Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File:                     IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier:          bm6Qd/PV530MMjQTzTP+tHIKrE7UXZXMF2czlGMh2EY=
Subject key identifier:   76:88:87:7A:C8:0D:40:DF:42:96:AA:05:A6:6F:C3:28:8F:35:2F:67
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer:       /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial:       01977C79C919EE6C464F5313EA40E4B4793A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number:          03E0
Signing time:             Tue 17 Jun 2025 06:00:45 +0000
Manifest this update:     Tue 17 Jun 2025 06:00:45 +0000
Manifest next update:     Wed 18 Jun 2025 06:00:45 +0000
Files and hashes:         1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: Tdz5NkVcrNOFdltUc9raWxXECxs54JEMVi42ItO/9Zk=)
                          2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:79:c9:19:ee:6c:46:4f:53:13:ea:40:e4:b4:79:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
        Validity
            Not Before: Jun 17 06:00:45 2025 GMT
            Not After : Jun 18 06:00:45 2025 GMT
        Subject: CN=7688877ac80d40df4296aa05a66fc3288f352f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:7a:83:f4:fd:dd:10:12:16:a5:71:bf:50:
                    2d:eb:0d:8a:ca:1e:16:16:37:39:d5:3d:f2:32:9f:
                    d7:b0:9f:11:7a:23:46:1f:aa:a0:da:6a:2e:f5:d1:
                    60:ea:0f:5b:db:23:9e:f0:c8:9e:bc:21:39:d0:5a:
                    7c:94:fd:0a:2e:91:8f:67:24:a3:0e:97:08:ca:e0:
                    da:74:12:ee:50:36:c9:1f:9b:58:bf:89:d5:87:43:
                    4c:13:03:69:e2:f8:aa:9b:6f:5f:6c:47:64:27:1c:
                    48:b6:c9:78:12:fb:6e:3a:8f:09:24:22:8b:ea:d1:
                    5f:69:25:21:96:5b:b1:f5:bd:76:57:ce:de:89:fd:
                    b8:21:db:3b:dc:69:ac:79:b9:bb:03:26:0a:67:ac:
                    ce:06:18:09:ae:87:08:8a:eb:c2:24:35:cb:b9:28:
                    6a:8f:d4:49:52:0e:f2:0d:15:89:41:d8:26:6e:fc:
                    da:a1:7a:c0:06:9a:35:a5:3d:41:07:6f:b8:00:a8:
                    63:7a:9d:2b:c7:3b:e8:82:74:52:79:a3:a3:0b:09:
                    7b:78:15:84:20:30:19:11:d2:39:ca:f8:58:f8:c7:
                    ba:28:a8:bb:e3:75:03:b0:f9:29:93:af:86:93:0b:
                    eb:ca:4d:e0:a3:54:2b:4c:07:b1:13:c9:dc:da:89:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:88:87:7A:C8:0D:40:DF:42:96:AA:05:A6:6F:C3:28:8F:35:2F:67
            X509v3 Authority Key Identifier:
                keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f3:e3:62:85:9f:87:24:6f:64:08:84:8f:8a:41:29:d5:ac:
         30:c1:e9:fd:c2:22:dc:fa:10:8f:2e:9f:75:8f:23:4a:0e:9d:
         1c:e6:30:d2:d1:cb:79:08:52:6b:be:69:b6:85:2f:f7:45:d6:
         b0:f9:ba:4c:e5:b9:49:b0:53:1e:c1:59:29:2c:bf:b2:46:81:
         48:c2:c0:f0:d7:c1:50:87:b2:1b:03:c5:10:69:4d:48:b3:b0:
         20:92:15:69:aa:12:b6:76:9a:1a:e4:d3:2d:6b:a1:36:78:d8:
         44:a5:b3:ae:a8:12:fb:12:39:38:98:86:f0:55:f3:b9:7b:be:
         34:1f:ec:c2:ac:4f:5d:a8:07:32:b4:d2:0e:72:28:05:51:d5:
         32:2c:b5:c9:cf:63:92:29:0d:ff:e2:f1:23:a6:21:26:77:da:
         72:61:75:67:28:e5:4b:57:0c:81:87:0d:85:57:87:ca:b2:81:
         ff:0d:3c:1f:c0:20:06:2d:3b:e1:0d:46:ae:ed:95:98:a1:64:
         3e:00:90:c1:d3:fb:a9:39:f0:50:41:35:49:94:23:f1:31:73:
         e6:ae:ba:e8:d0:79:0f:68:ba:b5:6b:ca:3d:d0:e7:4b:84:f9:
         eb:75:aa:98:1d:ca:5f:f7:32:c8:2d:99:37:7c:55:f9:06:0f:
         44:25:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:20:39 2025 by rpki-client