Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
File:                     3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft (raw, json)
Hash identifier:          3MlNhJtLrrV2xro+6Bi1n0/31yU0y2t/pbF1T1cBpIY=
Subject key identifier:   5B:E3:9A:B9:B9:62:AD:08:D7:92:61:D5:35:27:0A:06:9B:FD:68:BA
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Certificate issuer:       /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial:       01978661681C204CCCA7332EE1C9F2DF2C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
Manifest number:          159F
Signing time:             Thu 19 Jun 2025 04:10:19 +0000
Manifest this update:     Thu 19 Jun 2025 04:10:19 +0000
Manifest next update:     Fri 20 Jun 2025 04:10:19 +0000
Files and hashes:         1: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl (hash: e8VMDs//kVIAln7DZVMhY7FyFszwis5jVrIWb3/5elo=)
                          2: G7UCO8Vqg1runszmtQBQmkn8DqY.roa (hash: 5UbSXfgLxbMjgxcmGz7miCGa9V5+dL7nrdVkUhcTIyw=)
                          3: Naw5SESv6F-7xw8AlzszEkwan9U.roa (hash: Mbo3Jub5v2CNI5HfXQyreqoCmBqpJFtpKsAqTMduHgY=)
                          4: ZIeftz8g6-61T0mBa0ClKG58PyI.roa (hash: bAh6A9SIv0Nw80HjsuLV5ZZhtF7rRyou/1nJ2bbqVfk=)
                          5: d_85lmU1RpGhphRgrIhRhEl6fKg.roa (hash: VpMz8KT7GjSVAfis0Pkct4zgkIxNQjh2YesKqba5huE=)
                          6: i0b6D-rT2FVTM19LqLSh15LYCRI.roa (hash: eAyg6w88G2QnqmNNJFWUnwDhKYl0dByuSLnfnUOvCnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 04:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:61:68:1c:20:4c:cc:a7:33:2e:e1:c9:f2:df:2c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Validity
            Not Before: Jun 19 04:10:19 2025 GMT
            Not After : Jun 20 04:10:19 2025 GMT
        Subject: CN=5be39ab9b962ad08d79261d535270a069bfd68ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:8c:82:38:82:ce:7e:a0:43:a2:ca:06:95:
                    fa:eb:f3:03:51:d9:1a:6d:db:c0:2f:61:a5:16:cd:
                    ab:64:99:43:25:8a:a2:b2:26:3a:7e:34:4b:48:f7:
                    2b:b9:d9:f9:53:4e:b8:29:23:76:7c:d5:8c:f0:07:
                    db:b6:cf:86:28:df:4d:0d:c7:c7:f0:69:9e:cc:bc:
                    a4:bd:f9:90:37:92:3e:7e:c5:77:cb:fc:c3:3c:c0:
                    14:89:dc:4c:59:a0:3d:2f:d9:55:6b:c8:fc:9d:d3:
                    e0:43:bc:87:63:6a:1f:8f:d0:a1:7c:43:16:81:26:
                    2c:62:65:4d:e5:5d:53:3d:f5:92:4a:7d:2d:3e:ad:
                    d7:7e:d2:9e:16:f8:e1:d1:4f:e6:47:7c:60:ab:ff:
                    89:16:99:74:16:54:45:81:15:8f:b8:27:f0:0a:c5:
                    94:a7:55:ed:dd:1b:fe:b0:c5:15:f4:a4:08:cc:75:
                    45:ea:c1:74:31:8f:03:53:1a:2b:d7:22:39:42:72:
                    02:7a:49:f5:5f:87:8f:2e:61:97:ce:15:a0:7f:e3:
                    d4:a1:a5:e7:ce:7a:38:58:19:d7:81:8d:80:ab:c9:
                    74:81:54:ca:5f:5f:83:79:43:1b:2c:61:e8:2b:be:
                    0a:9a:e6:7f:02:6a:84:6c:8b:3a:18:86:a5:15:bb:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E3:9A:B9:B9:62:AD:08:D7:92:61:D5:35:27:0A:06:9B:FD:68:BA
            X509v3 Authority Key Identifier:
                keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:6b:67:02:fb:38:40:2e:e1:45:d7:a9:25:fd:05:39:39:
         81:78:51:5e:1d:84:33:bd:b7:77:79:8a:4e:42:0d:62:0e:0b:
         17:2d:76:85:9d:91:4c:fc:f3:8c:b1:57:7a:fe:8e:7b:19:38:
         f4:ac:94:59:d2:83:0f:52:37:d5:45:14:a0:17:0a:c5:4b:1c:
         f1:12:c1:dd:5c:37:0f:d2:14:60:d1:96:c9:83:eb:22:b9:74:
         e1:cb:7c:1f:b6:5c:30:b9:3d:89:d6:76:a1:39:e9:f2:1d:4e:
         a0:65:5c:b3:81:0a:0d:ba:87:99:99:c2:37:de:31:cc:5f:a3:
         ea:97:aa:a1:dd:4b:6b:36:d2:5c:9d:2d:34:ad:ee:64:3c:cc:
         98:bd:f1:03:13:6b:8f:ec:4d:ff:73:0f:ea:e1:14:fd:97:96:
         5d:39:dc:fa:6d:21:71:69:fb:44:0c:39:fa:57:f4:14:55:34:
         2b:8e:1f:0a:17:82:ce:6e:cd:d2:ec:1a:17:2e:da:13:8f:98:
         79:3f:28:e1:41:31:f4:42:15:d9:ca:6f:1f:10:ae:39:25:9f:
         b5:d7:85:f3:4f:d8:47:ae:75:4c:dc:38:1a:32:2b:32:e7:03:
         cd:ea:cb:61:61:8a:7e:73:ba:80:81:c2:48:2a:5e:90:6a:6a:
         9a:87:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:49:05 2025 by rpki-client