Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File:                     3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier:          8RymK1r3z2wO+pMt3sDz+woDbpdXG1j0JxLwCVJFE4k=
Subject key identifier:   D4:37:1F:E9:AE:42:D9:19:F1:41:3E:94:23:4E:1F:28:55:2C:C9:20
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer:       /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial:       01964EC77A6166F3F407C0C1074D0F7A4C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number:          0C2E
Signing time:             Sat 19 Apr 2025 16:00:17 +0000
Manifest this update:     Sat 19 Apr 2025 16:00:17 +0000
Manifest next update:     Sun 20 Apr 2025 16:00:17 +0000
Files and hashes:         1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: TZXjSFUXADH527OoE1s0ZO4r3pjeOT03OeRjQlkf46M=)
                          2: 9o3lcP-4u3MnLvx0kAlBujW4rP8.roa (hash: dshKKlZMjXCloMnE9oVR3HuOAnY6dIKys+Z7e0GPVnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:c7:7a:61:66:f3:f4:07:c0:c1:07:4d:0f:7a:4c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
        Validity
            Not Before: Apr 19 16:00:17 2025 GMT
            Not After : Apr 20 16:00:17 2025 GMT
        Subject: CN=d4371fe9ae42d919f1413e94234e1f28552cc920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:94:67:cb:10:ad:8a:e7:c3:d3:e7:ac:30:
                    3c:24:dc:ac:ab:21:c2:ab:13:a6:74:36:1c:a6:1c:
                    3b:2a:d4:82:56:97:f2:3c:b4:69:90:65:97:57:b9:
                    61:aa:79:15:5a:54:6d:df:a5:d9:5a:85:4b:fc:0e:
                    6a:8e:7d:10:b4:c8:11:8c:c4:51:65:27:20:de:dd:
                    e0:c0:c7:d0:79:b8:0c:c5:1a:2d:d7:ef:8f:95:66:
                    e5:94:e4:88:e2:db:82:2a:47:de:5d:f3:cb:ea:8f:
                    6e:1f:da:bc:6b:7b:54:b1:ec:b5:62:52:31:1c:00:
                    56:d8:ec:c5:a3:f9:26:3f:6b:af:33:fb:92:07:58:
                    42:98:2b:2d:a1:0c:af:a5:91:5d:4f:fa:34:9b:1e:
                    aa:6e:a5:d0:83:d5:58:a5:af:49:3f:ce:28:f2:15:
                    75:75:fe:2d:39:12:fe:53:e1:b7:3f:a3:db:63:c1:
                    fb:42:44:cb:54:2d:b2:c0:05:eb:bf:8c:15:19:e5:
                    e6:4d:70:2b:9f:f5:7c:13:bc:2b:a1:23:a9:a9:81:
                    56:51:82:bd:a0:b4:06:14:94:34:70:58:ab:e3:41:
                    c2:9d:d1:18:14:ed:0e:13:10:fd:0c:ec:e4:6d:7f:
                    3c:a3:04:3a:db:c0:08:f5:51:85:a4:13:10:f7:ed:
                    46:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:37:1F:E9:AE:42:D9:19:F1:41:3E:94:23:4E:1F:28:55:2C:C9:20
            X509v3 Authority Key Identifier:
                keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:57:09:c3:3e:3c:fd:73:7e:d3:1d:e0:3e:bb:79:29:37:
         18:1b:c6:e3:9c:8d:35:13:b0:24:4d:51:e4:5a:f7:0d:05:9e:
         8b:b7:e4:38:be:83:2a:d4:50:79:fe:8d:f8:66:9b:65:74:9b:
         88:03:0b:3a:39:f5:41:0a:02:86:4f:02:c4:b4:21:bb:f2:3b:
         8b:94:ce:9e:d7:62:0a:7f:76:a1:56:c1:ad:55:36:85:5c:52:
         02:67:b5:55:01:30:a5:16:8a:82:25:43:df:31:19:32:f1:96:
         d3:27:ff:7e:a4:25:1c:d1:9a:7c:54:40:8b:f0:da:86:3b:56:
         e7:44:9f:b0:fb:12:33:ca:b0:e5:98:c1:ec:2b:66:84:51:de:
         7f:27:62:3a:43:4a:cd:71:ce:e4:0e:cf:d4:a8:e3:ba:0a:e4:
         a9:aa:67:e2:e6:3f:06:80:f8:27:25:6e:2f:de:ee:b0:eb:6f:
         51:a0:51:bc:a1:3d:27:b3:1f:ea:91:a9:07:b4:1a:7d:8c:dd:
         9e:8b:81:94:e7:13:df:b9:0a:01:11:46:f0:92:61:23:5c:5b:
         06:7f:fa:6b:f6:83:9b:3d:7c:b7:eb:e2:1d:22:83:f6:fa:af:
         99:f9:91:42:fc:39:d7:46:2c:7e:ec:91:33:59:c7:bc:20:79:
         a4:69:0e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOx3phZvP0B8DBB00Pekx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTJmZWU5NTQyZDYzYTY4ZTQ5YjJjOGVkNzgzOGY4YTAz
NDZiMDgwHhcNMjUwNDE5MTYwMDE3WhcNMjUwNDIwMTYwMDE3WjAzMTEwLwYDVQQD
EyhkNDM3MWZlOWFlNDJkOTE5ZjE0MTNlOTQyMzRlMWYyODU1MmNjOTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEGUZ8sQrYrnw9PnrDA8JNysqyHC
qxOmdDYcphw7KtSCVpfyPLRpkGWXV7lhqnkVWlRt36XZWoVL/A5qjn0QtMgRjMRR
ZScg3t3gwMfQebgMxRot1++PlWbllOSI4tuCKkfeXfPL6o9uH9q8a3tUsey1YlIx
HABW2OzFo/kmP2uvM/uSB1hCmCstoQyvpZFdT/o0mx6qbqXQg9VYpa9JP84o8hV1
df4tORL+U+G3P6PbY8H7QkTLVC2ywAXrv4wVGeXmTXArn/V8E7wroSOpqYFWUYK9
oLQGFJQ0cFir40HCndEYFO0OExD9DOzkbX88owQ628AI9VGFpBMQ9+1GfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ3H+muQtkZ8UE+lCNOHyhVLMkgMB8GA1UdIwQY
MBaAFN5S/ulULWOmjkmyyO14OPigNGsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgt
YTRmMzMzNjU0Y2M5LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgtYTRmMzMzNjU0Y2M5
LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnVXCcM+
PP1zftMd4D67eSk3GBvG45yNNROwJE1R5Fr3DQWei7fkOL6DKtRQef6N+GabZXSb
iAMLOjn1QQoChk8CxLQhu/I7i5TOntdiCn92oVbBrVU2hVxSAme1VQEwpRaKgiVD
3zEZMvGW0yf/fqQlHNGafFRAi/DahjtW50SfsPsSM8qw5ZjB7CtmhFHefydiOkNK
zXHO5A7P1Kjjugrkqapn4uY/BoD4JyVuL97usOtvUaBRvKE9J7Mf6pGpB7QafYzd
nouBlOcT37kKARFG8JJhI1xbBn/6a/aDmz18t+viHSKD9vqvmfmRQvw510YsfuyR
M1nHvCB5pGkOAg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:11 2025 by rpki-client