Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File:                     3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier:          uKbfKaT+AqgjnauUGg8UhWzWSQxQiQLgdpQ0PS1xZBo=
Subject key identifier:   0B:65:F3:05:D5:58:18:7D:E5:70:A0:19:F8:0A:A0:8F:3A:BB:48:9D
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer:       /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial:       01969296465C89597C43962CB9A8193BAE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number:          151E
Signing time:             Fri 02 May 2025 20:00:44 +0000
Manifest this update:     Fri 02 May 2025 20:00:44 +0000
Manifest next update:     Sat 03 May 2025 20:00:44 +0000
Files and hashes:         1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: tESaGZdzuKoj0L/NeWszOLgZWa8MVG8fWM1u0uTJrGo=)
                          2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
                          3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:96:46:5c:89:59:7c:43:96:2c:b9:a8:19:3b:ae:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
        Validity
            Not Before: May  2 20:00:44 2025 GMT
            Not After : May  3 20:00:44 2025 GMT
        Subject: CN=0b65f305d558187de570a019f80aa08f3abb489d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:a8:84:66:03:33:b7:49:f0:b2:33:d7:3d:
                    94:59:ed:2f:2d:30:38:c9:28:4b:44:d0:77:8c:01:
                    cb:98:ae:22:16:b6:c7:11:b3:84:e5:25:b3:f4:b5:
                    69:ee:e0:a2:f1:5a:d3:19:30:55:f9:1c:6b:c9:b0:
                    9c:08:f9:5f:85:0e:cb:85:c2:c4:2e:0b:aa:ce:cc:
                    e0:24:01:40:bb:fb:a3:c3:88:dd:45:51:25:75:08:
                    e2:e5:03:22:d1:5a:23:ed:be:f6:ba:16:70:1b:41:
                    1e:d0:2a:38:bb:46:31:52:dd:80:34:0b:93:09:66:
                    36:90:6d:89:2c:8b:b9:6d:9a:1a:df:be:30:3d:99:
                    73:df:9b:9a:8c:0c:23:69:22:02:c3:87:bf:de:df:
                    67:94:32:a5:89:9d:8b:1d:b6:ca:46:06:ed:6e:c5:
                    88:85:76:a5:5e:b1:98:b4:3c:d7:8a:95:e8:71:de:
                    c3:28:ba:cb:51:a7:5d:76:b5:91:d2:05:11:8a:90:
                    6f:6d:70:84:1c:05:18:a6:e1:7a:04:af:46:9d:c0:
                    41:f4:f9:bc:22:41:8e:d3:69:fb:3b:35:11:78:00:
                    43:24:23:84:3d:c0:99:93:af:1d:19:f5:a3:5c:42:
                    d9:59:3e:ef:ab:b3:45:44:e2:45:99:0d:0d:1b:b8:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:65:F3:05:D5:58:18:7D:E5:70:A0:19:F8:0A:A0:8F:3A:BB:48:9D
            X509v3 Authority Key Identifier:
                keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:28:29:51:0a:61:cb:91:e0:d1:5f:07:c9:98:27:4c:05:a8:
         e5:15:06:a4:d9:73:bf:00:e4:06:24:c2:8f:b8:d9:1f:91:9b:
         a0:53:c4:33:5b:25:df:0a:1e:39:15:48:e9:1d:ce:84:fd:88:
         c7:dd:2b:88:f1:68:86:d3:da:93:7e:79:c5:83:9f:dd:00:05:
         54:70:90:39:93:33:da:46:90:0a:b9:fb:07:bc:cd:d3:c7:5f:
         a6:3a:2a:db:c1:2c:f4:ab:db:d4:61:44:89:3b:5c:95:4b:1e:
         8b:b1:1c:17:7e:9b:30:f6:58:69:e9:72:ae:96:a1:bb:49:59:
         e5:ee:4e:20:fd:d0:67:df:0e:bd:07:39:79:29:a7:ec:1a:96:
         db:94:02:bc:9d:d2:97:5f:6a:3b:53:b8:07:8b:6c:41:f7:a0:
         53:e0:4c:15:2f:a4:a7:0e:ba:aa:50:5d:d6:74:12:94:ef:5c:
         3a:8f:02:83:e7:d7:8d:d0:bf:27:26:12:19:62:e4:bc:89:70:
         9e:fd:9c:15:61:83:70:5f:ee:3f:9d:4f:4c:7d:db:63:ad:86:
         04:e7:60:ee:9a:66:0f:93:ac:06:dd:cb:6c:5e:28:63:70:47:
         37:07:12:6e:8a:63:5d:94:fd:56:7b:23:51:6f:69:60:20:ae:
         ad:cc:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:27:58 2025 by rpki-client