Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File:                     3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier:          /w4nQt1UTFUk5b0vMb7IclT5MB4W54+41l0PAXA/9DA=
Subject key identifier:   E1:A4:1F:40:4E:56:D5:96:06:0B:26:30:8B:27:C8:C6:03:4A:2D:69
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer:       /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial:       019676B114F8CD8A140DC253670E872707A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number:          015E
Signing time:             Sun 27 Apr 2025 10:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:38 +0000
Files and hashes:         1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: 0Ng7nuqrnFdH2qdgQBo34+XwBpuetAMLVNPi60c79+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:14:f8:cd:8a:14:0d:c2:53:67:0e:87:27:07:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
        Validity
            Not Before: Apr 27 10:00:38 2025 GMT
            Not After : Apr 28 10:00:38 2025 GMT
        Subject: CN=e1a41f404e56d596060b26308b27c8c6034a2d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:e1:bf:1d:23:25:bd:b7:6d:ab:f3:e8:40:
                    ee:05:c2:4c:4d:19:1c:25:40:22:2b:24:12:64:94:
                    52:eb:e4:ce:02:84:4e:17:84:a4:be:bc:88:2b:fb:
                    85:10:26:4d:7a:99:d0:3a:7e:68:26:6a:d3:96:f8:
                    1e:17:2a:74:68:99:61:db:0e:a9:ae:92:0f:9f:1b:
                    76:cd:fb:2c:52:a8:07:8b:c4:f7:73:92:de:cb:d9:
                    64:5d:fa:44:0e:d6:43:6e:be:5c:11:2b:8d:64:df:
                    f7:6f:81:12:89:32:38:8a:6f:f3:40:85:fe:17:a8:
                    52:67:9b:b3:4a:ec:73:88:67:c7:09:b9:7b:95:cc:
                    5b:23:75:62:f4:f1:05:e8:e5:98:46:f6:ce:1f:28:
                    04:5b:6a:f1:0d:b5:fc:b4:39:8a:d5:c8:fc:1a:81:
                    1a:de:02:08:a6:1e:53:fe:99:94:0f:80:33:b2:a6:
                    2f:f6:7f:27:6b:67:d4:3d:91:ca:a9:f4:59:da:1a:
                    bb:fd:7d:6b:e6:70:ed:a7:bf:11:cf:2c:1a:4b:5a:
                    af:da:3a:cd:e8:e6:c9:16:f8:64:8e:c6:ba:56:bd:
                    ab:e7:47:13:6d:f4:0d:2c:bd:fd:cb:e5:3d:5a:6e:
                    56:b9:6c:1b:3c:cc:c3:d7:d8:5e:89:2c:b4:60:0d:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A4:1F:40:4E:56:D5:96:06:0B:26:30:8B:27:C8:C6:03:4A:2D:69
            X509v3 Authority Key Identifier:
                keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:27:aa:0c:c9:7c:0b:b1:c2:21:96:d0:fe:26:f1:99:ab:
         61:ac:22:7a:b7:36:c9:37:45:9e:e7:db:a8:45:07:9c:7a:59:
         01:b1:fd:0c:aa:19:de:46:04:8b:3f:cc:02:00:c1:21:1d:d8:
         f5:fa:cd:04:84:e3:ff:58:e7:5f:06:e9:03:f2:4a:ab:b7:a8:
         e8:ef:4d:77:a9:f2:7b:80:e1:ff:fb:5d:a6:41:40:0b:09:33:
         86:05:63:71:3c:b6:f5:cc:ce:32:39:b9:16:87:ab:37:b0:71:
         83:75:37:6f:79:58:70:9a:70:5d:19:02:70:a3:e2:94:32:4a:
         92:ad:e9:e2:be:62:48:16:d5:44:cd:96:d5:46:06:dc:f2:fd:
         f1:ae:09:28:15:48:f9:ed:90:69:a8:d6:7d:f5:6a:e0:e7:91:
         03:1e:55:08:bb:64:bf:67:cd:3f:3b:60:7c:b5:8f:0f:18:26:
         98:a8:f2:dd:38:aa:25:0e:d4:42:14:37:20:eb:7f:30:7e:30:
         d7:d8:c5:d7:d0:f9:a0:80:24:6a:30:36:f3:29:42:35:e1:b0:
         c5:63:d6:3a:26:80:04:51:3d:ee:b4:8c:25:67:c4:4f:7f:77:
         82:1e:0c:da:1b:c9:51:34:11:61:f9:65:44:02:b2:4d:90:d4:
         d0:d0:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:45:42 2025 by rpki-client