Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File:                     3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier:          4jEngJiUB3hGm9+c+iNhI9cAGd1O6fcGm0zWLndI0CM=
Subject key identifier:   59:FF:B2:15:45:7D:DD:EA:09:61:ED:02:1C:30:35:17:95:D3:E1:90
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer:       /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial:       01975647CDF59E670CC1CA6865844A644CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number:          13A9
Signing time:             Mon 09 Jun 2025 20:00:35 +0000
Manifest this update:     Mon 09 Jun 2025 20:00:35 +0000
Manifest next update:     Tue 10 Jun 2025 20:00:35 +0000
Files and hashes:         1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: p8xbPdS3JfugHnxiZGR82kYUHzBQSt+c+YZFIOR/YUI=)
                          2: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (hash: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=)
                          3: _WS_KUWo5VlHoso4BGtRKVhHyHo.roa (hash: EHMdLaq+K6Q6inb3xq+fso0i3zQ47TR+r4l4lfO+5pU=)
                          4: lwrL3dIIXO_mCBQdap7KZ_iDBFc.roa (hash: F6VpIkHy8PT/lwz9faa43UWmWxDgyYUpuXzG7yHnlKI=)
                          5: uLirnnwX72a0N3OriOBn_DEyQSk.roa (hash: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:47:cd:f5:9e:67:0c:c1:ca:68:65:84:4a:64:4c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
        Validity
            Not Before: Jun  9 20:00:35 2025 GMT
            Not After : Jun 10 20:00:35 2025 GMT
        Subject: CN=59ffb215457dddea0961ed021c30351795d3e190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:07:e4:3e:1e:23:6a:10:6f:5c:d2:40:b4:
                    22:80:41:f6:7d:b8:1d:49:ee:bc:c2:0b:bc:9a:5a:
                    7b:f0:51:4d:23:dd:23:a3:5a:5f:f2:14:3b:d8:2c:
                    e6:85:07:da:6c:72:f4:54:5c:6c:0a:62:7a:72:a6:
                    22:e8:38:57:36:b1:e7:5a:98:a3:3d:45:cc:77:7b:
                    26:85:71:f9:1d:dc:84:10:6e:0c:54:dc:fb:ae:4d:
                    88:d1:6c:44:18:3c:f7:02:64:a7:28:4e:57:bb:cd:
                    ee:fe:16:9b:ed:31:ae:c0:28:55:5c:15:17:ee:43:
                    08:a6:36:0a:24:3f:9c:7b:f3:67:50:e2:02:1a:6c:
                    1d:f0:a6:bd:8f:a8:5b:0a:8e:0a:19:de:3f:9a:b9:
                    c5:a5:dd:0e:9c:af:b6:38:b2:79:03:30:4f:9b:fe:
                    87:11:d1:9f:24:ba:0f:85:da:5a:be:6c:e9:fc:8f:
                    5e:82:7b:f5:8e:e9:cc:1b:c6:e0:92:9d:59:8a:4a:
                    7d:87:ff:c5:57:dd:2e:4e:6f:c5:f8:27:c6:bd:76:
                    ee:4b:c1:6b:ac:f3:3c:a8:fa:3f:e8:21:cc:ae:e8:
                    38:ce:29:38:33:04:df:7c:51:18:98:90:8d:7d:c4:
                    0c:70:73:23:18:00:3c:c9:66:18:e6:73:c2:00:72:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FF:B2:15:45:7D:DD:EA:09:61:ED:02:1C:30:35:17:95:D3:E1:90
            X509v3 Authority Key Identifier:
                keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:55:a0:fe:bf:bd:80:f6:a7:4f:a5:19:a1:5e:ac:e9:f1:dc:
         7f:9b:7a:53:1e:0b:e3:cd:84:a0:b5:12:a2:2d:a2:58:bd:38:
         a9:79:6e:f9:33:7b:5a:c7:45:cb:47:33:78:70:42:bc:0b:b5:
         c1:e3:09:6a:b6:83:f0:09:56:e3:b8:6f:43:a4:15:78:1b:2a:
         ce:24:b3:01:87:49:0b:ae:bb:9a:92:fc:f3:3c:1a:78:07:78:
         6f:9b:59:dd:8d:4c:df:e0:2e:a1:26:43:ea:81:d2:8b:98:6b:
         ec:cf:61:03:35:5c:4b:b0:b6:27:de:f0:9a:f5:18:7d:18:ce:
         76:55:77:91:82:7b:bb:5a:6b:3c:51:09:4e:49:e7:f1:1c:ab:
         57:a3:8f:51:ae:2e:89:82:e7:b1:6d:af:b0:bb:75:c7:8c:74:
         13:1e:93:f4:e6:1e:7c:4b:20:a4:fd:80:5c:2a:b5:e0:59:bb:
         c5:c4:0c:19:21:91:08:9f:01:67:49:19:0e:78:70:ac:75:23:
         61:ca:b3:ca:47:3c:a8:9d:20:0b:38:8c:c1:77:eb:08:e8:1f:
         fc:ff:3f:b9:48:a7:73:8d:8c:8b:0e:57:d0:6d:35:79:e8:f4:
         a6:5d:ea:c5:db:c4:c6:99:c1:12:cd:7b:b8:93:e8:73:36:20:
         66:ad:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:42:26 2025 by rpki-client