Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File:                     3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier:          DfXAoAkmfmtTmIJzxuIdZAMrLAie2cVU4jBUC4BMR+Y=
Subject key identifier:   1A:D4:7A:44:77:32:34:CC:A4:64:B5:CD:BC:3A:27:6E:7A:86:1E:C2
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer:       /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial:       01975CEEA37C8D1892F347D1F613E48557EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number:          09F0
Signing time:             Wed 11 Jun 2025 03:00:32 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:32 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:32 +0000
Files and hashes:         1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: VkzwE1uLQSRVJoR4OvmnyYvQF8hWNS1UBJamgkjzUJ4=)
                          2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ee:a3:7c:8d:18:92:f3:47:d1:f6:13:e4:85:57:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
        Validity
            Not Before: Jun 11 03:00:32 2025 GMT
            Not After : Jun 12 03:00:32 2025 GMT
        Subject: CN=1ad47a44773234cca464b5cdbc3a276e7a861ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:be:c9:4b:95:2e:65:ce:ed:19:14:c5:f5:
                    ca:2b:1c:69:36:cd:a9:de:39:a2:30:41:2e:56:6b:
                    cb:6c:a2:00:62:db:56:46:3c:28:42:6c:99:e6:4a:
                    f2:43:d9:6f:aa:be:b8:fc:06:ad:54:db:d0:cc:b0:
                    87:4f:d0:3c:cc:ec:c1:76:41:30:23:90:a3:4f:2a:
                    3d:cc:75:ae:e6:ac:e9:7f:01:1c:ce:91:6e:96:c9:
                    c8:24:5d:d7:fc:a1:0f:36:f5:25:90:d3:1a:d1:3f:
                    d6:e2:b3:a9:26:72:14:b8:23:27:68:ee:8b:df:d5:
                    3a:e5:c4:a4:70:6b:25:a6:2c:5a:3e:29:9a:57:a7:
                    01:4a:a8:db:07:f2:fb:8e:d8:05:5d:d7:42:d5:27:
                    a0:5f:64:c8:65:eb:b8:01:fa:b5:1f:c0:77:99:5a:
                    7e:4f:f0:b1:62:03:4e:85:73:87:7a:34:0f:e8:76:
                    05:5e:8e:83:b2:0d:fa:6a:ba:42:73:c6:70:8e:b0:
                    82:ad:ad:55:19:bf:34:16:4f:2e:3b:86:94:df:ba:
                    72:da:78:da:f5:d7:81:e6:f4:53:d7:44:59:bf:33:
                    80:f5:cb:c5:ee:1f:8a:d9:24:dc:b4:c3:3f:12:85:
                    da:f5:ca:9c:41:80:ca:46:a9:d5:5f:9d:be:1f:a1:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D4:7A:44:77:32:34:CC:A4:64:B5:CD:BC:3A:27:6E:7A:86:1E:C2
            X509v3 Authority Key Identifier:
                keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:cf:a7:32:92:2b:10:c8:a0:36:85:b2:ae:8e:fe:e2:44:63:
         27:5c:3b:f0:19:6a:e0:f9:c0:a7:96:22:7b:b1:25:4a:9e:37:
         a9:26:b4:f8:4f:85:99:10:6a:16:a6:94:06:a0:c8:83:cb:dd:
         63:e0:fe:0e:03:46:0c:53:df:6d:55:18:51:e5:a3:d5:93:d8:
         6f:61:6d:40:71:84:27:15:76:73:2b:d2:ad:1e:8d:df:25:3c:
         2a:c7:08:14:57:21:9c:62:7e:a5:bf:a2:99:9e:1d:6f:b3:f8:
         c8:68:5b:f8:cd:30:ae:90:8e:f9:8a:dc:37:81:86:9c:07:4a:
         ee:0d:fd:ef:08:dc:47:31:d9:67:8c:22:fb:25:4e:ff:0e:4e:
         a9:a9:a0:92:cd:0b:7d:89:75:b4:c6:f9:d0:fb:09:57:51:45:
         af:30:ff:73:88:9d:c7:eb:47:85:d5:da:fa:16:57:11:3d:43:
         3d:5c:37:45:c0:56:56:ff:e1:54:bc:ef:62:f1:ad:14:44:27:
         ab:71:c4:f3:64:61:03:16:5f:5a:20:b1:2b:89:31:51:7c:e0:
         27:3d:52:85:65:8e:fe:f1:fc:84:9a:75:61:11:fd:5e:a0:81:
         26:e2:76:3c:3c:d1:d8:f9:4a:eb:80:9e:90:25:18:50:9f:cd:
         00:c0:27:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:29:56 2025 by rpki-client