Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          078ZYWGWnEZ+AlDvG3C4yrw8F9EQyB823oE/p82Fjp4=
Subject key identifier:   0E:F0:2B:A6:ED:0A:39:0F:5B:42:39:53:D9:7C:85:A4:5E:E0:E4:EF
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       0197703EEB1F5BEA4B0B35C00ABB25B16FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          0A11
Signing time:             Sat 14 Jun 2025 21:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:01 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: H7dI7O4p0CuwUXkORqoJluQymYRtOvghGkx4cbJqcx8=)
                          2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:eb:1f:5b:ea:4b:0b:35:c0:0a:bb:25:b1:6f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Jun 14 21:01:01 2025 GMT
            Not After : Jun 15 21:01:01 2025 GMT
        Subject: CN=0ef02ba6ed0a390f5b423953d97c85a45ee0e4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:7c:36:f5:a3:9b:6d:d8:42:79:79:c4:48:
                    dd:c6:29:2e:bd:86:d2:fb:fb:b6:71:3f:cd:5c:f5:
                    ca:24:5f:34:9d:9b:bc:cc:49:d8:d1:6d:6c:54:52:
                    c0:79:52:c4:82:61:8e:81:d5:f0:02:8d:7a:7e:d7:
                    df:88:9a:30:61:65:fb:87:8a:e7:c3:a4:af:71:9a:
                    36:02:52:93:6e:ee:23:05:4b:23:4b:76:33:e6:60:
                    8a:eb:99:ec:72:6d:f7:6c:dc:18:eb:84:d0:d3:e4:
                    ad:b5:2d:3d:26:3c:09:2b:8d:ee:68:89:50:cb:09:
                    b4:f7:21:b9:f4:90:96:df:dd:92:64:63:cf:1d:be:
                    82:f9:27:3d:f5:65:7e:fd:8e:02:e6:a3:92:cf:c6:
                    a1:76:02:dd:5c:f4:6f:bb:26:6b:b2:f6:8b:09:b3:
                    21:5b:91:89:d0:04:78:74:df:5d:ec:fa:00:cf:a7:
                    62:50:93:21:67:d6:4f:78:af:bc:c6:63:30:8f:93:
                    03:50:87:2d:60:ea:da:8e:65:dc:76:43:bd:58:4b:
                    f0:3c:8d:80:fb:75:aa:6b:c2:13:0d:5a:63:38:59:
                    77:91:3e:fa:1e:1c:96:16:84:b5:a3:e2:9e:49:02:
                    8e:33:e8:24:3d:eb:34:8a:d8:d7:ea:36:7b:6a:fa:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F0:2B:A6:ED:0A:39:0F:5B:42:39:53:D9:7C:85:A4:5E:E0:E4:EF
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:29:33:91:5a:81:c2:c7:b8:89:85:e5:21:52:9a:97:4e:
         bc:b2:4e:40:ae:37:c3:7b:46:ab:69:d2:42:e6:ca:ac:a4:23:
         73:34:31:f8:56:69:5d:6f:49:c1:d2:dc:7e:6a:12:8f:85:6e:
         97:ae:fb:5b:d5:8a:f6:41:32:75:9e:f7:98:5c:61:3c:5a:ae:
         86:eb:a8:cb:25:ee:64:52:e8:1a:4e:3a:f1:9c:94:ea:8c:49:
         ff:b3:4f:89:25:dc:f4:96:2c:7e:1b:07:77:e0:b5:7f:85:04:
         e6:25:50:64:7a:89:15:20:67:1f:4e:e6:7d:26:a7:d1:73:39:
         da:b2:e5:9c:94:2d:43:6a:75:0e:92:3c:1f:00:49:b1:f8:f2:
         ef:44:ec:b1:48:2a:17:13:e9:60:ae:0a:ae:36:fc:64:02:0b:
         e5:ed:cc:67:2a:d6:57:10:34:1c:13:67:d8:e3:2d:2b:fa:82:
         b8:b9:66:15:22:13:6c:a5:5c:43:f0:38:42:44:b9:c1:31:a0:
         c2:3a:39:ba:d4:80:b2:2e:e8:52:4d:50:bc:e7:ea:07:91:b0:
         98:61:14:27:ff:e4:de:81:6a:c6:db:78:53:6f:20:f0:48:75:
         8a:6c:88:0a:cc:61:04:90:0b:44:f8:a4:2e:35:21:7a:4f:5e:
         13:89:7c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:48 2025 by rpki-client