Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File:                     3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier:          LGQ46sehjcuSxxmkEoBnuxNrAUUz2564Tf2UFxjOEQ4=
Subject key identifier:   EC:4A:C8:CB:FA:DA:33:C8:F8:97:C9:87:44:AD:50:23:E7:DA:D2:CE
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer:       /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial:       0197786622C26318FC44C0E1F72A9196DC5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number:          0C59
Signing time:             Mon 16 Jun 2025 11:00:48 +0000
Manifest this update:     Mon 16 Jun 2025 11:00:48 +0000
Manifest next update:     Tue 17 Jun 2025 11:00:48 +0000
Files and hashes:         1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: 2D0TunMIWD/I5ZizCPMoL2+ReL99GYTt4kEylgYY7+M=)
                          2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=)
                          3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=)
                          4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=)
                          5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=)
                          6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=)
                          7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=)
                          8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:66:22:c2:63:18:fc:44:c0:e1:f7:2a:91:96:dc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
        Validity
            Not Before: Jun 16 11:00:48 2025 GMT
            Not After : Jun 17 11:00:48 2025 GMT
        Subject: CN=ec4ac8cbfada33c8f897c98744ad5023e7dad2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:43:20:5e:fb:a3:d2:6c:ad:57:fd:53:8d:
                    76:c4:ab:b8:57:a4:93:eb:ea:c4:bb:47:f1:98:20:
                    06:b3:f7:ba:b9:f2:01:ff:14:30:ae:c6:07:d4:73:
                    de:64:e1:ff:91:f2:69:dd:47:8d:9b:60:6f:ba:9e:
                    7d:e5:47:26:37:c7:44:e6:46:e9:bd:72:a7:fd:6f:
                    da:94:ad:a9:eb:c6:dd:7a:71:f1:66:1b:a9:a9:cb:
                    b6:6c:2e:d0:e6:3c:90:e4:24:98:fa:b0:84:00:2c:
                    fd:62:0a:21:26:66:df:c6:bf:d3:f5:83:3a:bf:6f:
                    63:37:61:43:42:49:00:24:d7:9b:a4:a0:64:f2:0f:
                    92:5f:99:77:33:86:f5:40:b0:79:45:78:ba:18:91:
                    cc:b4:b3:13:05:d7:6c:c7:39:4c:09:0e:4d:7d:6b:
                    71:36:5a:71:b7:39:a3:87:bb:56:dc:a4:08:38:15:
                    ca:09:20:28:f9:7e:99:8a:fe:09:db:2a:e4:16:90:
                    60:30:34:ca:02:d6:6a:8f:a3:62:a3:37:4e:dc:53:
                    66:9d:97:f4:03:4b:8a:9c:26:0d:f2:9d:d9:25:fb:
                    50:8e:5a:56:3d:2a:7d:c3:9d:b7:76:0f:24:68:e2:
                    cc:31:76:aa:28:4c:b2:2a:f8:0c:9d:18:5a:c0:c6:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4A:C8:CB:FA:DA:33:C8:F8:97:C9:87:44:AD:50:23:E7:DA:D2:CE
            X509v3 Authority Key Identifier:
                keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:66:9b:89:46:7c:13:41:d1:d4:a9:c3:df:07:fc:7a:05:a1:
         e3:bf:6f:20:18:30:ef:aa:e3:ba:fe:e4:3e:5e:95:b3:55:2c:
         bf:7f:49:28:13:a9:b4:85:d8:d6:f1:f6:3c:59:f1:c8:88:ec:
         06:c9:49:30:86:20:89:84:12:1e:92:93:cd:29:96:ac:9a:8f:
         c8:74:bd:51:dc:f7:84:db:36:39:02:0e:17:c9:55:ee:75:a2:
         22:f8:ff:8a:71:3b:ef:be:96:d4:2e:b9:fc:48:e3:b8:1d:f5:
         3c:e4:13:59:80:b0:39:af:0d:f2:9f:99:e3:b9:96:50:6a:ad:
         76:85:54:b8:3d:9b:b4:6c:10:a4:98:fb:76:86:e5:8c:55:c2:
         db:3a:52:2c:de:c7:0f:e3:c1:ce:d7:34:f3:60:22:5a:1f:d6:
         23:41:1c:b9:37:67:40:a3:f5:77:a0:91:d5:6b:b9:c8:da:90:
         5e:8a:28:f9:34:99:99:13:9f:43:b8:e1:49:15:a2:66:f6:ca:
         b1:a8:76:b3:dd:a3:55:7f:b9:a4:f0:1d:b2:46:16:26:2c:89:
         b6:88:f6:ee:f6:a2:f0:2f:7e:45:6a:6d:26:c4:b5:71:dd:8e:
         ac:d8:13:77:b7:ee:b2:20:ce:ab:18:6c:17:5d:54:49:56:f5:
         9f:12:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:52:07 2025 by rpki-client