Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File:                     3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier:          RHvis2L+JjjGZlzCbIfYvN5V3tUgqON2sGbmmzgvCrA=
Subject key identifier:   28:F5:F5:14:C6:21:48:38:E1:43:76:8F:F6:E3:D8:52:FB:D1:12:7A
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer:       /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial:       01974AE88DC733B9C60E8933DFF07CAAE206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number:          12BA
Signing time:             Sat 07 Jun 2025 15:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:43 +0000
Files and hashes:         1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
                          2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: +X8bYigVoqZyT0Y7SPXinUd7o+PzSW/PEZBUgCZiUuc=)
                          3: GBhjKbS-fcKacs4QagSv_dPJry4.roa (hash: z+hDh/AwHXwEXvEpHMWmz7Nj3R8e4I8tmHqYFBmRwRQ=)
                          4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
                          5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
                          6: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
                          7: qNl-Q8HhmrUArxLKQehroWC5qDc.roa (hash: 9pycVyvA/LfKV0R0Bhd4fllbZltDwLcpn1H2WIOi7gw=)
                          8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:8d:c7:33:b9:c6:0e:89:33:df:f0:7c:aa:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
        Validity
            Not Before: Jun  7 15:00:43 2025 GMT
            Not After : Jun  8 15:00:43 2025 GMT
        Subject: CN=28f5f514c6214838e143768ff6e3d852fbd1127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:91:4a:88:19:5d:f1:ef:88:28:ab:da:7d:
                    58:06:ad:fd:1c:f5:86:d7:b4:27:ce:d0:b6:f2:d9:
                    97:ac:66:e7:02:94:ea:c6:40:7d:cb:06:d5:67:b0:
                    91:1b:17:ff:43:02:d3:03:7d:b6:33:69:f1:9b:0c:
                    d4:01:c3:a1:3c:61:c9:92:95:25:6c:40:df:84:ba:
                    c2:0b:dc:a8:1a:9d:ac:bb:f6:1f:39:b2:3e:56:4a:
                    6b:40:fa:66:ee:96:71:de:6a:c2:67:1d:e5:b9:f6:
                    31:14:fd:4a:f3:c0:df:b6:c9:43:60:37:51:d7:88:
                    15:b5:a0:00:6e:c0:b6:0d:68:60:d3:bd:04:01:db:
                    50:06:aa:68:02:19:fd:0b:23:47:ee:17:55:2a:59:
                    b3:5c:f0:f2:00:a1:81:82:e9:0d:fe:3d:2a:87:1e:
                    c9:ef:ef:42:f8:88:15:fc:cb:bf:d2:51:26:8e:6f:
                    7e:e2:04:d7:da:b5:d6:f1:bd:89:2a:b8:08:bb:eb:
                    b2:c8:5c:37:33:61:8b:98:dc:75:fb:7c:a3:7d:f1:
                    ee:e9:73:07:2e:6b:35:3b:2f:90:f1:fb:8d:b8:5c:
                    56:99:01:f8:92:fc:00:f0:56:a9:03:4d:35:19:90:
                    0b:5f:f5:4c:20:4d:60:fe:35:e9:20:4d:7c:65:16:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F5:F5:14:C6:21:48:38:E1:43:76:8F:F6:E3:D8:52:FB:D1:12:7A
            X509v3 Authority Key Identifier:
                keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7c:c2:52:3e:36:9c:aa:c1:f0:a8:76:7c:0c:d5:fa:37:47:
         a3:06:5b:7f:74:0f:bf:12:7d:68:59:90:7c:64:30:0f:ae:ab:
         65:08:09:9e:2a:61:29:13:da:90:4b:38:10:67:3b:79:d5:9b:
         89:72:b7:fc:7a:da:78:72:67:ac:47:8a:61:09:30:15:36:35:
         c7:a3:9f:b0:9e:4e:bd:1d:73:be:07:0e:de:3c:b2:54:f3:ef:
         14:7e:f4:fa:96:6d:b7:c1:52:5a:43:ab:5f:df:31:9c:c0:af:
         17:38:78:0e:19:8b:a0:d0:74:96:ff:f7:5d:38:58:fc:f4:91:
         0e:50:9e:b7:6d:62:4a:fd:7c:63:2b:23:1a:79:27:a2:da:b7:
         e5:f6:4c:cc:0d:d2:36:87:78:e9:96:bb:c6:58:2c:f7:ff:f9:
         49:8a:92:ca:7d:6d:f0:c5:8b:5a:87:8f:7b:83:bf:88:32:31:
         52:ea:b8:0f:e8:2b:48:8c:ad:80:b5:17:37:a6:8a:3f:cc:f6:
         ef:dc:1e:5f:10:9a:85:59:c4:1a:50:86:9f:0c:a2:09:a7:4a:
         ac:5e:f1:20:bd:7b:7c:7b:f9:bc:e7:67:cf:62:e6:66:dd:85:
         44:a2:b2:aa:ea:0c:af:90:bd:d0:36:61:02:61:9d:59:f0:5d:
         1a:55:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:57 2025 by rpki-client