Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File:                     3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier:          fRaYDYjUM0yJoOee/iVSxk6Hqahv0wQNvYlxRalnfp4=
Subject key identifier:   3E:3F:4B:D7:00:B3:CB:D5:89:0C:01:66:2E:E2:2C:47:2E:02:A8:B4
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer:       /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial:       01976BF44D379FFBCAA14371163145056794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number:          54
Signing time:             Sat 14 Jun 2025 01:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:02 +0000
Files and hashes:         1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: jH7q0pMH6vAGKbaowjAv12DYkfxl9lp7dJTDloijOYI=)
                          2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:4d:37:9f:fb:ca:a1:43:71:16:31:45:05:67:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
        Validity
            Not Before: Jun 14 01:01:02 2025 GMT
            Not After : Jun 15 01:01:02 2025 GMT
        Subject: CN=3e3f4bd700b3cbd5890c01662ee22c472e02a8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:5e:3c:0f:88:40:2c:86:54:b0:82:81:63:
                    34:87:75:05:d4:2b:4a:af:c7:a3:8d:6f:39:f5:ed:
                    ea:e9:06:01:32:93:d2:8f:8f:16:cd:23:18:21:53:
                    cd:31:28:fa:05:21:32:fe:06:91:70:ba:d4:1a:50:
                    db:a1:27:79:93:18:52:1b:14:ea:b1:3f:e5:ed:f2:
                    81:fc:d6:69:ef:7b:6e:58:5a:53:a1:d8:bb:6e:be:
                    a2:61:4f:9d:94:39:4a:ac:37:db:3b:02:2e:41:45:
                    b0:c2:ab:80:29:3b:18:27:87:4f:44:3a:c8:2d:4d:
                    44:42:15:7b:a2:a0:95:b3:c0:ac:c1:31:54:35:ca:
                    7d:82:ad:c6:a4:76:c4:2f:d1:e0:a7:d2:9d:f6:ea:
                    c3:a7:41:0c:1a:03:49:90:67:0b:56:ae:a4:2b:ec:
                    25:f2:36:f1:4c:64:14:98:35:3a:67:d4:d8:6b:ff:
                    6e:84:70:47:3c:4a:93:9a:37:42:a3:c8:0c:74:69:
                    ea:d3:29:0e:d4:57:b8:b9:17:cc:e5:51:64:ca:aa:
                    69:2f:93:de:06:6b:b4:db:cc:d9:53:f5:92:46:dd:
                    b3:82:97:4d:32:63:37:38:52:ce:ae:fa:df:64:63:
                    eb:c7:16:85:87:da:1e:1a:39:76:8a:71:3d:3e:b2:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3F:4B:D7:00:B3:CB:D5:89:0C:01:66:2E:E2:2C:47:2E:02:A8:B4
            X509v3 Authority Key Identifier:
                keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:35:da:58:9d:cb:58:60:c1:14:ba:52:7d:0f:7d:d4:04:8b:
         6b:98:da:6d:a5:cd:1f:06:05:57:5d:21:f6:2f:a3:e6:84:dd:
         8a:a3:39:cb:7d:de:bc:f5:b1:91:ea:80:b2:06:30:a4:3a:65:
         73:1b:55:b7:28:38:95:8b:a0:f2:4f:e9:68:5e:0b:94:ef:d5:
         8b:3c:50:6b:d6:46:17:77:3b:6e:82:c5:68:1e:28:6c:4b:b0:
         91:f0:3d:c6:5d:dc:38:36:f0:51:98:1f:89:9c:07:1e:cf:b9:
         18:53:50:46:16:6c:89:fd:e3:ce:cb:a3:80:56:3c:e9:27:e6:
         2d:ae:b5:35:9e:af:a1:5b:16:91:4c:be:43:b4:39:8a:bc:86:
         9e:64:5a:82:1d:f0:bd:f7:99:fc:63:df:0e:c2:2a:f8:80:0f:
         94:06:38:ff:26:84:d1:2d:ab:61:d3:98:9b:dd:e1:60:bb:1e:
         62:d4:58:3f:05:e0:65:61:73:16:07:7a:1a:5c:30:96:a8:e7:
         99:28:5f:91:86:b8:e0:5b:9c:83:a1:a0:d3:17:64:6e:bf:2e:
         34:2b:f0:72:a5:41:86:b2:8c:f9:ea:0b:73:0b:0a:1e:a9:ba:
         b1:70:2b:eb:ba:23:48:ed:7e:46:33:c9:78:11:8e:71:bb:e3:
         a9:2a:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:09 2025 by rpki-client