Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          7kfyBS56+6yoLvbvP4qx14FSvLKrzhS1iPalzFCHtTc=
Subject key identifier:   5A:4C:EF:CA:B7:BB:DB:0B:9C:10:29:AB:40:F7:EF:80:4D:5C:47:98
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       019745C22C8E0751B18A8D6849BC303C9047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          157F
Signing time:             Fri 06 Jun 2025 15:00:42 +0000
Manifest this update:     Fri 06 Jun 2025 15:00:42 +0000
Manifest next update:     Sat 07 Jun 2025 15:00:42 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: rVTCAFtgbNm0m7fJK9oNY9UZudIxxSgDzTkiXwmwPMc=)
                          2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
                          3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
                          4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
                          5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:2c:8e:07:51:b1:8a:8d:68:49:bc:30:3c:90:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Jun  6 15:00:42 2025 GMT
            Not After : Jun  7 15:00:42 2025 GMT
        Subject: CN=5a4cefcab7bbdb0b9c1029ab40f7ef804d5c4798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:aa:e2:a8:4b:69:24:c0:c3:50:d2:dc:20:
                    90:65:99:d3:10:80:66:c9:84:b5:31:34:d5:99:af:
                    ee:19:12:55:e8:ee:21:25:5e:93:c7:56:b3:62:71:
                    5e:48:4b:2c:67:a2:e5:52:ab:bf:c4:35:11:6d:ee:
                    6f:ca:45:56:69:bc:45:50:9f:22:6c:05:81:e3:bd:
                    72:92:0a:34:d5:b1:7d:8f:8c:5e:0f:66:44:57:51:
                    b8:7a:89:6f:2c:31:d1:79:aa:10:43:30:80:3a:33:
                    98:4c:76:5f:56:a4:6a:ee:04:16:97:83:37:3e:b8:
                    26:02:38:5f:65:45:2d:fe:f4:cd:59:9b:10:2e:aa:
                    32:13:1d:2f:de:b3:14:46:05:6e:7b:3e:3d:d2:80:
                    5b:d8:96:4e:d9:40:a9:90:0f:b1:3f:16:d5:7f:a8:
                    a6:c0:c9:e0:49:48:28:35:6f:3e:a8:88:a6:19:ed:
                    9f:8b:70:16:47:90:23:da:8c:7f:79:92:56:4f:b8:
                    74:63:7b:ca:b6:ab:c8:83:ea:b9:67:31:44:3f:fe:
                    7b:6c:ab:8d:32:2f:58:50:cd:ec:ba:26:0d:43:bf:
                    bf:83:51:1c:e0:29:a1:85:ed:db:d7:b1:d4:c0:dc:
                    19:0d:75:52:74:07:44:11:c7:07:4e:c8:db:6e:66:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4C:EF:CA:B7:BB:DB:0B:9C:10:29:AB:40:F7:EF:80:4D:5C:47:98
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b4:95:7b:99:47:6c:51:00:8b:7b:20:58:7f:d7:df:97:ea:
         2c:94:0c:8d:cd:e7:31:50:da:c2:f3:d3:43:69:16:9b:b7:04:
         b3:6a:2a:48:0d:27:11:a7:92:66:68:d8:ba:52:b9:59:f5:df:
         6f:ca:0e:e4:8e:c2:8d:89:0b:8d:75:d3:a5:80:4f:a9:4b:6e:
         4e:aa:80:e4:5b:f4:c4:77:70:16:75:da:05:21:ee:93:4d:03:
         04:c3:25:2e:c9:2b:1d:de:66:32:89:b6:79:0b:2c:a3:62:75:
         37:3d:17:c3:d3:da:04:36:5f:ef:3c:79:a7:8b:4e:16:4b:45:
         72:04:a9:d1:af:82:91:50:35:1f:9a:65:2f:8b:48:3c:16:e0:
         da:9c:04:de:98:60:6c:da:52:9d:5f:fd:46:de:4f:f2:91:62:
         c6:e8:27:54:7a:d1:70:e3:24:7d:d1:db:06:85:53:40:9a:00:
         9c:5a:cf:b1:7e:01:23:ab:2f:d1:a9:74:27:80:10:10:d2:fc:
         af:05:3d:40:93:d6:42:cd:63:fa:32:c4:4d:76:4c:43:de:ab:
         c2:16:1a:f6:c7:89:0f:cf:e7:8d:a7:36:b1:00:0e:c7:ed:51:
         13:51:41:88:c9:29:4d:68:f1:59:11:d0:90:71:a7:b7:30:00:
         77:f2:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:18 2025 by rpki-client