Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File:                     3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier:          ONrA6+V4Ds2CIEDlJkIAxJoFwBaPUl09H9tu7vMKTW8=
Subject key identifier:   DA:B7:78:3F:EC:DC:60:90:D6:0B:69:44:70:43:A9:63:5F:08:29:D1
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer:       /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial:       019769619996C45E56CB30F65F5B164513E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number:          1597
Signing time:             Fri 13 Jun 2025 13:01:33 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:33 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:33 +0000
Files and hashes:         1: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: J5tXKHn8c47C5IkAH4gsmuZL9sGZwFtcxKnMvjjp9rw=)
                          2: Low4CRi4iGKYokty-NINmJn09rg.roa (hash: Mly1uM7PqUcjuRWWihLVa+ejMa5zwEjs5HqRkIM9ZCc=)
                          3: TUldFuXRlNkhcxG2k3pbkLp8w6k.roa (hash: u8w+hKuVRJcapFna3Gt95nB+zwn2rJ1IH60Do+ZSEr0=)
                          4: VFLtaw7ddcrkuS71SLZjd28hT9Y.roa (hash: wkImuoriz8/Wt+wr39TPtXLgxrVgYHqbWY2XyO00qX4=)
                          5: fWDdDEZ5-7TJ7ifcAQ9Kizx3VI0.roa (hash: 9iAjE9rwQQFIjLwRuw0Wl4wwOwQae4btRIJRt6LJVxE=)
                          6: iYMgW4EcYcU5AKm4CceLlPmJSsA.roa (hash: 7zWW49XDo1LsXGWIP2om4UTMjsubF7Ml4DbV3OJ7N00=)
                          7: mWQQr9Df8Gxi-vy8YAXzFkBEGAc.roa (hash: z+245YsTzlJ8Yat/3J5h5H154DAsYclcNAuZzX8bEFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:99:96:c4:5e:56:cb:30:f6:5f:5b:16:45:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
        Validity
            Not Before: Jun 13 13:01:33 2025 GMT
            Not After : Jun 14 13:01:33 2025 GMT
        Subject: CN=dab7783fecdc6090d60b69447043a9635f0829d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:63:e6:d6:92:c0:20:33:31:ac:7d:2f:d8:
                    d1:6c:fc:05:1c:e6:d0:79:f9:60:f1:aa:f5:0a:5f:
                    e4:5d:cb:99:ee:ec:87:0f:95:dc:33:26:3c:5f:7f:
                    0f:f3:25:c7:f8:c8:18:f4:f4:70:7d:fc:6b:e8:0a:
                    11:14:5f:1f:ef:fa:51:37:bd:42:67:f8:93:ef:68:
                    bc:8b:2c:09:2d:ff:b2:8a:8b:ff:ad:19:e9:45:8a:
                    2a:c7:8b:8c:8e:1b:77:23:c8:d3:b8:fa:dc:55:66:
                    1d:89:21:89:22:61:7c:41:34:d1:b4:8e:9b:57:02:
                    74:a8:49:c5:3d:8a:1c:6b:bd:8e:99:75:aa:c7:e0:
                    a6:ed:f2:d4:84:b3:61:b4:05:68:e9:e2:59:d5:2e:
                    34:78:77:32:a9:3f:5c:52:41:0b:20:f6:6d:2d:c2:
                    e0:0f:87:ac:d0:52:cd:fe:30:06:e3:f3:94:97:b7:
                    f8:d2:d3:6f:65:03:2c:90:c1:ae:e5:f3:71:82:11:
                    86:88:5b:87:18:cf:3f:36:1e:06:8b:29:9e:ab:b2:
                    c6:01:ee:b5:02:85:75:9e:b0:4f:5d:2c:42:ab:c2:
                    58:cf:b5:e6:51:26:cf:69:87:04:e6:2c:1a:35:21:
                    7e:27:0f:55:17:b5:7b:5d:2d:ef:98:6a:4c:cf:3a:
                    74:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B7:78:3F:EC:DC:60:90:D6:0B:69:44:70:43:A9:63:5F:08:29:D1
            X509v3 Authority Key Identifier:
                keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:61:be:02:0d:9c:0f:be:cd:5d:fd:4d:d5:61:d8:55:17:75:
         68:6b:5a:8d:78:54:69:13:1c:cb:11:79:05:8f:fb:80:bf:ef:
         ae:6c:d0:be:63:48:52:fb:9c:ee:fa:58:79:fe:b6:6f:f2:48:
         ee:0a:5b:0b:8d:54:3b:cd:ff:3b:34:60:67:28:45:9d:ce:f1:
         ae:57:a3:e3:e1:c0:52:a4:77:90:12:71:9e:85:d7:f0:b6:35:
         61:30:76:8d:95:f3:86:3b:7c:83:5a:43:39:d2:8f:a5:62:7d:
         54:dd:fa:84:fc:5f:f0:cf:5e:29:ac:a1:c6:22:9e:df:fb:82:
         a6:07:ad:ce:32:bc:13:ff:6c:00:a5:ff:9e:f5:84:55:df:60:
         76:61:f2:a1:9b:27:9c:17:7e:fd:e7:05:1b:15:80:b1:89:7c:
         e6:24:3e:f0:11:38:10:cc:14:5e:50:74:3d:9e:31:6c:d8:52:
         2a:d7:f5:72:42:4f:ff:07:f0:c3:3c:f3:84:be:ad:90:62:7d:
         4c:c1:16:51:7b:c2:a6:3b:e0:1d:49:a6:60:03:8a:76:37:aa:
         9f:b0:6a:bb:d8:d0:58:5d:cf:eb:7c:52:5d:89:b5:8c:94:9a:
         b0:e3:1c:ef:1d:6c:fe:04:64:d2:8f:6c:69:3f:46:33:ff:c5:
         bd:b1:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:07 2025 by rpki-client