Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File:                     3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier:          FvcEsXSDdhV47OYaFuzSntG5dk6rIlFpOlGPqC12wtM=
Subject key identifier:   26:54:4E:D9:D4:E4:67:95:F8:1A:06:35:52:B4:C6:80:C2:2B:94:84
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer:       /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial:       01976C2AF2DAD71CC22A947B09E36EBC9BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number:          05E5
Signing time:             Sat 14 Jun 2025 02:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:43 +0000
Files and hashes:         1: 1tilC1_jin8srVsrV1j052DulGk.roa (hash: vyS0S5gewCJtoxpuN4POioePDrUuw5luS1kTn7wZwZE=)
                          2: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: JGFB3vCnn9ZDpAWDn2NRtJOfaM/eHiXqBhI14Xb6IjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:f2:da:d7:1c:c2:2a:94:7b:09:e3:6e:bc:9b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
        Validity
            Not Before: Jun 14 02:00:43 2025 GMT
            Not After : Jun 15 02:00:43 2025 GMT
        Subject: CN=26544ed9d4e46795f81a063552b4c680c22b9484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:27:0b:2e:8f:b5:8e:f8:96:48:86:c4:0e:
                    5b:39:1b:09:0f:8d:d5:4d:80:97:c6:aa:02:6a:6b:
                    e4:9f:38:9a:43:e4:88:0f:86:03:71:63:59:6a:30:
                    87:29:63:a5:a8:3e:68:f5:67:71:70:23:af:cf:f4:
                    6e:70:32:e4:10:63:fa:74:e6:a3:85:0e:69:db:2b:
                    cc:91:1b:be:8f:3e:84:cb:08:c6:0b:7c:5c:4a:e6:
                    c2:b1:41:f7:20:c1:f4:be:7c:08:d5:6c:4b:a1:a5:
                    a2:f6:8b:96:ea:36:ca:d4:86:0a:10:30:f3:f1:0e:
                    d5:7a:5b:10:36:64:5a:aa:10:ad:72:3a:40:34:03:
                    ea:53:14:fa:ee:02:47:50:76:f9:cd:21:b7:11:9c:
                    28:f1:a1:8b:e6:6b:da:b2:15:e0:d8:9e:90:7c:67:
                    74:dd:b0:3a:30:33:74:cc:02:6b:87:73:57:cf:81:
                    2f:99:69:53:03:f1:0d:74:5a:61:66:f2:0c:99:2e:
                    f0:ae:2d:1a:6e:77:72:3d:ed:41:75:84:43:26:dc:
                    1f:dc:63:3e:98:c9:43:82:ba:e6:1e:28:3e:17:45:
                    4e:4f:76:b2:61:b7:fe:73:74:a2:df:a3:9a:63:72:
                    0e:09:e2:92:85:a3:09:df:12:10:74:31:e9:13:59:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:54:4E:D9:D4:E4:67:95:F8:1A:06:35:52:B4:C6:80:C2:2B:94:84
            X509v3 Authority Key Identifier:
                keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a5:a8:0a:e6:fb:72:4d:bf:eb:e4:8b:10:63:fd:9c:d8:45:
         ed:0b:89:6e:ea:90:d7:78:c2:cc:17:c8:4c:3b:2d:d2:82:a3:
         d6:13:5a:3e:01:10:99:1a:06:3b:ce:85:44:d9:71:5b:34:d7:
         53:90:cb:81:f9:4f:72:ac:83:8a:b5:fb:9e:a7:d2:a8:7b:a2:
         86:d4:df:e6:0e:2b:49:ac:03:e8:a1:02:41:bd:ad:94:d8:79:
         2a:b4:44:58:68:4d:af:17:93:cb:cb:a8:e8:9c:3b:39:5e:b4:
         c8:0d:b2:c7:e4:53:86:0c:13:35:3c:6e:6d:71:bf:69:1c:5d:
         ec:49:af:03:2d:ae:b6:83:ea:d8:c0:a9:e9:93:92:e7:0c:95:
         7b:5c:df:15:d0:d6:de:b8:f1:96:f1:ca:77:90:75:a9:64:4b:
         39:b9:d1:30:00:16:19:d2:de:08:90:85:5e:f9:ee:6c:ef:93:
         29:78:e2:2e:8b:06:69:76:69:d3:75:42:a2:cf:bf:15:f1:e4:
         b4:eb:09:94:5d:31:cd:0b:fd:12:5b:40:27:b9:9f:29:18:42:
         a8:ae:70:8f:6f:69:9d:50:19:f4:28:f8:5b:52:73:aa:7e:c1:
         7e:74:78:4f:b7:bf:e6:26:cf:67:f4:db:b3:33:39:7d:8f:8b:
         92:31:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:42 2025 by rpki-client