Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File:                     3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier:          tEbtSViGPTufYpinxlTHU4nxFRciudlcaBXs2DKuObk=
Subject key identifier:   04:BE:7C:45:D5:D6:B0:D5:4D:E3:85:DA:EC:45:5C:41:21:BF:87:43
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer:       /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial:       0196D7095C53BB16F5C3C320D28A169B53EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number:          0E7F
Signing time:             Fri 16 May 2025 03:00:37 +0000
Manifest this update:     Fri 16 May 2025 03:00:37 +0000
Manifest next update:     Sat 17 May 2025 03:00:37 +0000
Files and hashes:         1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: IwrwjtHLF4cWkr3UTDyZlbpN61zEzIPSU9xcNRgePKM=)
                          2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:09:5c:53:bb:16:f5:c3:c3:20:d2:8a:16:9b:53:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
        Validity
            Not Before: May 16 03:00:37 2025 GMT
            Not After : May 17 03:00:37 2025 GMT
        Subject: CN=04be7c45d5d6b0d54de385daec455c4121bf8743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:41:c2:68:30:05:eb:c5:02:8d:f2:04:ec:
                    51:5f:dc:47:00:d2:3c:a1:3e:5b:d3:e2:a8:11:a8:
                    de:83:12:f8:aa:77:ab:c2:28:b3:04:f9:96:f8:63:
                    b2:d5:b2:59:0b:e9:1c:5f:c4:61:af:a9:32:62:dd:
                    29:17:23:f3:b9:52:67:cb:a5:e9:24:87:b9:c2:20:
                    bd:ed:bb:0b:a6:4e:e5:69:c1:51:2e:33:00:3e:61:
                    ff:ed:b0:26:fb:85:86:ad:b9:73:ee:93:de:b5:c1:
                    f0:78:ec:57:8e:2d:30:f0:51:d7:6c:8d:a9:42:3f:
                    8e:6e:a5:bf:71:c2:f0:3f:a0:5f:32:50:da:05:29:
                    25:ce:75:03:d3:56:90:b1:bd:d0:9c:cf:9d:47:a9:
                    25:71:da:4c:4c:1d:35:1c:36:da:92:31:90:53:ec:
                    80:25:06:25:52:61:30:67:5e:34:77:68:2f:25:52:
                    0b:fb:30:37:b2:e9:de:ae:1b:47:3c:27:76:80:99:
                    2a:e3:f6:a9:50:4e:4c:f7:45:76:e9:95:a5:4e:47:
                    3d:82:41:8c:0b:3b:51:ff:28:a8:e8:84:a2:02:c5:
                    44:23:5b:90:1e:50:52:84:6b:7b:31:33:6b:91:8c:
                    07:6a:7b:68:d8:61:65:42:45:c1:67:bc:b3:68:41:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BE:7C:45:D5:D6:B0:D5:4D:E3:85:DA:EC:45:5C:41:21:BF:87:43
            X509v3 Authority Key Identifier:
                keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b8:fe:4f:7d:78:ed:9a:cd:07:86:ab:86:be:9a:49:22:c0:
         8e:a9:77:95:e1:32:5b:ec:ad:32:1a:ac:65:28:12:ed:53:08:
         44:27:b0:b2:a5:14:76:41:f2:ef:00:6a:8a:42:e4:52:a6:cd:
         29:34:6b:42:dc:ec:72:cd:aa:9a:51:ca:dd:04:04:f7:73:20:
         b3:20:1f:f8:ae:73:00:01:dd:18:33:27:b3:f6:5a:b6:30:ab:
         79:e1:c2:ad:08:ee:45:97:40:94:bf:20:7f:a0:ac:16:3f:bc:
         7f:6d:9b:2d:79:f9:cb:f4:3a:ba:1a:74:10:5b:c2:84:54:c7:
         41:61:d0:69:76:b1:e4:9c:bc:45:2d:59:94:dc:61:12:1b:7d:
         db:25:dc:16:31:a1:12:f5:e2:71:c8:0d:14:a9:2d:91:bd:05:
         5e:82:2a:94:41:bb:5c:eb:1b:cf:57:8e:ad:1b:1b:82:0d:0f:
         44:5c:10:35:d4:f0:ea:a7:8a:13:9e:13:b0:6d:cb:e8:4a:84:
         d3:6c:31:e4:b1:75:86:6a:e7:30:73:c0:d8:ef:f4:af:dd:d6:
         0f:0c:4b:0f:c8:e3:93:91:ff:15:91:e2:e6:69:b1:62:f8:58:
         8c:29:37:2b:82:4c:78:2e:c3:90:49:7a:49:63:89:9d:38:1e:
         82:7c:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:16:58 2025 by rpki-client