Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File:                     2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier:          UTXms9XTxBBSVD+p1ERHqCpr/Hh+j+FKVlzR8tkOH28=
Subject key identifier:   34:76:AA:1D:A1:41:E6:BE:49:38:9A:A1:CD:A0:66:CF:DB:94:53:C5
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer:       /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial:       01958CCE419C4044D3A9440B2603337A66E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number:          13F0
Signing time:             Thu 13 Mar 2025 00:01:22 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:22 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:22 +0000
Files and hashes:         1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: E2jKJp7vb2uaDrK42PEUWJahChGNtonMyjeGmi3D6f4=)
                          2: ryWVvW7NydfH0Lg55_MWvg1kBGg.roa (hash: PtmvLKXYoeUQyGlzTXT4GMeJ6VdsraUUI7+TJbIbgOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:41:9c:40:44:d3:a9:44:0b:26:03:33:7a:66:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
        Validity
            Not Before: Mar 13 00:01:22 2025 GMT
            Not After : Mar 14 00:01:22 2025 GMT
        Subject: CN=3476aa1da141e6be49389aa1cda066cfdb9453c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:04:14:7a:1e:76:f3:15:dd:ce:0c:4f:05:
                    6f:f3:40:5e:e6:92:07:2f:56:a3:a7:da:57:d8:b6:
                    3c:b4:dd:7a:e8:36:f7:92:2a:2b:8d:2e:3e:70:47:
                    ba:ac:0b:8a:3e:c5:7b:a8:59:97:78:a6:73:af:bc:
                    12:53:2f:de:f1:ed:c8:36:9d:57:81:04:34:08:42:
                    ad:cd:cf:f4:75:ca:51:b4:22:9d:84:65:af:ab:df:
                    49:43:a6:0d:0c:04:62:14:a2:dc:68:d5:06:5d:1e:
                    9b:d9:60:46:0d:64:a1:a7:7c:60:25:f3:b1:16:46:
                    e2:14:f3:ca:ed:4a:11:ed:a0:93:05:2a:1c:27:2a:
                    0a:c1:bd:6e:9f:18:c3:e9:57:9d:e3:e3:6b:5d:53:
                    14:ba:12:c3:18:eb:43:12:02:bc:fb:c6:93:a3:10:
                    8a:ca:e9:8c:18:54:c2:5f:21:b5:83:56:e6:70:6b:
                    a2:d3:54:97:5d:c5:5d:c0:1e:b6:73:4a:3b:d6:bf:
                    9d:0f:e7:a3:1b:33:8c:c3:87:c8:9b:cf:66:fd:27:
                    ec:fe:4a:35:ab:d4:0e:90:95:6d:57:84:9e:c6:7a:
                    36:4e:20:e7:78:36:07:a7:ca:54:ce:a0:66:8e:28:
                    8e:77:9b:13:4e:27:e2:1f:c7:2f:22:0e:0f:6a:95:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:AA:1D:A1:41:E6:BE:49:38:9A:A1:CD:A0:66:CF:DB:94:53:C5
            X509v3 Authority Key Identifier:
                keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d2:2b:71:4a:9a:1f:dd:58:5d:44:3c:8d:ef:0c:15:0a:fe:
         9b:b8:11:c5:b8:ef:04:1f:ca:96:d3:f3:5b:17:59:d6:54:1a:
         00:53:ee:68:9d:cc:a6:1b:f1:2b:5c:d5:fd:fd:d8:b9:64:16:
         7f:d4:b7:7a:5f:48:f0:46:09:08:10:f9:15:6c:65:57:bc:8d:
         3c:9d:be:7e:01:92:31:5f:fc:f3:d7:74:95:55:65:81:3c:a3:
         8c:08:98:7c:90:eb:f0:51:2f:d4:c6:35:cb:2c:4b:c9:e2:fd:
         fb:de:d1:25:1b:21:08:56:31:e4:1f:63:34:89:86:c1:db:f4:
         74:46:96:3c:89:5f:b8:8f:d6:af:00:ca:6b:1c:02:a8:9d:29:
         d3:80:7b:39:de:a9:75:42:f7:be:d1:d5:2e:f3:52:02:3f:e2:
         cf:bc:d8:99:81:52:78:66:39:1d:90:d9:63:37:91:eb:52:03:
         9d:c1:4c:86:6a:ec:b0:83:08:44:82:cb:f3:eb:01:1c:78:58:
         5b:90:25:ee:77:11:d1:1b:d2:9a:c3:fa:de:d2:a0:6c:93:78:
         ba:6e:cf:14:88:30:3e:f4:b9:c3:ea:5a:09:89:fd:fd:b2:36:
         56:fb:02:34:dc:69:b4:6c:65:14:ae:95:7d:48:f4:56:40:0b:
         d3:c7:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:08 2025 by rpki-client