Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          Zo3R6VRGdSB4RimHyXTz11gOn137l52STFkZ8NEE0uU=
Subject key identifier:   13:B4:69:14:E5:48:B1:F0:FD:FA:FA:79:0F:83:80:C8:FA:B6:70:85
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       0196771F020408AEE4703B7517B50DFADEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          06E5
Signing time:             Sun 27 Apr 2025 12:00:42 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:42 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:42 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: v+EP+eq9eP+4NKr7ZNhNqE0b+XDBuC2pizSaz91r68U=)
                          2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1f:02:04:08:ae:e4:70:3b:75:17:b5:0d:fa:de:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: Apr 27 12:00:42 2025 GMT
            Not After : Apr 28 12:00:42 2025 GMT
        Subject: CN=13b46914e548b1f0fdfafa790f8380c8fab67085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0f:c1:66:aa:1c:b4:40:09:9d:42:73:ad:37:
                    8b:c9:b3:ef:40:24:c9:0e:7d:63:8b:00:cc:37:e4:
                    e6:87:d4:b6:c5:86:2d:b4:f7:9e:1a:6c:cd:75:73:
                    d4:bd:b4:9f:03:2a:a3:62:7b:5a:7a:b0:f9:ff:7e:
                    22:73:23:90:dd:13:bd:3b:4e:a4:57:3c:d2:3b:b3:
                    18:2c:1d:a9:6c:e6:de:43:71:1c:cc:59:e2:9b:e4:
                    41:c0:44:55:a2:fc:7a:29:14:7f:26:f5:17:b4:b8:
                    5c:06:b0:30:60:92:9c:fb:b8:34:95:0f:b3:91:d2:
                    ef:4c:aa:1f:67:19:66:40:83:c6:e4:9b:a6:9f:33:
                    2b:ba:e3:82:03:45:7f:fb:be:20:fe:94:bf:4d:90:
                    45:1d:48:cc:06:97:0d:dc:ab:0d:66:f3:9f:cb:f6:
                    59:00:9a:76:1b:62:75:bc:c7:29:68:6a:d8:29:29:
                    f1:59:e3:f5:55:63:42:b2:ba:e7:95:0e:36:3d:24:
                    d6:29:49:9f:37:d2:9b:00:23:69:10:5c:b3:f1:df:
                    8d:05:66:7d:74:25:29:65:ca:98:38:63:0e:23:3b:
                    b9:67:68:47:66:71:2f:9e:cb:ec:2a:93:ef:af:51:
                    96:4b:44:55:69:4f:2f:9c:04:f0:e7:2f:f4:0f:f5:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B4:69:14:E5:48:B1:F0:FD:FA:FA:79:0F:83:80:C8:FA:B6:70:85
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:2e:04:23:e1:75:e8:d6:ad:3a:07:c7:9c:b1:f3:b8:a4:
         bd:4e:7c:03:6c:60:87:9e:46:ad:2c:7a:32:6d:21:01:79:34:
         05:40:88:1b:87:4d:69:1f:f9:f1:47:d9:05:04:ce:f4:ef:72:
         61:da:ed:c6:9c:b8:ca:bc:3f:48:56:93:a2:71:5f:8b:f1:97:
         9b:0b:cc:59:e4:42:95:62:94:10:46:65:e3:84:f9:6f:b2:b1:
         19:59:e0:ff:ce:c8:b5:02:60:d6:ae:a7:c8:4d:6f:31:4e:be:
         fa:d3:57:ca:e1:21:3f:d1:e5:c5:38:d3:a7:c5:a6:19:65:dc:
         c8:11:c0:e8:02:9c:8d:e3:5a:77:d8:f9:4c:56:91:17:5f:8a:
         8a:af:2f:37:d2:b8:af:ed:aa:45:1a:de:a7:9c:8c:17:fa:f7:
         40:41:cd:93:33:ed:5b:d2:96:4d:96:e8:2a:f3:87:6f:ef:93:
         a0:8f:a4:5a:08:e9:99:fe:47:1b:99:0f:63:8f:89:d6:67:b1:
         81:2d:60:c1:49:c4:ce:22:ef:df:47:f3:4a:b7:7c:1d:e4:47:
         58:79:e2:13:59:e1:c0:02:a5:c9:cb:df:df:49:a7:38:a2:52:
         73:64:12:82:f0:27:94:14:08:b9:05:93:f5:60:9e:62:32:24:
         d5:4a:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:40 2025 by rpki-client