Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
File:                     n3Zvv-bZVxAAITgLsFVeCjum2OM.mft (raw, json)
Hash identifier:          946O/FwmsdP1fc2x8FKES21RjyA8rZpbuuH681HwroE=
Subject key identifier:   18:4B:56:A2:FA:3C:6A:B2:5A:F4:EC:4C:A2:BB:9C:DC:EF:EC:30:33
Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
Certificate issuer:       /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Certificate serial:       0196C53A90541B479CA774D7FAD5F7F77A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
Manifest number:          023E
Signing time:             Mon 12 May 2025 16:01:11 +0000
Manifest this update:     Mon 12 May 2025 16:01:11 +0000
Manifest next update:     Tue 13 May 2025 16:01:11 +0000
Files and hashes:         1: ONK87mida4LXX87gailCfoI1b8Y.roa (hash: QBCu5PF0VO/SVm73/KPj9NbrgIJuILrNgThOrk+l2bw=)
                          2: n3Zvv-bZVxAAITgLsFVeCjum2OM.crl (hash: q2gLNvy++slRIH6oZnYlc2ILOTr7vVim46VWN/1gjdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:90:54:1b:47:9c:a7:74:d7:fa:d5:f7:f7:7a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
        Validity
            Not Before: May 12 16:01:11 2025 GMT
            Not After : May 13 16:01:11 2025 GMT
        Subject: CN=184b56a2fa3c6ab25af4ec4ca2bb9cdcefec3033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:a9:25:e7:57:88:3a:1c:27:9f:a5:23:b7:
                    70:4f:c9:d9:bd:6a:be:3c:8c:95:57:84:0d:75:5e:
                    34:73:a1:22:d4:b1:8f:69:7f:1b:4c:c3:e9:de:65:
                    4a:29:d1:dd:0c:cd:3a:74:2d:e7:ef:52:b3:ca:57:
                    1b:5f:32:f8:be:7c:57:43:93:6c:54:b1:3a:e8:38:
                    02:99:a7:6a:8a:55:42:72:3c:53:ec:89:b6:97:06:
                    c0:68:ac:33:9a:ff:d3:9b:87:51:21:fb:0b:7b:71:
                    a2:f0:fd:c1:b2:ba:12:d0:d2:26:91:5e:7a:43:8e:
                    79:08:cb:93:41:38:82:42:2a:92:68:ae:36:c8:6c:
                    4f:6f:f5:7d:01:f5:6d:c7:9b:59:ec:8f:ea:e0:af:
                    e6:be:39:c9:d0:14:08:74:db:6a:94:5f:21:74:cb:
                    15:2e:2c:4e:f1:73:21:e7:0f:cd:43:ce:7e:24:ec:
                    74:c4:df:57:b4:58:0d:52:15:ab:0d:ef:16:53:ad:
                    c9:7d:99:b4:02:81:dc:e5:5d:44:48:c8:55:15:ac:
                    9b:a1:55:fe:ac:bb:5d:89:be:44:db:9e:38:09:47:
                    6d:1c:3a:95:0d:7d:19:b3:ba:28:20:05:c8:b5:72:
                    47:45:53:e6:70:ad:94:df:5c:31:39:2b:3c:8f:c4:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4B:56:A2:FA:3C:6A:B2:5A:F4:EC:4C:A2:BB:9C:DC:EF:EC:30:33
            X509v3 Authority Key Identifier:
                keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:d0:ca:b3:6b:6d:8b:35:e4:2f:e2:e9:18:12:a4:89:af:
         95:c5:91:2d:c5:57:1d:e1:e5:0f:d0:90:3f:f5:70:70:aa:dc:
         03:af:6e:3c:6a:81:e8:9e:d4:32:7f:7a:29:d5:75:28:b5:07:
         db:a1:c2:ed:42:6b:5f:d2:db:e4:96:ff:36:84:38:79:f1:5f:
         43:1a:3c:d2:e4:f8:a0:3c:b9:4e:51:11:0d:70:4d:b2:96:86:
         30:ba:b1:83:4c:e5:50:52:fc:4e:9b:f4:6a:ce:bb:40:9d:88:
         0c:c1:68:40:25:32:69:6f:03:8c:92:f6:9b:ea:52:21:d9:db:
         d9:10:ea:dc:51:dd:bb:1e:18:ad:93:32:ee:57:da:c3:b9:ff:
         fc:bb:14:87:c5:5b:8d:7b:50:e8:88:b5:5d:8f:f4:b8:1f:80:
         c8:a8:bb:ac:30:c0:46:31:ac:34:d4:f3:41:d5:11:95:da:75:
         0c:59:00:f0:b8:b2:b0:91:63:6a:2c:ba:b6:77:58:8e:f2:3d:
         64:3b:9c:aa:39:a8:eb:c9:a8:eb:9d:b9:db:04:15:9e:29:69:
         e2:d2:b2:73:fb:d4:64:44:0b:2b:35:ab:17:4d:f0:f0:3e:a3:
         e4:01:a7:3c:e4:55:74:72:09:ba:b0:63:61:2c:a7:08:de:bf:
         cb:a1:a0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:58:17 2025 by rpki-client