Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          l4NGWM32S7BTgFyJmVPudhAe66dpmetBXYdHe7HOyO0=
Subject key identifier:   7A:EE:77:39:D9:16:AA:E3:9B:CC:C7:49:84:F0:1A:D0:AB:A2:B2:BC
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       01964A0F286286FFCDF212CF316398192B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          12BF
Signing time:             Fri 18 Apr 2025 18:00:29 +0000
Manifest this update:     Fri 18 Apr 2025 18:00:29 +0000
Manifest next update:     Sat 19 Apr 2025 18:00:29 +0000
Files and hashes:         1: 2cILvfy_Y8sBWPqBEv-bTSv9h0w.roa (hash: 8uhOdIgcxmr8qEAMLIQFDmCHp28kcqGJRy+w98pxNfg=)
                          2: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: 0zBGXDO+xuVZae/z8oUA3TSUS1ToMqol0SeC5MEQ3qw=)
                          3: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=)
                          4: NS5b0PGbWotAIYMckbCTZQBj8Lw.roa (hash: MgQ66zaWbIbQhYagmVb0WjGZYhV+fCIGw9jelQ16jzo=)
                          5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=)
                          6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0f:28:62:86:ff:cd:f2:12:cf:31:63:98:19:2b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Apr 18 18:00:29 2025 GMT
            Not After : Apr 19 18:00:29 2025 GMT
        Subject: CN=7aee7739d916aae39bccc74984f01ad0aba2b2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:dc:80:06:93:24:48:b0:1a:d1:3e:c1:02:
                    e3:50:29:e0:59:3d:b1:77:55:42:f4:61:a8:58:59:
                    f3:03:cd:96:f8:32:02:35:5c:b6:58:94:c5:de:6b:
                    45:30:e0:78:39:6a:a8:da:90:c3:33:02:7b:5c:10:
                    d4:78:d4:36:90:58:9e:cf:d2:f4:8f:5c:8a:ac:a7:
                    6b:b4:33:66:80:86:a4:46:94:73:ec:fb:4e:2d:d0:
                    d2:36:fc:38:9a:54:94:aa:ef:c3:42:47:49:96:be:
                    15:a8:15:17:4c:c6:1b:21:2c:f0:6c:2e:d5:7a:df:
                    0d:6b:ac:0c:67:e6:e0:02:82:10:a9:90:c8:9a:b5:
                    4e:b7:50:d1:c8:f9:aa:f5:0f:9e:a2:f0:7a:ed:62:
                    71:d2:fb:c9:e9:99:82:79:d1:07:7c:66:d4:7a:76:
                    8c:ec:72:1c:67:7d:ad:d4:38:ac:41:d2:21:91:9c:
                    7f:df:2c:88:3a:bc:ab:01:4e:7d:54:b1:f4:b4:b2:
                    8b:db:6b:c1:41:28:a6:da:0c:ff:7e:2d:d3:dd:bf:
                    c5:81:07:1d:5f:9b:30:e5:40:89:dd:82:52:00:40:
                    87:a3:e6:e0:94:1e:4a:50:79:28:6c:d5:ed:82:25:
                    3b:b8:e0:32:ca:6f:d8:19:4d:ee:7b:d5:ff:20:c5:
                    68:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:77:39:D9:16:AA:E3:9B:CC:C7:49:84:F0:1A:D0:AB:A2:B2:BC
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:33:d3:86:01:61:f2:6f:69:61:e9:54:ef:f9:17:d4:76:dd:
         80:37:3f:3c:1d:e3:e9:e2:da:27:cb:e7:9c:a3:5d:c7:90:dc:
         4c:1b:1a:6a:2e:9c:d8:bb:72:32:f9:11:04:9e:ce:4b:90:eb:
         7d:4c:fa:58:3f:57:64:4a:4e:cf:4e:3e:64:92:49:b6:2d:19:
         4b:14:8f:42:b5:98:70:04:ce:e6:87:fc:d9:f1:ee:96:57:13:
         f1:65:54:24:0b:19:8e:e0:6c:71:f5:5f:49:f8:b0:46:71:fd:
         1c:70:f6:f7:cc:32:b5:a1:b8:82:8b:9e:d6:b0:1d:0c:95:7e:
         dc:f0:d3:6c:cc:25:21:59:53:26:52:49:94:2a:41:9c:e1:4f:
         d2:a7:0d:85:1b:e3:04:a6:a8:63:0e:eb:27:92:b4:3b:b7:aa:
         1b:f4:83:20:a1:40:9c:12:71:aa:7f:7c:7a:87:52:cb:6d:9e:
         82:4d:51:a7:1d:c5:b4:99:17:a1:e2:c3:aa:60:43:b5:ee:9b:
         22:a9:87:a8:9e:bb:b6:f7:b3:7f:0d:bc:17:4a:4a:65:4c:b0:
         40:48:f9:a5:3a:d7:bd:8c:0c:53:4b:4e:b9:08:26:1b:8c:fc:
         d3:95:29:ea:fb:e5:b6:c3:be:32:fd:b3:0d:b5:ce:44:26:59:
         5d:de:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:33 2025 by rpki-client