Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File:                     3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier:          31/zsMbt2k9tsm7J+jW3g99KpMlBjVedT+PsNUh2YdE=
Subject key identifier:   BC:D9:5B:59:2E:27:9F:04:3D:D2:2E:C6:2C:15:55:BD:5B:D9:40:F7
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer:       /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial:       0196759E521178B8A774E9A59551C927604C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 05:00:31 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:31 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:31 +0000
Files and hashes:         1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
                          2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: xBL1eH1BBLQVT/BwtmOBbLZDG94rbVaGeYwWOEZLH1k=)
                          3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
                          4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:52:11:78:b8:a7:74:e9:a5:95:51:c9:27:60:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
        Validity
            Not Before: Apr 27 05:00:31 2025 GMT
            Not After : Apr 28 05:00:31 2025 GMT
        Subject: CN=bcd95b592e279f043dd22ec62c1555bd5bd940f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:63:68:bd:7a:de:4b:58:65:2e:20:d8:07:
                    17:79:74:2a:ad:67:45:c9:4b:19:7c:c4:0d:65:d1:
                    cc:b9:cf:de:5a:55:49:a1:00:99:58:cb:d0:08:cc:
                    43:f3:4d:f5:32:70:b1:db:3d:6d:df:6e:09:4a:1e:
                    b6:28:6e:28:de:a0:1f:14:8e:4d:75:fd:e9:ca:e9:
                    06:fe:75:7a:4e:bc:13:93:b8:7d:dc:9d:60:86:da:
                    48:ef:65:47:b2:76:cf:32:29:ec:76:0f:03:57:a0:
                    ad:b5:9b:50:c0:bb:39:0a:e4:57:ca:55:da:8b:8b:
                    97:27:17:c4:f8:0b:38:d0:5d:1b:95:cf:43:c6:4f:
                    f1:f0:18:41:8b:23:45:6c:0b:ed:ab:bf:e6:cd:10:
                    d1:b8:9e:25:ef:1b:e8:d5:7f:70:bd:b0:8f:fe:c5:
                    9a:f7:ce:17:86:bf:bd:05:d5:01:35:1b:58:32:72:
                    4c:7b:a0:e9:89:9c:46:92:02:2b:63:4e:eb:f8:d8:
                    42:e1:76:14:87:8c:9e:25:ff:58:df:64:03:00:0e:
                    a5:84:09:6b:eb:da:12:7c:7b:78:96:52:3b:ef:6a:
                    4b:44:6e:76:16:b7:bb:56:60:b3:9c:cd:be:3a:43:
                    42:f5:04:58:1f:31:a9:82:f5:d1:8e:9a:fb:b0:58:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:5B:59:2E:27:9F:04:3D:D2:2E:C6:2C:15:55:BD:5B:D9:40:F7
            X509v3 Authority Key Identifier:
                keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:92:0a:a7:4c:a1:77:a9:26:13:80:78:f7:ca:de:0b:b6:
         4b:32:f0:6d:e4:2e:60:35:95:d6:8f:4c:a8:31:6e:7a:e1:58:
         fd:1c:45:2e:ad:59:0c:00:b8:42:80:f2:5d:c4:0e:30:7d:c6:
         f6:1b:e0:cb:b2:58:f1:56:12:f3:68:e8:23:99:89:54:90:13:
         a8:ca:93:97:4c:da:30:d6:f6:d9:58:5f:35:51:81:d7:95:6f:
         86:51:91:7c:c1:1e:a9:44:80:3b:f7:74:72:3c:08:d0:f3:2d:
         8a:0f:ae:ee:47:f2:20:f2:3f:48:be:38:20:0d:10:c8:69:2c:
         ac:54:55:f3:f7:b7:3d:ca:12:f3:bb:01:bc:8d:4f:a1:51:86:
         45:a4:08:b7:06:8e:35:46:5c:34:8f:ab:9a:e3:b1:91:58:5d:
         32:73:82:1b:89:31:3b:87:21:3a:fd:42:47:e2:0d:57:5b:33:
         9d:b8:0c:94:4e:08:2d:e9:01:e1:04:43:e0:60:44:1c:6a:ac:
         ff:1f:9f:ce:c0:7f:5d:72:32:25:8a:36:a8:b2:a5:11:dc:2e:
         5a:59:09:97:f0:fd:01:1f:d4:49:81:bb:a1:17:50:f7:68:ea:
         0d:4b:44:21:69:1e:26:6a:24:be:62:b9:65:85:52:ab:e1:95:
         c1:61:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:36 2025 by rpki-client