Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File:                     3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier:          63UX2O4A1VB1O9G0lwL1slwGSh0bkLJqkDtchHiFUNY=
Subject key identifier:   67:72:07:D0:9F:34:FE:E2:A6:83:0F:A2:64:6D:F6:09:AC:0B:DB:56
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer:       /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial:       0196AC5592146BC4F97B8EB8127697D4F074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number:          1546
Signing time:             Wed 07 May 2025 20:00:11 +0000
Manifest this update:     Wed 07 May 2025 20:00:11 +0000
Manifest next update:     Thu 08 May 2025 20:00:11 +0000
Files and hashes:         1: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (hash: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=)
                          2: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: 4i6tPVqmReJHiALxGSw48FCxINLo3OgZzG9sPMNhoNY=)
                          3: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
                          4: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
                          5: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
                          6: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
                          7: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:55:92:14:6b:c4:f9:7b:8e:b8:12:76:97:d4:f0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
        Validity
            Not Before: May  7 20:00:11 2025 GMT
            Not After : May  8 20:00:11 2025 GMT
        Subject: CN=677207d09f34fee2a6830fa2646df609ac0bdb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:8d:13:2f:09:91:9c:4b:52:92:aa:dd:d1:
                    48:3c:10:5e:bb:71:e2:98:47:a1:38:78:1c:8f:c3:
                    16:97:67:eb:e4:b9:63:3b:ce:65:6e:62:05:c8:64:
                    1f:d8:7a:30:a7:6e:fa:35:09:a1:ee:13:cf:0a:5b:
                    cb:ee:1d:e6:25:63:9c:71:02:05:ee:e5:75:5b:ae:
                    56:6f:e6:36:00:bf:a3:ac:fa:c4:ab:4a:e3:24:a5:
                    cc:b2:f2:9e:26:1f:88:1c:6c:3d:02:d4:17:bb:83:
                    26:c6:e4:11:a4:56:10:02:25:08:a9:fb:7d:3f:83:
                    78:d3:4d:57:8f:4c:c3:76:2f:b0:b9:8a:73:60:3b:
                    ca:31:31:46:b2:fc:65:90:98:b1:e0:ba:6c:a1:2f:
                    21:d7:6f:d6:59:93:6b:75:49:9c:34:8e:86:ee:64:
                    1c:55:75:35:17:47:58:2d:e2:c1:15:bc:e4:5b:12:
                    25:68:6b:24:19:49:ba:e5:f4:09:82:05:9b:b2:88:
                    ca:73:54:9c:bf:1d:7f:37:58:f6:f0:b8:b0:bc:50:
                    32:d7:e5:e4:32:4d:f2:d4:b8:cc:5b:b9:ba:11:15:
                    46:e8:52:1c:d3:98:40:ee:71:8c:d4:f9:6c:7a:55:
                    22:44:e1:bc:64:af:3e:2a:f1:d3:0c:d6:5d:93:dd:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:72:07:D0:9F:34:FE:E2:A6:83:0F:A2:64:6D:F6:09:AC:0B:DB:56
            X509v3 Authority Key Identifier:
                keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:5e:e6:a3:26:bc:c8:89:dc:3b:49:82:37:f3:00:9b:40:
         53:d4:ed:d6:f3:99:ed:7f:eb:4f:64:da:a0:55:b2:ad:65:a1:
         19:e2:32:1a:7f:cc:4b:8a:ac:25:dc:77:2c:dc:7c:a1:68:9a:
         cc:2e:a2:d0:eb:87:ba:0f:47:fb:a8:bd:a3:03:8c:5e:60:b4:
         e2:14:9a:e3:b4:ca:f3:e8:45:26:bf:4b:f2:7d:80:8e:7a:95:
         1f:ef:10:bd:04:ca:16:69:97:40:2e:59:f6:68:1c:84:e2:50:
         22:69:6b:ed:27:cc:4c:82:15:0d:14:7a:2a:97:4c:55:8f:ef:
         84:b0:d5:30:7a:b5:de:df:ad:fa:ee:21:88:68:64:7b:91:d6:
         a8:0d:b8:85:c4:5c:bf:38:c2:11:a2:20:d0:c6:dd:85:52:a5:
         42:6d:31:42:85:43:80:69:cb:e2:7d:88:46:42:de:9a:3e:9a:
         a3:a0:52:2d:ee:df:84:7a:8e:21:85:0d:7a:70:c1:1b:aa:90:
         82:ee:bb:4d:2f:40:d6:a1:fa:4e:d5:ef:8b:8a:b5:49:85:64:
         73:62:bb:8c:5a:c5:56:ff:6c:3f:49:49:3c:31:c2:72:b7:b6:
         3d:db:eb:9e:85:86:a1:f2:11:de:73:68:66:50:76:39:18:e4:
         77:e2:a6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:54:47 2025 by rpki-client