Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File:                     3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier:          QHlZGz0lSkjj4lG9zIoBE27wAD8OuNCUg7if+/0B1eI=
Subject key identifier:   DA:0F:39:BD:C9:2E:A3:01:E1:97:F2:A0:E8:79:C9:A4:F9:F2:8A:19
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer:       /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial:       0196B93602915E1F4A6D39E01548F1385A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number:          0449
Signing time:             Sat 10 May 2025 08:00:46 +0000
Manifest this update:     Sat 10 May 2025 08:00:46 +0000
Manifest next update:     Sun 11 May 2025 08:00:46 +0000
Files and hashes:         1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: PJTSPf0iOEvFEDPgFHy974zNeCVjhS/YP+JSWdFhN6Y=)
                          2: qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa (hash: c+EtOwZcoNbafxYOwYXLqi8yAdjVCzKcxk3fMjvNuoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:36:02:91:5e:1f:4a:6d:39:e0:15:48:f1:38:5a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
        Validity
            Not Before: May 10 08:00:46 2025 GMT
            Not After : May 11 08:00:46 2025 GMT
        Subject: CN=da0f39bdc92ea301e197f2a0e879c9a4f9f28a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:67:72:8a:0e:81:f0:b1:c0:84:9c:41:35:
                    30:7b:f6:78:b8:6f:0e:38:d6:87:18:d4:34:3a:1f:
                    e2:f4:e7:39:6e:8f:d8:a0:1e:5f:1e:bd:32:05:ae:
                    62:22:58:4d:16:cb:4f:ad:05:72:09:e1:b5:3c:7d:
                    03:5a:9a:49:bb:a3:bc:56:2e:6c:8d:c2:52:4f:2f:
                    d0:4e:e9:e5:23:86:85:95:6f:2b:30:8b:e1:9b:9d:
                    1f:5d:b7:d3:9a:80:b9:a1:c9:9c:a1:73:c4:fd:9b:
                    61:79:b6:b3:10:d4:ad:aa:41:d2:17:31:f4:1b:76:
                    f1:1b:b8:31:b8:cd:de:04:a1:0f:52:28:ad:33:24:
                    0d:6d:71:aa:42:cb:f1:26:7e:fe:78:b4:fa:ad:7c:
                    a0:65:f1:e1:0a:df:13:0f:90:a3:cb:be:ab:a2:d2:
                    7f:8e:0b:0e:18:a7:7b:a1:bc:53:cd:cd:63:d7:ab:
                    65:b2:5d:dc:f4:bb:3c:09:6c:8b:cc:7f:27:26:96:
                    c9:c7:ef:43:24:13:b5:68:15:22:26:bc:d1:f2:c0:
                    cd:2c:d4:49:65:bd:a6:a2:5c:23:c8:d5:d2:4a:7c:
                    58:24:88:81:5d:91:0e:77:fb:32:86:47:65:41:75:
                    17:45:64:4f:c9:5e:90:f3:ab:28:68:be:13:7f:ec:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0F:39:BD:C9:2E:A3:01:E1:97:F2:A0:E8:79:C9:A4:F9:F2:8A:19
            X509v3 Authority Key Identifier:
                keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:87:b0:22:62:e9:be:b2:87:77:34:cf:f3:de:00:60:55:7a:
         10:3d:7b:68:90:6d:29:d8:3f:f1:22:84:5f:27:14:68:61:82:
         1b:1a:d4:0f:f6:c2:8a:7b:38:1f:6a:17:54:6a:7c:20:b7:4f:
         b4:b2:06:a7:b7:6a:7c:ff:80:c1:96:50:5c:a7:9b:9b:ec:e3:
         7f:34:8f:49:75:06:e3:50:b8:83:46:08:ca:6a:04:53:7b:5d:
         6a:8d:4e:60:0b:d5:93:00:4e:df:2a:2e:60:b4:36:21:80:e8:
         36:fa:81:ad:da:b6:4f:ec:c8:c0:fe:0b:19:e7:e2:34:08:d7:
         0c:40:e4:2c:23:5e:36:49:ef:07:2c:84:ae:e7:3c:46:ff:34:
         20:4c:33:92:c3:fc:7b:d8:87:f5:bf:67:dd:02:c8:1a:f2:93:
         64:dd:ac:ba:f1:e8:01:da:c6:a0:01:c8:0c:56:6b:91:2d:1f:
         62:b4:c9:8c:5a:5c:c3:f2:7e:23:c9:e4:2a:81:36:65:97:a5:
         74:14:47:d0:0d:4f:8d:70:8b:43:de:65:b2:5b:52:64:26:f3:
         bb:9e:29:34:94:36:be:78:ac:43:b7:91:27:a4:29:6b:fb:1a:
         ad:60:c5:62:36:7e:41:d6:ea:01:6f:79:c2:58:3f:28:d4:90:
         7a:97:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:02:23 2025 by rpki-client