
            Not After : May 17 20:00:22 2025 GMT
        Subject: CN=d720c0f47954f2a084911b2d602712639303249a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:e4:f8:28:db:fe:99:10:4e:26:32:ca:42:
                    38:3b:43:be:a1:9c:b9:ab:c3:e8:33:e4:ed:97:ae:
                    8b:ce:a5:42:22:f8:c3:1e:7b:53:92:9a:fa:27:97:
                    92:b8:0c:70:a8:83:ed:da:f7:14:69:bc:28:2f:42:
                    3f:bc:59:57:51:57:68:c0:60:99:c3:8b:5e:2f:54:
                    df:fe:3e:14:3a:8e:7f:94:e9:07:eb:5a:e7:74:59:
                    76:2d:c7:1c:02:a9:fa:bf:c1:ad:dc:44:57:d4:cd:
                    76:f4:8d:8c:8d:5d:57:c2:9e:80:02:5a:f5:31:e8:
                    b9:80:a5:80:46:94:7b:cd:5b:e8:36:2c:01:b3:f5:
                    fc:58:01:e1:28:e5:93:e7:c6:fe:74:e0:8d:90:53:
                    25:19:b0:60:d4:43:f6:f8:6c:4b:fc:c4:5c:37:5d:
                    f5:c4:8d:f9:4f:7c:f8:0b:d2:91:e9:47:5c:00:36:
                    f5:d0:90:3e:a5:45:57:d3:1d:39:d1:23:ab:16:68:
                    d3:9d:ad:aa:4c:bf:8c:5e:5d:c9:3e:d1:3a:ef:fe:
                    f4:7e:cd:8b:f6:0c:16:0e:3b:0b:54:50:0e:82:d4:
                    8a:b0:23:0c:44:9c:7c:73:95:b9:4d:54:b9:2b:3d:
                    4e:9a:ad:a4:1f:c7:7c:0a:50:92:df:15:50:80:bc:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:20:C0:F4:79:54:F2:A0:84:91:1B:2D:60:27:12:63:93:03:24:9A
            X509v3 Authority Key Identifier:
                keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:bb:23:18:91:7b:10:62:b3:06:12:ce:c4:ab:da:b0:1e:
         17:0e:e5:29:ea:53:04:14:33:b4:81:a6:a9:5a:df:a8:e9:c3:
         bd:89:e9:86:f5:9c:a0:0a:e7:98:d3:13:27:de:07:dc:4e:63:
         52:6c:1b:ee:f0:9c:f2:7f:43:80:c4:fd:0c:5d:04:6a:bb:8b:
         89:8d:13:fa:36:6e:4b:51:20:ec:09:0b:4b:68:07:26:d6:9b:
         b0:14:8f:59:77:75:0e:d7:85:a8:a3:a0:cb:f9:25:7c:a2:99:
         10:93:16:5d:e1:ff:55:63:e3:71:2d:89:fd:95:42:d5:31:a2:
         29:6e:46:10:c2:54:80:78:f0:33:57:9c:c4:ef:53:23:61:04:
         d8:d7:84:0e:3f:f1:a9:f2:c3:63:9c:f1:52:5e:ef:9f:11:8e:
         13:c8:67:64:94:3d:56:90:ab:0b:4a:d6:40:e1:57:d8:b7:50:
         83:d2:9c:d7:77:da:ab:a4:cd:db:9f:af:6a:36:ad:e4:cb:bc:
         e7:b0:4a:9a:b1:02:06:a4:29:85:83:cf:0e:88:1b:1c:5a:0f:
         e9:5b:b8:b0:3f:7b:4c:53:5a:8b:f2:b0:76:ac:53:34:e5:c6:
         9a:df:6a:91:35:c1:0d:81:b0:0f:f4:0e:8c:ab:3e:31:81:8d:
         29:3b:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:48:23 2025 by rpki-client