Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File:                     3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier:          iANc2ucdxGf6FNpSdLQxSKTCYo7K0ZJJHEJeDJ3rbE4=
Subject key identifier:   58:D8:67:B5:7C:84:7C:E4:05:F4:57:D3:AA:12:38:A2:32:7A:0D:62
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       019681D99B061652A7A0FCD61772B8B733B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number:          03C6
Signing time:             Tue 29 Apr 2025 14:00:43 +0000
Manifest this update:     Tue 29 Apr 2025 14:00:43 +0000
Manifest next update:     Wed 30 Apr 2025 14:00:43 +0000
Files and hashes:         1: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (hash: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=)
                          2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: EP2VbeVGsgUqClGOkaSVMBKDQ37skYSjJM/ee8sYck0=)
                          3: LW11wESbT2hocwdKYSbs6P71AKA.roa (hash: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=)
                          4: wGmLy9fCHGSdb1IR1hi3jtBm_nU.roa (hash: EtrSnLCCgz0LzD/1buNZsptNBEqMbZQGIw+M8iextIM=)
                          5: zuXVABH3iQHva6C3x_7o7gzuXEY.roa (hash: oBzqdMlIWS4N+t9dxQHDBXhwNKLOQHnlyrSOj0n4CXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:d9:9b:06:16:52:a7:a0:fc:d6:17:72:b8:b7:33:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Apr 29 14:00:43 2025 GMT
            Not After : Apr 30 14:00:43 2025 GMT
        Subject: CN=58d867b57c847ce405f457d3aa1238a2327a0d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:a0:e8:b2:31:20:97:a8:70:3d:7a:b3:22:
                    09:23:d6:18:74:57:f2:fb:3d:92:17:c1:eb:54:94:
                    14:54:aa:d2:18:ed:ed:34:5a:1d:6b:81:d9:94:af:
                    11:97:c3:55:25:1f:ce:95:8e:a0:af:9e:84:56:fd:
                    3a:e4:54:45:53:29:43:24:69:6e:af:b3:e7:9b:bc:
                    2f:bc:d6:3b:81:37:b7:68:71:2d:93:e7:48:d7:a7:
                    59:4f:42:8a:04:b2:55:5b:2e:05:9a:1a:70:10:7e:
                    2d:0a:9a:ec:6a:67:2e:1e:1d:44:66:50:94:cc:22:
                    20:64:f9:a4:51:c3:eb:a0:f9:43:70:7e:ca:41:8c:
                    1e:a7:93:92:c7:98:87:b3:70:53:9c:d4:6f:42:a8:
                    ab:c4:fc:5c:32:be:18:32:4a:9d:10:59:6b:5a:3f:
                    4f:c4:c5:a7:a7:b7:d7:55:b3:83:9b:bc:0a:96:20:
                    ee:4f:cc:27:70:16:3d:3f:c4:c8:9c:01:f2:93:0c:
                    63:b5:70:c3:dd:ff:79:6b:da:bb:b0:de:e5:c3:3a:
                    ff:b0:e4:f8:b4:d5:ea:60:7a:0c:a0:44:ac:88:ea:
                    db:8b:3c:1a:e2:ba:a4:20:c6:a7:d0:bf:9b:a7:5e:
                    c3:29:b5:84:2a:cc:c9:ef:9b:c1:91:19:b5:df:72:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D8:67:B5:7C:84:7C:E4:05:F4:57:D3:AA:12:38:A2:32:7A:0D:62
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fb:26:67:06:cf:14:58:de:77:ee:74:60:97:2a:a8:6f:04:
         4a:95:57:a5:a0:c1:6c:12:2c:b4:ad:6e:91:cd:db:b2:3e:6c:
         1d:6f:10:dd:fb:0e:2e:9c:fd:bc:39:fa:57:b9:e8:d0:ad:d0:
         09:63:94:e4:1e:f1:c9:8d:49:23:7c:b3:e3:47:f4:fe:67:53:
         eb:1b:ad:a0:f4:80:2f:e5:94:db:79:ae:9d:76:06:25:a1:70:
         e4:58:5d:91:0e:2f:38:0d:4a:31:9f:59:01:3a:7f:f0:34:de:
         db:25:72:89:ff:a3:90:aa:28:4e:4a:a6:86:f0:0c:0d:ee:cb:
         33:ce:71:a2:b0:4c:c4:7c:2c:6b:1f:fb:3b:71:8e:e9:55:83:
         e3:39:bd:5c:3b:41:d1:56:fe:36:97:41:13:26:a9:3d:b6:2c:
         93:dd:5f:aa:c4:72:03:ab:f6:a2:d0:88:29:31:64:88:3d:64:
         27:78:32:b5:79:48:e2:f1:d1:f2:ac:94:0e:00:c6:5d:08:4c:
         cd:4c:7e:49:48:d5:c6:e9:c0:2b:3f:9a:7e:e0:bb:c4:45:97:
         f1:1f:f8:10:3b:c3:e4:9f:c6:44:c4:57:14:d0:57:bb:a0:c4:
         75:86:db:d9:bd:2b:e1:2c:b4:65:d1:01:ef:63:d9:2a:7f:06:
         29:2e:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:38:41 2025 by rpki-client