Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File:                     3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier:          ifgrP08KBg/3N06LFzJZxpENFqmET8wa/JdFalrLn24=
Subject key identifier:   B2:75:7D:F4:59:90:09:A6:EB:73:F0:9F:31:63:C7:6A:99:3D:97:1E
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer:       /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial:       019761023C63045BDC7D6FB8088DADFD38E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number:          0359
Signing time:             Wed 11 Jun 2025 22:00:25 +0000
Manifest this update:     Wed 11 Jun 2025 22:00:25 +0000
Manifest next update:     Thu 12 Jun 2025 22:00:25 +0000
Files and hashes:         1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: 3nidEFYLrTkiA0YINWh9yFdWvqIn8jr1GUhj06iIxRg=)
                          2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:02:3c:63:04:5b:dc:7d:6f:b8:08:8d:ad:fd:38:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
        Validity
            Not Before: Jun 11 22:00:25 2025 GMT
            Not After : Jun 12 22:00:25 2025 GMT
        Subject: CN=b2757df4599009a6eb73f09f3163c76a993d971e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:74:62:2c:26:6a:01:e9:b6:87:86:6b:34:
                    ae:a4:23:07:8c:78:ce:01:87:68:13:80:40:26:11:
                    10:ce:42:3a:d3:0e:1e:89:83:11:f6:dd:a1:54:06:
                    ec:94:61:52:1c:60:c4:7e:c5:29:87:9b:a7:dc:5a:
                    36:c7:1a:12:67:e3:cd:71:bf:78:7d:8d:a6:c5:15:
                    fe:f0:9e:7f:ac:4a:b3:37:0b:d2:26:6a:d1:83:00:
                    69:34:d5:30:b6:eb:d5:a4:32:4a:4b:a3:c8:a1:47:
                    38:c2:0c:e6:9c:c7:5c:0a:d2:73:6e:52:83:38:89:
                    f5:58:25:3e:ae:28:54:6f:19:0f:e6:9b:34:92:61:
                    78:93:81:b7:b6:e3:0d:d1:c8:87:7f:36:f5:da:15:
                    e2:1b:09:07:0c:51:5e:e4:4e:1e:cf:00:67:35:05:
                    6b:8a:ad:90:a5:19:93:4b:94:97:b0:dc:20:ed:46:
                    f0:82:b1:05:fe:37:b4:46:b8:1c:cc:5e:a7:ac:94:
                    a7:85:61:63:53:f5:d3:ec:ae:e5:c7:0e:e7:ec:6c:
                    1b:e9:ea:55:c3:85:54:79:5e:3f:5b:bc:ca:d3:c0:
                    7d:2b:f9:8e:97:2c:61:95:94:b0:02:78:65:17:e2:
                    b0:3b:dd:83:17:43:1a:58:77:95:f3:83:fd:f7:01:
                    52:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:75:7D:F4:59:90:09:A6:EB:73:F0:9F:31:63:C7:6A:99:3D:97:1E
            X509v3 Authority Key Identifier:
                keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:7e:93:20:9e:71:df:8d:6f:a5:ae:16:74:bd:46:b9:6b:a7:
         f1:8f:99:f5:e6:57:eb:84:45:f0:d1:83:12:ff:dd:2b:a9:a6:
         c9:9e:e2:ee:00:18:48:a5:78:73:07:bf:38:1e:b6:bf:d7:44:
         f8:5b:be:8d:29:f2:a7:41:79:7d:13:09:65:83:f6:03:b0:bf:
         a8:25:45:b3:91:55:8b:71:5e:a5:df:fe:33:ef:9e:f8:c4:36:
         4e:37:4b:a0:85:fb:16:63:67:29:ee:b6:2e:5e:99:f9:c4:fc:
         ca:0c:38:ab:95:1e:64:1e:18:27:d4:d5:1a:22:1e:ed:a2:b3:
         49:53:ee:1b:04:b5:32:e0:9e:b8:b6:65:c3:d6:2c:9f:cc:be:
         c9:87:c7:f8:99:ea:78:71:ec:6b:10:7f:2a:7e:e8:1b:49:3e:
         84:f0:64:10:db:26:e1:17:5a:c3:0c:2d:37:e0:17:83:4d:4a:
         d0:3e:fe:e8:c6:11:a3:a5:1b:ba:1b:f4:c7:56:21:ff:d1:90:
         2a:15:2c:42:6f:e3:6b:91:88:f7:7c:92:f9:2b:16:58:79:9f:
         fe:cf:14:32:7d:ff:fe:96:99:9e:2a:51:d9:99:56:a4:65:3e:
         12:f5:ce:09:be:e0:4b:fb:ba:97:97:72:be:e8:6c:4f:a3:a6:
         11:db:07:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhAjxjBFvcfW+4CI2t/TjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz
ZjQyMDMwHhcNMjUwNjExMjIwMDI1WhcNMjUwNjEyMjIwMDI1WjAzMTEwLwYDVQQD
EyhiMjc1N2RmNDU5OTAwOWE2ZWI3M2YwOWYzMTYzYzc2YTk5M2Q5NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle50YiwmagHptoeGazSupCMHjHjO
AYdoE4BAJhEQzkI60w4eiYMR9t2hVAbslGFSHGDEfsUph5un3Fo2xxoSZ+PNcb94
fY2mxRX+8J5/rEqzNwvSJmrRgwBpNNUwtuvVpDJKS6PIoUc4wgzmnMdcCtJzblKD
OIn1WCU+rihUbxkP5ps0kmF4k4G3tuMN0ciHfzb12hXiGwkHDFFe5E4ezwBnNQVr
iq2QpRmTS5SXsNwg7UbwgrEF/je0RrgczF6nrJSnhWFjU/XT7K7lxw7n7Gwb6epV
w4VUeV4/W7zK08B9K/mOlyxhlZSwAnhlF+KwO92DF0MaWHeV84P99wFSSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ1ffRZkAmm63PwnzFjx2qZPZceMB8GA1UdIwQY
MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt
MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2
LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvH6TIJ5x
341vpa4WdL1GuWun8Y+Z9eZX64RF8NGDEv/dK6mmyZ7i7gAYSKV4cwe/OB62v9dE
+Fu+jSnyp0F5fRMJZYP2A7C/qCVFs5FVi3Fepd/+M++e+MQ2TjdLoIX7FmNnKe62
Ll6Z+cT8ygw4q5UeZB4YJ9TVGiIe7aKzSVPuGwS1MuCeuLZlw9Ysn8y+yYfH+Jnq
eHHsaxB/Kn7oG0k+hPBkENsm4RdawwwtN+AXg01K0D7+6MYRo6Ubuhv0x1Yh/9GQ
KhUsQm/ja5GI93yS+SsWWHmf/s8UMn3//paZnipR2ZlWpGU+EvXOCb7gS/u6l5dy
vuhsT6OmEdsHvA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 05:55:25 2025 by rpki-client