Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File:                     3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier:          MGIo1PLUcZ8Yrr5i/FDWVt0u4+tAGtHKiLbHEO4FgAo=
Subject key identifier:   76:B1:5D:DE:DE:EE:D1:B3:1D:EF:06:EA:64:46:B4:BA:C7:48:80:A1
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer:       /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial:       01950F7DA42E151EFBAAF78EBA571E4254F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number:          0A7E
Signing time:             Sun 16 Feb 2025 16:00:47 +0000
Manifest this update:     Sun 16 Feb 2025 16:00:47 +0000
Manifest next update:     Mon 17 Feb 2025 16:00:47 +0000
Files and hashes:         1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: NhHm2eZWcq4pnCI9VAM7oKdZJg1UGGCNWKqoCK2syQ4=)
                          2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0f:7d:a4:2e:15:1e:fb:aa:f7:8e:ba:57:1e:42:54:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
        Validity
            Not Before: Feb 16 16:00:47 2025 GMT
            Not After : Feb 17 16:00:47 2025 GMT
        Subject: CN=76b15ddedeeed1b31def06ea6446b4bac74880a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:38:27:3f:d0:af:a2:0b:61:15:e9:39:e0:
                    50:3b:4c:80:44:6b:cb:4f:2c:34:f4:67:c1:19:51:
                    b0:07:61:21:58:df:d1:83:83:c6:50:3b:3c:de:d6:
                    a7:7e:e2:2d:14:21:e1:f4:c0:e3:5f:eb:a3:b7:59:
                    f3:7c:e9:ee:4a:1c:80:4a:b9:3b:45:11:e6:0f:bf:
                    cd:29:5e:96:67:a7:99:27:05:1e:93:48:77:3a:18:
                    bb:8e:5e:83:3c:a2:bf:0e:ef:08:b0:b2:ad:ce:74:
                    7b:ae:6c:a5:71:75:7a:2a:97:92:5e:9f:2c:6b:6b:
                    1b:38:20:24:45:6e:59:08:25:96:c0:4e:95:8f:c1:
                    05:e3:c6:04:78:64:9d:da:2e:4a:2a:8f:86:73:13:
                    46:8d:ff:30:d8:22:66:4f:0c:66:31:1a:0c:24:0b:
                    d0:d6:e2:00:42:7b:c8:e5:ae:21:90:88:6f:7e:84:
                    4d:1e:b8:c1:9d:1a:3f:20:68:2a:5e:d6:5c:26:8b:
                    8f:96:dd:1d:17:da:76:62:41:50:04:aa:e8:f9:84:
                    a4:d0:fc:46:11:f6:38:64:6e:b2:23:a0:85:57:e2:
                    5c:70:66:82:7e:18:50:eb:74:82:0c:18:b9:44:f8:
                    e9:ee:16:1f:b6:61:e7:ae:df:e1:f4:a4:e8:9b:30:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:5D:DE:DE:EE:D1:B3:1D:EF:06:EA:64:46:B4:BA:C7:48:80:A1
            X509v3 Authority Key Identifier:
                keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:2a:13:dd:97:0f:6d:ce:82:09:3a:22:7d:f5:4d:a8:ec:
         ea:5b:dc:c1:e0:46:53:15:df:62:c6:bf:9d:8d:be:10:12:f1:
         f7:ba:58:eb:b5:7a:a5:f3:ac:55:6c:58:77:45:1d:c6:eb:b2:
         9c:71:a4:04:8f:b4:a8:b2:73:f7:6b:84:2f:8f:8f:0e:ae:fa:
         d4:41:5b:70:58:a0:61:71:14:b4:20:ee:6f:df:a9:b4:4d:46:
         90:81:ae:3c:82:a3:0e:79:65:5c:51:45:60:a9:79:14:95:91:
         44:a0:8f:a8:3f:0b:6e:8e:23:13:a8:71:14:51:ad:49:e2:3f:
         cb:12:e7:a3:a9:67:72:b2:d2:f0:3a:f8:b4:e3:8d:c2:05:ae:
         c6:43:da:99:4d:1f:b2:a2:1d:97:c0:ad:7e:e2:53:b4:29:27:
         26:f1:b4:2b:eb:6b:12:75:10:d7:03:ce:1c:f0:f0:80:9b:7c:
         01:f9:0c:53:6b:20:7d:35:49:46:d6:9b:d6:71:65:12:d3:ce:
         61:5a:a1:43:7e:8b:fb:77:84:cc:ba:2b:6f:e0:2e:5e:20:34:
         14:50:c8:0f:4b:3a:24:b1:39:39:42:69:84:6f:9c:5b:93:cc:
         6d:6c:c5:c3:4e:9f:2a:72:18:0e:71:96:93:6d:67:95:5d:31:
         d7:ee:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:19 2025 by rpki-client