Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
File:                     03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json)
Hash identifier:          CL8duY5VK0Iqu87ud7zrSFIpne2IVSeDP6mk9mYdW5Y=
Subject key identifier:   2E:2F:98:13:F4:6C:14:0B:88:C2:A7:36:EA:A0:6D:C1:BD:9C:46:58
Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Certificate issuer:       /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Certificate serial:       019645C4DABEEAAFDF0DC03371B7BC3A3422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
Manifest number:          14F3
Signing time:             Thu 17 Apr 2025 22:00:50 +0000
Manifest this update:     Thu 17 Apr 2025 22:00:50 +0000
Manifest next update:     Fri 18 Apr 2025 22:00:50 +0000
Files and hashes:         1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: Q40XESH8/VtcDSL/GjmDHTENJRJk85pAPw2DtuBnR7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c4:da:be:ea:af:df:0d:c0:33:71:b7:bc:3a:34:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
        Validity
            Not Before: Apr 17 22:00:50 2025 GMT
            Not After : Apr 18 22:00:50 2025 GMT
        Subject: CN=2e2f9813f46c140b88c2a736eaa06dc1bd9c4658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:57:fe:47:f0:fd:ee:e4:2c:23:59:49:57:
                    ab:6b:78:24:94:26:ad:92:10:ab:c2:79:68:57:1e:
                    42:a3:2d:19:8e:57:7b:e7:c4:24:49:6b:fb:80:5f:
                    35:89:2a:3e:59:39:7b:a5:e9:ae:2c:46:9e:01:42:
                    df:5f:2c:61:04:b6:f5:31:1e:65:c3:23:d1:b4:23:
                    27:30:18:4d:ab:83:45:39:8c:fa:26:55:76:b9:e6:
                    99:9e:4e:14:b7:5c:69:5c:95:9d:34:6b:b4:22:97:
                    12:09:8e:16:a1:0d:11:34:2a:e0:39:ae:2f:68:5f:
                    96:20:27:ab:ab:1a:46:b2:d6:f9:86:08:e8:16:24:
                    34:44:1d:4a:5b:e8:eb:af:c5:5e:fc:3e:78:86:86:
                    d2:13:ec:70:fd:d3:8c:c9:e1:54:9f:77:47:55:8d:
                    fb:f4:9c:b1:8e:97:a8:76:29:13:ef:b7:a4:fe:0f:
                    88:8b:31:f7:bb:14:1a:11:31:d2:69:64:df:11:18:
                    64:cc:86:02:42:6b:b8:af:76:6c:06:3d:8c:88:de:
                    42:8c:19:3f:a8:25:fc:6e:4d:37:f9:43:44:b3:c4:
                    28:9b:33:e3:c4:65:d5:ba:a0:35:bd:28:c5:94:b8:
                    89:63:2d:0e:ae:11:02:b2:c5:28:96:02:d6:70:2a:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2F:98:13:F4:6C:14:0B:88:C2:A7:36:EA:A0:6D:C1:BD:9C:46:58
            X509v3 Authority Key Identifier:
                keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1c:9b:7a:d4:f6:99:8e:a2:41:5b:d8:0b:29:f7:1a:7a:36:
         e6:8c:9a:f2:af:08:2c:0a:82:ee:ce:d6:dc:ac:2a:60:cf:25:
         95:19:76:61:d8:94:bf:73:9a:28:37:71:43:4c:be:2b:c4:9e:
         08:4a:ae:6c:7a:19:69:23:67:c8:f8:ef:c8:27:fb:8d:01:c7:
         5f:fa:46:55:99:87:a6:7b:5a:16:2e:ea:73:5f:61:70:51:61:
         c1:3d:74:e4:63:7b:8e:10:e8:15:40:2c:9c:fe:ad:a2:cd:22:
         42:66:ae:ec:87:c3:96:9c:55:11:18:19:d7:d8:38:7e:8f:4b:
         e1:88:08:84:ef:25:ad:0f:8d:ba:27:3e:7e:27:bc:97:86:d1:
         f3:c9:04:cc:74:2a:c1:77:3d:27:d7:cf:8a:7a:f9:c2:7d:0c:
         08:2a:dd:6d:8e:e7:f9:c6:c1:72:88:37:d5:0d:ab:eb:39:08:
         c1:90:31:62:e2:dd:37:23:be:36:8b:a2:45:28:b7:3a:75:02:
         47:f7:0c:13:fd:11:20:30:9e:9d:81:66:3e:4f:3e:24:d3:fd:
         bc:61:d2:47:ca:d2:1a:6c:ff:9e:83:20:82:97:d1:e7:28:cb:
         31:d3:be:43:a5:49:45:7e:05:5d:9b:4c:d7:41:44:59:12:e7:
         ef:e1:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:11:31 2025 by rpki-client