Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File:                     3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier:          4CgDhXyVIqNSh/1T8dmd1FVWcoo1z8h51K+QPgYNGn0=
Subject key identifier:   D1:0A:0D:3B:DA:AC:16:DA:B3:50:80:D0:83:7E:0E:2C:94:CF:0A:25
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer:       /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial:       0197703E85A8C7D03F586E52CB42A40B94F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 21:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:34 +0000
Files and hashes:         1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: uPTuuM6xchTL6TvX2CLxOqYAp86Y10Q0HAKXLJdRND0=)
                          2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:85:a8:c7:d0:3f:58:6e:52:cb:42:a4:0b:94:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
        Validity
            Not Before: Jun 14 21:00:34 2025 GMT
            Not After : Jun 15 21:00:34 2025 GMT
        Subject: CN=d10a0d3bdaac16dab35080d0837e0e2c94cf0a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:8b:a2:bf:9d:fb:d1:94:2d:3f:25:f0:63:
                    95:3d:2b:03:4c:41:3b:a4:cb:6d:53:f9:b9:cb:0a:
                    3f:43:b8:b7:42:31:f8:a4:a9:e1:4c:5d:17:fa:b5:
                    4d:c7:4c:3f:aa:ce:d9:35:4e:65:9d:9e:19:e0:a3:
                    53:64:7e:69:64:d0:fc:0e:47:e6:46:9f:c4:8e:ba:
                    7e:b3:7c:3f:0b:7f:84:7a:ec:7c:01:00:f4:87:bc:
                    82:1b:95:e7:2e:78:eb:36:50:a8:94:4a:37:e1:3a:
                    08:fb:a5:f7:b5:6b:e4:23:4f:9b:6c:fb:71:2c:03:
                    a0:13:32:20:73:6e:f1:01:94:7e:f1:16:9b:d9:44:
                    cf:bb:2d:f5:0d:4c:c5:62:e6:5e:8a:97:30:93:eb:
                    c1:d6:bd:01:0b:f4:8b:95:ba:67:36:18:25:0d:04:
                    14:35:13:6b:2c:e5:72:3f:3a:12:dd:b0:89:94:a7:
                    77:fc:ea:8b:2b:23:db:c4:80:21:78:09:e2:c9:9b:
                    ab:9b:39:12:de:d0:09:3d:e1:a2:16:a6:10:fe:06:
                    35:1b:f7:b1:d4:d4:cf:5d:a9:12:f8:a3:3e:3a:eb:
                    07:c1:8b:c0:d5:6d:2e:07:b7:ce:e5:d9:ce:21:8f:
                    21:86:b9:a1:d9:0a:84:10:8b:38:e7:bf:12:aa:d4:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0A:0D:3B:DA:AC:16:DA:B3:50:80:D0:83:7E:0E:2C:94:CF:0A:25
            X509v3 Authority Key Identifier:
                keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:01:3f:84:7f:f1:a0:d7:ee:69:f6:eb:a1:77:97:b8:eb:
         87:6e:dd:f5:74:bd:58:6b:3b:e1:d2:2b:53:1f:17:bd:ea:e2:
         01:ff:b7:6e:a4:90:85:aa:4a:49:64:ed:ce:0d:fe:8b:3a:fa:
         ef:7d:91:c9:aa:7b:cd:17:70:51:6c:92:5f:03:49:f6:63:73:
         2d:e1:f4:d0:c4:6c:1e:98:81:94:66:5f:67:15:b2:17:21:b7:
         8b:f6:43:23:48:9f:c9:1d:ee:56:88:30:9f:6d:b6:c2:0d:63:
         a6:d7:bd:b9:4c:37:7d:47:e2:4a:30:cd:13:f0:65:31:33:06:
         c9:c3:95:0a:25:0d:a1:93:58:6e:2b:5d:73:08:63:c6:1e:52:
         c9:6a:6d:cf:7c:ba:b7:b5:3a:c5:52:4a:a7:5f:c6:eb:d0:f2:
         94:38:37:84:0f:13:d5:66:13:b7:8c:72:ec:d7:60:86:2f:8c:
         1b:66:37:d1:10:af:0e:af:d3:52:9b:bd:e1:73:15:78:5d:ee:
         2d:d1:63:8d:35:12:fa:e4:30:e5:dc:c4:fc:9d:71:f6:08:0f:
         93:98:28:22:d8:78:d2:03:68:a7:9b:37:2f:d2:27:71:22:14:
         f0:65:68:66:70:a9:a5:6e:74:bf:2b:e9:b3:8e:72:75:b9:06:
         6f:4a:c0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:20:34 2025 by rpki-client