Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File:                     3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier:          60tE8ULG7JIBKcVfIb5BIsUSUq2CgpdcZq+aueoSYCY=
Subject key identifier:   A9:8F:89:BD:39:52:AC:DF:91:73:12:C4:53:68:A1:16:5F:DD:2C:77
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer:       /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial:       0197485585E90FD6A9E306F3F96F2310393C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 03:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:53 +0000
Files and hashes:         1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: ODIkLTalSEY2nLjsiN05gYzS3XK+ef5UdwbCZ1EUd+E=)
                          2: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (hash: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=)
                          3: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (hash: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:85:e9:0f:d6:a9:e3:06:f3:f9:6f:23:10:39:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
        Validity
            Not Before: Jun  7 03:00:53 2025 GMT
            Not After : Jun  8 03:00:53 2025 GMT
        Subject: CN=a98f89bd3952acdf917312c45368a1165fdd2c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:36:46:95:cb:a9:f2:bc:27:02:f5:08:3c:
                    44:43:70:29:ac:bd:bc:fe:25:0b:b5:55:27:0f:77:
                    a8:8e:0e:5f:d1:42:1b:63:0a:58:2f:c6:fd:01:df:
                    a1:5b:27:91:51:0b:9d:c5:d5:f7:ad:02:4f:73:81:
                    d2:c7:04:9c:f2:d5:1d:86:2f:00:0c:52:92:27:bb:
                    57:70:d0:c2:f2:ee:7a:fc:cf:ea:61:e8:59:8b:c1:
                    eb:f2:5b:5d:17:58:77:05:55:c4:5b:ea:86:54:d4:
                    1e:ee:15:72:5a:17:a8:ae:39:18:15:ed:16:e7:f6:
                    01:6e:4e:11:f7:60:38:d7:d4:0f:2a:ef:c9:9a:f2:
                    6d:1d:66:46:24:0a:d2:62:14:b5:03:55:61:bc:46:
                    93:9a:49:ef:8c:13:8c:80:84:eb:9f:7b:18:c0:09:
                    65:cd:13:71:ef:c7:b0:f7:67:d9:5a:1c:4e:dc:33:
                    8c:00:c4:da:cf:7f:23:15:f8:d5:3a:c3:ea:b9:a2:
                    7f:9a:87:87:5e:6a:a2:92:e8:2e:3d:9e:5d:b6:2d:
                    16:94:8f:f7:49:99:84:c8:3a:d8:4e:7d:61:cb:11:
                    8f:00:4b:27:2f:12:3a:57:2d:95:c4:07:7b:8a:08:
                    56:64:5b:f0:f8:07:a7:72:dc:07:64:6e:79:79:ab:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8F:89:BD:39:52:AC:DF:91:73:12:C4:53:68:A1:16:5F:DD:2C:77
            X509v3 Authority Key Identifier:
                keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9e:27:f6:4b:95:a8:d2:6d:1d:a3:77:59:a1:b4:d3:fd:78:
         ef:5b:9d:ca:b5:f9:9d:3c:19:20:ee:bc:82:85:07:07:67:8c:
         80:22:07:cf:1b:50:75:87:4f:31:c6:87:e1:24:70:1f:7d:c6:
         6b:5c:0f:4e:7f:05:89:2e:24:7f:25:1a:c3:99:5d:35:23:85:
         3f:17:9e:18:09:b3:a9:6b:8c:86:ed:ee:c7:01:83:f1:28:4c:
         44:b1:22:9e:ef:3d:76:1b:25:da:1e:74:7f:1d:55:e1:20:68:
         09:06:70:da:bc:fd:39:13:89:dd:3e:88:20:aa:d0:cd:86:9f:
         80:67:5b:1b:8c:b1:0a:e1:ef:d6:0b:60:3a:5b:a2:8c:97:11:
         5d:c4:0b:5a:50:8c:a3:e6:4a:de:aa:61:ef:56:52:8b:07:54:
         09:d9:ff:1d:76:df:61:87:2e:f3:6d:6c:00:dc:65:79:81:9e:
         c0:98:87:13:31:0d:74:e6:27:36:bc:a6:b4:9a:1f:af:1c:da:
         10:12:f0:78:9c:a2:eb:68:55:58:dd:89:a1:f7:7e:e5:d9:f8:
         41:8a:54:32:d3:47:18:37:02:48:9b:56:f7:5b:9c:26:a6:4b:
         31:34:70:ac:9c:49:b8:ac:b5:f4:01:93:56:a3:7a:42:40:5a:
         57:ec:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:49:21 2025 by rpki-client