Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
File:                     3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json)
Hash identifier:          1L1sYwVA3hTeJ+xPVNoeLK2BJSKkrCnUXPB5duzvJbw=
Subject key identifier:   87:13:AD:19:CE:07:BD:83:F8:6E:F0:E5:44:27:6D:8E:F1:96:61:5B
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Certificate issuer:       /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial:       019750460CE079C1C123CD8914635A17FB28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
Manifest number:          06A1
Signing time:             Sun 08 Jun 2025 16:00:57 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:57 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:57 +0000
Files and hashes:         1: 0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa (hash: 4I6jD4OL89hrVHmrCQFbzYD7IPae2EdBGBhAfTKl1h4=)
                          2: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: SAcar8P4ApOH3LL+CRDjcMOjQekgnSyyUhYohmgfIwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:0c:e0:79:c1:c1:23:cd:89:14:63:5a:17:fb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
        Validity
            Not Before: Jun  8 16:00:57 2025 GMT
            Not After : Jun  9 16:00:57 2025 GMT
        Subject: CN=8713ad19ce07bd83f86ef0e544276d8ef196615b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:2c:4f:1c:57:18:56:50:cd:79:e5:8f:48:
                    38:3d:3d:5b:a4:c1:e4:6d:4d:42:70:4d:1c:fd:54:
                    75:4e:2c:67:6b:97:6e:5d:1f:d2:d0:df:b8:e6:67:
                    82:fd:dc:93:00:e3:be:21:25:d4:6b:69:14:83:8a:
                    30:b9:59:bd:15:9c:01:38:35:93:90:13:51:1b:59:
                    8b:93:7b:f6:fb:0b:5d:b5:e1:53:91:27:d1:41:18:
                    93:c5:49:91:d9:43:85:fb:25:68:73:ec:31:dc:e1:
                    a4:7e:2d:29:8c:4b:20:53:39:9e:04:e6:da:0e:da:
                    fe:d2:86:50:45:30:42:68:ab:54:9f:56:8c:f2:74:
                    05:a8:15:a5:14:e8:93:79:74:72:87:28:40:97:31:
                    e7:01:e1:0e:b3:bc:8f:3d:3f:df:16:83:c3:44:df:
                    9e:b0:e2:f0:26:f7:db:38:af:28:26:a0:14:3a:c8:
                    d7:63:62:a9:f8:e4:de:f7:c4:9c:7a:90:57:9f:3f:
                    57:85:bb:a7:f3:aa:5d:7f:f0:4e:a7:fb:30:6d:d4:
                    90:7d:74:b1:51:18:eb:18:af:6f:f6:55:35:c6:89:
                    4d:3f:32:7c:a5:33:42:e7:15:22:ae:0c:8a:df:d1:
                    f4:b3:80:f9:92:80:b8:74:ff:07:19:87:3b:30:b7:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:13:AD:19:CE:07:BD:83:F8:6E:F0:E5:44:27:6D:8E:F1:96:61:5B
            X509v3 Authority Key Identifier:
                keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:38:b2:a0:31:cd:64:d5:94:07:f0:47:5a:29:c7:47:c1:89:
         da:30:ca:05:a0:52:74:be:35:01:6f:ca:3b:c4:6d:a9:41:44:
         40:06:4e:b9:16:94:9f:0f:a4:76:37:78:48:4b:75:f6:f5:87:
         35:8c:e8:7c:5f:94:c8:10:5f:84:1d:ee:c0:72:22:47:bd:51:
         56:bb:19:7e:af:7b:9d:50:ec:e7:24:50:4c:a3:d5:2d:32:1c:
         f9:16:f6:0f:29:fd:74:bc:fc:e2:7b:d2:11:3f:c5:23:83:09:
         19:ea:2b:8e:f6:06:b1:97:5b:a4:4b:47:a4:3a:3f:fc:ad:8a:
         3f:64:d3:fb:da:00:e4:e3:fc:55:65:03:62:a7:25:47:2b:b5:
         32:2e:cf:4d:08:78:cb:d2:b8:ea:ae:38:32:21:b9:7d:a8:17:
         1b:6d:d5:e9:9b:93:a9:af:2e:6d:a2:d4:62:aa:7a:61:1d:f2:
         7f:42:64:75:84:ca:ec:21:4b:83:92:d4:05:74:58:84:52:69:
         06:0b:be:73:3d:48:98:02:a3:9a:81:d8:a4:7a:7e:90:91:d2:
         c8:81:33:23:11:9a:0b:58:32:b2:ad:07:e5:96:09:ce:03:a4:
         1c:73:6a:d2:c6:84:56:c0:99:20:ba:0f:e1:32:c7:23:bc:65:
         b5:73:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:07 2025 by rpki-client