Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          q7mzKUB9+8MGUvwZE8Qp+ZTTnLyPMGQxUwdUJhd3AII=
Subject key identifier:   A7:77:2F:DB:74:E2:DE:35:97:3F:0E:1A:E7:BF:D5:93:F7:7C:00:C3
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       01976D3D9282A2F4C1E74FFCC74A8869FC7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          06C9
Signing time:             Sat 14 Jun 2025 07:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:41 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: bOmdxKIXPTV4Ts/5ZXeUGtCACF/Pc4GdgKJzrDvSl3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:92:82:a2:f4:c1:e7:4f:fc:c7:4a:88:69:fc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: Jun 14 07:00:41 2025 GMT
            Not After : Jun 15 07:00:41 2025 GMT
        Subject: CN=a7772fdb74e2de35973f0e1ae7bfd593f77c00c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:53:ec:00:09:a9:47:f3:d1:7f:e9:d1:c8:32:
                    fa:08:ad:1c:e3:38:16:c0:c4:52:79:df:95:c0:52:
                    e4:5a:27:77:ae:04:5f:ef:13:83:cd:67:77:57:2c:
                    52:7c:ec:b7:e3:3e:93:6d:24:0f:9a:ae:8c:3a:f6:
                    5d:05:ee:ca:12:9f:68:7d:99:04:06:24:85:ec:1b:
                    2b:9f:f3:46:98:84:a7:91:7f:67:bf:66:6f:f3:b4:
                    76:2f:c1:7f:cd:29:c0:17:b4:85:58:ec:85:22:00:
                    9e:97:0a:dc:1d:63:9c:35:b2:26:ef:1b:29:c7:3b:
                    94:56:7c:c1:86:07:cf:a9:31:3d:74:e9:83:7d:bd:
                    fc:2b:a9:ac:15:19:67:e2:ba:38:d0:b2:0b:60:3e:
                    1c:53:54:e9:ea:91:ee:7b:38:ec:b2:f0:a8:49:47:
                    10:d4:6f:dd:a5:2a:51:f3:ae:04:98:2c:a2:02:9c:
                    8b:cf:5c:70:22:43:c1:f5:78:dc:57:ca:e0:ac:9f:
                    23:fe:89:b3:a1:f5:5a:7d:83:0a:49:f5:7c:f6:ec:
                    2e:0b:1e:31:cb:75:ce:0f:ea:5e:cc:59:73:28:f4:
                    f3:41:51:3e:39:e9:f0:73:fa:6d:dc:e5:0f:19:ff:
                    f3:5b:3d:66:31:7f:e7:fe:e5:e1:46:8c:53:39:f9:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:77:2F:DB:74:E2:DE:35:97:3F:0E:1A:E7:BF:D5:93:F7:7C:00:C3
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:c5:c7:eb:82:6c:d3:8f:25:4c:1b:13:1b:61:50:0f:06:
         aa:a2:3b:ff:5a:dc:a9:8f:c3:e1:cf:2a:3c:5e:e6:74:f3:fa:
         45:76:89:a3:f5:5f:df:ec:72:c7:f7:a8:b0:c4:bd:f8:7f:43:
         cb:11:8c:2d:e2:d0:e0:a7:cb:09:27:4b:cb:99:01:52:62:4d:
         a8:e0:3c:a9:16:60:d8:5d:24:d1:86:49:3a:57:c0:ea:2d:e1:
         09:d7:ac:5d:de:c3:75:f0:29:03:4d:81:b1:2a:78:b3:51:c9:
         27:11:70:dc:06:bd:cb:ef:85:88:03:53:30:da:2e:b5:5a:9b:
         b4:e8:3a:38:56:a8:1f:7a:1c:ce:5c:2b:5a:53:79:97:88:8f:
         a6:5b:c1:04:8d:b1:ad:6f:9a:52:7b:6a:57:be:75:13:a9:6b:
         0a:f6:88:df:13:cd:9f:5c:1b:d2:af:11:16:8e:81:a7:26:fd:
         0f:a2:78:a6:e8:a2:d4:e7:ac:66:1e:cb:26:56:5f:1c:74:ea:
         fd:df:e0:5a:04:98:e0:d3:ee:6d:a2:53:d6:35:48:d1:7b:62:
         ea:6e:d6:61:db:08:c0:e3:0f:86:ab:d2:24:c3:e3:65:52:2e:
         36:3f:02:af:cc:e8:a4:51:61:4e:8e:ec:01:17:46:ec:30:6f:
         ea:3b:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:34 2025 by rpki-client