Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File:                     3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier:          z4kgHLS+rf1bpXQYRB5xK3IrNR9JsHw0y+uEMbbe1lA=
Subject key identifier:   4C:5E:5F:56:EA:96:A6:9E:36:17:6E:EB:35:7A:A3:E0:37:C1:4D:CB
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer:       /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial:       01964DEBB90F1637EA9E2AA3625F8BC50145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number:          03C5
Signing time:             Sat 19 Apr 2025 12:00:15 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:15 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:15 +0000
Files and hashes:         1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: pQQlWCax0BlVb7RFAL5GppiYhWQfmSkavppSQiW2Z5o=)
                          2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:eb:b9:0f:16:37:ea:9e:2a:a3:62:5f:8b:c5:01:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
        Validity
            Not Before: Apr 19 12:00:15 2025 GMT
            Not After : Apr 20 12:00:15 2025 GMT
        Subject: CN=4c5e5f56ea96a69e36176eeb357aa3e037c14dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:3d:eb:54:6f:1d:0c:1a:5e:5c:00:14:dd:
                    75:35:e0:d1:78:24:7c:9f:53:90:57:cf:9d:61:d3:
                    a6:c9:8e:ad:f5:b6:0e:29:08:a5:89:a5:33:c3:e4:
                    86:9f:90:41:16:be:dd:50:30:45:1c:46:0a:55:37:
                    21:07:ab:f6:18:db:8d:98:e9:95:99:74:95:3d:bd:
                    80:bc:81:77:15:78:64:dc:9f:f5:27:12:b2:bd:0c:
                    28:cb:22:4f:a0:e7:d7:52:1a:5e:96:f1:04:03:ff:
                    8a:e3:45:9d:13:e5:44:ff:9e:1f:39:a6:a3:27:9d:
                    11:23:1e:b7:d5:26:e4:43:ea:70:3e:bb:e1:20:10:
                    74:9b:54:90:ba:5c:fe:69:bf:b3:c9:06:e6:ee:ab:
                    70:88:67:aa:9a:de:88:9c:60:a1:9b:06:54:21:99:
                    da:7f:ad:46:4f:35:a7:4d:f8:72:db:cd:91:5e:8c:
                    9d:58:e7:9c:e5:65:f7:40:28:89:32:a9:2d:62:0a:
                    d2:e2:80:42:bb:3d:a7:01:d4:36:f4:a9:0a:ac:3d:
                    b6:49:09:64:9a:0a:bc:24:f4:03:fa:b7:a4:7c:e3:
                    97:a7:f4:ff:62:9e:df:88:96:61:f9:0f:09:e7:06:
                    7c:39:94:fc:e9:b1:d2:6a:12:f8:4d:73:72:86:54:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5E:5F:56:EA:96:A6:9E:36:17:6E:EB:35:7A:A3:E0:37:C1:4D:CB
            X509v3 Authority Key Identifier:
                keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:4a:22:d8:6e:e2:e6:31:57:a0:8b:4d:70:83:2b:71:bd:ee:
         29:71:eb:60:d4:d9:86:3d:7a:ca:fa:71:be:33:9f:5e:e0:ce:
         13:fe:e0:f9:36:3e:c7:fd:13:47:62:c9:cd:aa:89:84:a6:1e:
         61:eb:23:05:b6:4d:a4:95:8d:99:e8:e8:90:dc:56:bd:da:45:
         25:2f:cf:65:d9:28:20:79:73:3f:c2:f6:a0:64:c0:51:d1:a3:
         19:a8:ba:13:12:ba:52:0b:c5:f5:22:29:a4:39:fe:1c:90:ad:
         6a:4b:fe:4b:fb:3a:1c:b2:93:9d:83:33:99:5b:c9:fb:6b:f4:
         11:c2:43:90:fc:a6:2e:48:c9:b9:0c:b4:a0:3a:b0:87:20:63:
         b6:da:67:cf:41:4d:5c:2d:cc:04:f2:29:18:70:2f:ad:66:66:
         98:fb:1d:55:d6:10:34:94:66:9f:0a:83:83:56:85:d7:c3:a6:
         44:9d:34:0b:af:c1:8e:db:10:d5:51:7a:8b:d4:2f:7e:13:21:
         ba:24:57:27:f3:08:0f:a6:cf:70:3c:ca:73:3b:dd:40:98:7c:
         9e:7d:92:58:40:e9:b4:e5:db:5a:d4:58:c2:29:86:5e:e4:5a:
         38:b9:da:59:2d:44:5c:0b:4a:e6:2f:c1:eb:dd:3e:e7:c2:ad:
         ac:77:42:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN67kPFjfqniqjYl+LxQFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODJkMmM3ZWI1ZmE1NDNlMzJmMWVlZTE5Y2QzNWE1Njcz
Y2ZhZTYwHhcNMjUwNDE5MTIwMDE1WhcNMjUwNDIwMTIwMDE1WjAzMTEwLwYDVQQD
Eyg0YzVlNWY1NmVhOTZhNjllMzYxNzZlZWIzNTdhYTNlMDM3YzE0ZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+M961RvHQwaXlwAFN11NeDReCR8
n1OQV8+dYdOmyY6t9bYOKQiliaUzw+SGn5BBFr7dUDBFHEYKVTchB6v2GNuNmOmV
mXSVPb2AvIF3FXhk3J/1JxKyvQwoyyJPoOfXUhpelvEEA/+K40WdE+VE/54fOaaj
J50RIx631SbkQ+pwPrvhIBB0m1SQulz+ab+zyQbm7qtwiGeqmt6InGChmwZUIZna
f61GTzWnTfhy282RXoydWOec5WX3QCiJMqktYgrS4oBCuz2nAdQ29KkKrD22SQlk
mgq8JPQD+rekfOOXp/T/Yp7fiJZh+Q8J5wZ8OZT86bHSahL4TXNyhlTCjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExeX1bqlqaeNhdu6zV6o+A3wU3LMB8GA1UdIwQY
MBaAFNyC0sfrX6VD4y8e7hnNNaVnPPrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgt
MDM5ZGVhNTA2OTRlLzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgtMDM5ZGVhNTA2OTRl
LzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0oi2G7i
5jFXoItNcIMrcb3uKXHrYNTZhj16yvpxvjOfXuDOE/7g+TY+x/0TR2LJzaqJhKYe
YesjBbZNpJWNmejokNxWvdpFJS/PZdkoIHlzP8L2oGTAUdGjGai6ExK6UgvF9SIp
pDn+HJCtakv+S/s6HLKTnYMzmVvJ+2v0EcJDkPymLkjJuQy0oDqwhyBjttpnz0FN
XC3MBPIpGHAvrWZmmPsdVdYQNJRmnwqDg1aF18OmRJ00C6/BjtsQ1VF6i9QvfhMh
uiRXJ/MID6bPcDzKczvdQJh8nn2SWEDptOXbWtRYwimGXuRaOLnaWS1EXAtK5i/B
690+58KtrHdC+A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:28 2025 by rpki-client