Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File:                     a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier:          6KyinFtPdEYDPXrkbVTxOohjz++NKBPW1k/26O0wDEM=
Subject key identifier:   CC:E7:B9:E1:F4:FB:40:F0:0F:0C:8C:1F:24:18:50:BA:D8:81:39:55
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer:       /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial:       01966B1AACAB181ACA8D251D0DBA380D488D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number:          0E81
Signing time:             Fri 25 Apr 2025 04:00:32 +0000
Manifest this update:     Fri 25 Apr 2025 04:00:32 +0000
Manifest next update:     Sat 26 Apr 2025 04:00:32 +0000
Files and hashes:         1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=)
                          2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: H8WdU8oBDrJt4okx6ipn7030pn89lyE8Km5bB/2YAhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:6b:1a:ac:ab:18:1a:ca:8d:25:1d:0d:ba:38:0d:48:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
        Validity
            Not Before: Apr 25 04:00:32 2025 GMT
            Not After : Apr 26 04:00:32 2025 GMT
        Subject: CN=cce7b9e1f4fb40f00f0c8c1f241850bad8813955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:a7:64:49:83:67:ba:20:e3:05:24:fc:4f:
                    e5:b7:04:a5:64:d8:7c:10:3e:7a:b4:48:6e:da:cb:
                    c2:f5:08:9b:eb:15:88:fa:66:f3:44:f7:86:c2:84:
                    ab:55:79:05:8e:28:02:1a:be:a2:71:45:89:71:58:
                    ec:fc:26:59:85:42:88:6d:ef:a7:35:da:16:ab:92:
                    0a:ba:58:10:7a:09:85:e1:3f:3e:0e:7f:6d:a5:7f:
                    9f:b8:bc:6e:bb:27:69:e6:fb:13:49:1a:bc:11:80:
                    d4:f2:e8:df:8a:e1:cb:04:3a:00:e2:5d:4e:3c:ad:
                    d7:df:dc:66:a0:25:a7:08:8a:fa:68:86:91:f2:36:
                    da:d3:0c:0c:ca:f5:24:ab:6c:af:ad:95:1f:46:2e:
                    d3:86:3f:d2:75:81:b6:ef:1a:bc:6e:36:6e:5a:08:
                    06:68:c2:90:16:6a:4b:d2:9e:30:e6:6f:13:be:b6:
                    1b:96:aa:f7:96:25:0f:cb:95:ae:20:2a:e6:3d:91:
                    28:62:1e:6a:98:e5:71:34:da:f4:c5:f3:06:5e:74:
                    c6:22:34:09:c8:10:d4:3f:8c:da:9f:37:aa:fa:f6:
                    a6:54:ed:95:b5:a0:50:bf:a4:1c:23:38:5e:c6:61:
                    c7:0b:6f:b0:94:35:4a:3f:d2:a4:f6:1f:60:46:82:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E7:B9:E1:F4:FB:40:F0:0F:0C:8C:1F:24:18:50:BA:D8:81:39:55
            X509v3 Authority Key Identifier:
                keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:d9:a8:b8:e4:f7:75:c5:d0:20:62:02:db:03:d3:42:59:37:
         68:38:87:13:64:8f:a1:66:ac:b4:13:91:8a:ce:41:cb:22:c4:
         aa:d9:c1:30:bd:ef:29:31:27:27:8e:75:06:3f:b2:17:a8:88:
         d4:b4:44:ac:a5:3d:0a:40:7d:e2:33:35:68:ac:db:fc:eb:9e:
         aa:59:a9:f6:d8:2a:28:e0:a9:4c:e0:9a:3c:bd:b1:a6:7d:c4:
         fc:91:ca:c9:fe:75:34:cc:34:d7:af:47:cf:0b:cc:f2:29:67:
         2e:ff:bc:c4:ad:3f:32:30:20:3c:99:ac:e2:91:f5:73:58:90:
         c6:d8:ea:f4:48:53:ba:c7:a5:c0:a7:64:c3:0a:e2:f2:18:df:
         03:78:1e:7f:44:89:80:c2:a6:49:2b:80:4f:d9:cd:06:ae:3a:
         f8:73:d2:e0:7e:b6:1e:63:cb:20:56:6e:9a:17:dd:bc:fd:a3:
         fe:e5:5f:76:bd:da:48:09:5c:9a:cc:51:19:b3:20:9c:01:0a:
         dd:8b:c4:cc:64:b2:1b:d9:55:36:bc:19:15:1c:f3:2e:3c:7a:
         94:6e:76:c1:fa:8a:7c:0e:db:b3:ac:e5:62:39:b4:3e:48:4e:
         1d:d4:99:8c:cf:48:65:70:f5:e9:22:9d:0c:1f:22:a9:94:00:
         32:1e:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:07 2025 by rpki-client