Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File:                     3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier:          rcJaKw1wbA8uphTyqlLCIDUiYnRhoJr9PWAL3Nf1duw=
Subject key identifier:   CA:4A:E6:27:BB:C8:D6:F1:54:FE:0A:7E:D8:F1:79:A3:5E:FB:99:0C
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer:       /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial:       01958CCEC8A928837E27B83BCFE532274947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number:          0B27
Signing time:             Thu 13 Mar 2025 00:01:56 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:56 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:56 +0000
Files and hashes:         1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: dqXdmIZ9ocdktU6QYDMTqcnVgfbphZ1gs4u9laeuppA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:c8:a9:28:83:7e:27:b8:3b:cf:e5:32:27:49:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
        Validity
            Not Before: Mar 13 00:01:56 2025 GMT
            Not After : Mar 14 00:01:56 2025 GMT
        Subject: CN=ca4ae627bbc8d6f154fe0a7ed8f179a35efb990c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:78:29:7a:ce:b7:f9:14:14:67:2a:e2:32:
                    9b:30:8d:d5:79:6d:be:bd:c3:9b:c9:03:ed:32:2e:
                    d0:92:d9:e8:54:26:5f:96:48:16:7d:44:29:64:ef:
                    c5:7e:03:18:95:f7:cc:94:0f:96:fd:d2:51:3b:b6:
                    39:9d:bf:71:3f:3e:14:9f:6c:74:19:8e:e0:55:5d:
                    65:9a:65:1d:ae:82:a0:d8:03:16:0d:b3:7a:bd:2e:
                    12:3b:af:4f:43:96:38:97:8a:04:c8:ff:d8:02:95:
                    67:a8:f6:06:1a:8f:06:ac:39:d9:3a:d0:54:0a:b6:
                    0e:b1:f6:b5:ba:ac:9f:52:28:e4:0e:55:8c:1e:ad:
                    1d:52:85:a2:af:de:6e:ca:12:da:95:ad:26:1b:54:
                    20:e9:c0:c8:cc:c8:31:a8:ca:f3:19:48:c0:ee:38:
                    a8:ca:c5:c9:06:ba:95:a0:70:7a:7c:68:a2:fc:06:
                    69:49:fa:7c:17:4d:59:97:11:9c:6e:93:f0:e4:11:
                    4c:77:f5:59:47:19:cc:e9:3a:8a:f2:0d:84:02:15:
                    77:bc:45:cf:41:db:bf:da:6d:01:71:c6:f2:bc:77:
                    fb:ae:13:49:e5:7d:0a:62:10:2a:03:1a:a2:db:d2:
                    18:4c:c8:ee:0e:52:5c:b8:5c:b5:59:2f:7f:a2:e7:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4A:E6:27:BB:C8:D6:F1:54:FE:0A:7E:D8:F1:79:A3:5E:FB:99:0C
            X509v3 Authority Key Identifier:
                keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d6:b6:7d:16:a2:d2:57:f2:86:bc:5c:0b:6b:9d:0e:88:4f:
         6a:51:85:88:0a:9c:3b:d3:e1:19:0a:9c:d8:3d:f7:b5:f3:b9:
         84:df:e3:72:98:5d:63:cb:c5:bd:52:5a:4a:53:ae:e7:9c:fe:
         20:d2:51:2a:59:5e:a0:e8:7a:c8:d3:43:9e:27:1b:94:73:78:
         84:95:64:ef:55:cd:24:4a:8a:24:1e:fe:da:f6:20:62:4e:c3:
         d5:b3:df:6f:d9:c9:84:65:8f:05:a6:56:a3:85:59:1b:97:54:
         fd:70:48:ed:7f:ce:4a:ce:cd:64:fc:70:f8:7d:73:69:ea:f6:
         f9:ba:4f:da:c8:f5:b7:0f:5f:53:65:8a:63:f2:72:0b:c9:1b:
         33:82:c0:fb:ca:b8:58:7f:e3:f8:ad:50:c5:0d:41:28:21:9e:
         d7:22:eb:c0:a1:a0:9c:a9:2a:3e:08:5b:0e:94:ea:8b:66:e6:
         22:b6:25:c5:a1:13:90:c5:cd:f9:d3:38:8d:33:f4:53:ee:da:
         3b:ed:ad:0f:68:c0:d1:1b:cc:07:db:66:a1:9f:3a:26:eb:9c:
         a0:63:cb:0f:fe:ad:aa:d6:75:96:ae:2d:b8:db:50:55:5e:82:
         56:fa:7f:5a:00:c4:2d:76:04:8b:67:24:81:ee:73:58:4b:16:
         91:a3:f6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:00 2025 by rpki-client