Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File:                     3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier:          NF1xlNjWkL7bF8x8BddQMkPzE6EMayJmTcBOFl9GidA=
Subject key identifier:   A6:0B:8D:83:B7:6D:3D:2C:44:9D:7A:9C:97:B5:2E:2D:27:F2:29:63
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer:       /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial:       01974C31FF0270C2DFC52B921F1CDF8F34BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number:          150F
Signing time:             Sat 07 Jun 2025 21:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:34 +0000
Files and hashes:         1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: BQbLvKz3/P75zpO9U+VuPg/aAy3v9T582i2ezSDDYSw=)
                          2: bcS-hsDeO0gtgs28TEiHyvA81q0.roa (hash: CeE5W6otaxPvfHxN+lyC5C8i9p819egn6IV1iHF00Ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:ff:02:70:c2:df:c5:2b:92:1f:1c:df:8f:34:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
        Validity
            Not Before: Jun  7 21:00:34 2025 GMT
            Not After : Jun  8 21:00:34 2025 GMT
        Subject: CN=a60b8d83b76d3d2c449d7a9c97b52e2d27f22963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:a9:b1:dd:ed:82:82:eb:e3:5f:d3:4e:9c:
                    8f:b4:ac:f4:a7:15:1a:12:4d:d1:10:e6:2f:f3:0f:
                    b2:bd:4c:de:20:e2:f9:12:6b:1c:05:cd:bf:5e:23:
                    77:b1:91:11:af:2c:2c:a0:5b:da:0e:ea:82:c5:cb:
                    96:f8:df:d4:ad:11:73:42:ad:d1:ae:de:59:23:f7:
                    96:41:01:db:1e:8e:7d:c1:4c:1f:7a:b9:e8:5b:12:
                    e6:24:f5:f9:8b:d8:3e:90:df:c2:b0:f9:4f:d3:0d:
                    f0:b2:ea:53:85:ab:22:aa:aa:da:b2:e6:46:b2:73:
                    c2:6c:ba:7a:b8:29:42:34:29:15:d7:5e:6d:0f:ee:
                    19:79:7f:d7:1e:fd:86:7f:77:5c:c4:e5:2b:69:fa:
                    56:83:e4:70:e4:93:78:59:17:a1:0b:91:f6:bf:52:
                    fb:6c:b4:e3:ce:67:b7:3f:4e:fa:b7:0c:3c:4e:ad:
                    dc:96:c4:a4:42:69:01:ab:b3:63:81:08:52:67:64:
                    f9:36:1f:0c:88:64:ca:1b:f5:6f:37:0a:fb:11:ae:
                    58:22:f1:72:34:7d:b1:70:6f:30:d6:34:3c:bf:c6:
                    ba:bb:b5:df:e0:10:6d:b7:7c:f0:a1:b4:16:50:fa:
                    d0:67:bc:1c:ef:11:3f:01:2a:d8:99:9b:d2:42:1e:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0B:8D:83:B7:6D:3D:2C:44:9D:7A:9C:97:B5:2E:2D:27:F2:29:63
            X509v3 Authority Key Identifier:
                keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c5:aa:53:8b:77:ff:81:4e:29:1b:ad:69:b5:b3:0a:40:95:
         67:79:07:a8:6c:b6:bf:35:1c:ae:04:64:6b:e1:9e:ff:62:56:
         28:cd:1a:5d:d9:5e:8f:a9:52:53:1d:fc:09:48:71:e4:fb:28:
         b8:1f:85:19:5a:cc:80:a6:f1:7a:c1:79:95:84:2f:6a:ee:a1:
         ac:20:c0:66:a8:c0:b6:b5:65:79:da:36:07:91:8b:7f:84:16:
         23:15:01:9a:e5:2f:1d:f1:58:7c:7e:a5:f6:84:0b:f4:6f:ad:
         3a:e2:33:2e:c6:a0:f8:64:f6:1e:9e:d2:82:0e:f8:95:aa:28:
         63:f0:f9:5d:c0:59:f1:57:e8:3d:0f:d4:4e:fc:48:0e:aa:06:
         0c:21:35:4f:e0:bf:7a:a5:f6:f5:61:2d:65:34:09:a0:a3:f1:
         a7:85:f5:2e:4d:7d:3c:24:77:ca:00:01:5b:97:25:42:ea:15:
         d4:7d:c8:63:97:95:25:0a:66:61:ad:fe:21:0c:2d:94:50:70:
         1d:69:8f:2d:cc:75:9c:a4:1e:b8:20:ad:08:8d:af:72:be:fb:
         d0:6f:fe:59:4e:89:cb:70:a3:62:3c:d0:83:bc:3d:65:82:69:
         1c:af:38:dc:ad:d0:bf:52:af:98:ed:dd:c4:6a:5d:17:06:25:
         67:9d:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:57 2025 by rpki-client