Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          /hPXEmWqR6tEGWOrGRETpmwx8wuCeIPLabO4JNxBmzc=
Subject key identifier:   7D:51:FC:F6:EC:5E:FD:D0:97:7C:D7:EB:9B:00:8B:71:5F:70:DF:A1
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       0197458B5EF853A94CFEAE4607544C5644F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          124E
Signing time:             Fri 06 Jun 2025 14:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:51 +0000
Files and hashes:         1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: Hg08yqXkN1G8MREhzMFaRzJWCPsFtlPF+HKrar+7/MI=)
                          3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=)
                          4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=)
                          5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:5e:f8:53:a9:4c:fe:ae:46:07:54:4c:56:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Jun  6 14:00:51 2025 GMT
            Not After : Jun  7 14:00:51 2025 GMT
        Subject: CN=7d51fcf6ec5efdd0977cd7eb9b008b715f70dfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:53:7d:e2:7e:f9:88:c9:7b:32:61:8b:a5:
                    45:17:cf:31:5f:16:aa:06:7d:c6:98:7e:70:04:cd:
                    d4:8b:5e:44:de:70:11:30:ed:8c:e8:f8:f7:4b:da:
                    35:70:0c:45:53:6a:c3:31:98:02:1f:97:d1:78:96:
                    b8:9f:cb:c7:3d:ed:17:cd:3f:f0:83:11:d7:aa:f3:
                    ca:15:06:66:7d:45:be:15:63:9f:ee:ce:1f:bb:37:
                    93:28:bf:59:92:49:73:92:d9:59:16:c0:bc:55:06:
                    2b:f2:d3:e9:e1:28:d5:5d:ff:de:ed:d5:ea:15:8f:
                    71:dc:d1:e5:cd:1d:cb:bd:60:3e:33:7b:cd:bc:c4:
                    ce:c2:6f:67:12:58:3e:b2:51:e1:3b:28:eb:c1:ed:
                    6b:25:05:3c:11:8e:fa:7d:3a:c0:a2:8b:59:8a:1a:
                    10:87:68:99:7d:86:ca:27:77:f2:33:aa:06:89:d2:
                    0b:3c:70:d8:c5:f8:1e:31:e9:c8:a2:f4:f8:75:16:
                    2b:70:13:9e:3d:2b:cc:a4:1c:52:77:9a:db:32:12:
                    ad:88:4c:7e:af:1b:ec:16:f2:ba:b1:2b:d2:38:4d:
                    3e:69:71:56:10:4c:40:3b:aa:a7:17:d6:a8:6c:88:
                    0c:27:9d:7d:64:52:32:5d:11:c7:fa:2f:20:83:31:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:51:FC:F6:EC:5E:FD:D0:97:7C:D7:EB:9B:00:8B:71:5F:70:DF:A1
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:08:e3:68:8d:3f:fc:f6:fe:00:e4:2c:17:50:07:9e:f9:98:
         c7:bf:ed:f4:1c:43:46:1e:90:1a:cd:f7:8d:77:f7:32:0c:00:
         00:62:1b:ed:b1:cd:5b:d3:7d:e4:5b:0d:fc:83:08:3c:05:75:
         1e:90:a5:e3:d1:9f:96:c2:49:6e:a2:de:1b:6b:28:a4:24:33:
         d5:eb:87:30:34:62:ae:73:39:07:55:2a:a0:77:74:be:1c:a6:
         c5:f6:9e:91:59:60:8b:f6:03:3b:1b:87:e8:00:28:bf:bd:c5:
         25:68:e3:0c:c0:8d:68:29:ab:f7:ed:e2:01:b5:af:01:b2:cc:
         45:c4:bd:b8:23:e5:55:94:83:17:cb:68:2a:7f:90:1c:86:35:
         72:73:b0:71:df:f4:cb:52:bb:a6:30:8e:98:fa:ed:36:de:86:
         ea:7c:9a:ed:51:98:dc:53:0c:ce:4b:07:28:5b:d6:a5:a7:fe:
         69:be:52:5e:71:3d:6b:5e:68:85:e0:96:2f:52:97:62:84:fb:
         21:30:b2:a2:d6:e8:fb:1e:8e:53:d6:a4:12:9f:34:30:19:97:
         09:c6:41:02:cd:67:94:c2:26:eb:99:0a:9b:fb:91:ae:1b:92:
         0e:0f:69:95:94:92:5f:a1:10:1e:f2:2d:4c:c0:84:6e:61:cd:
         c2:2c:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:18 2025 by rpki-client