Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          RTkcLECpaVD8afc80aqaAY6NwJ/Vcx/aZTTSrjr+8PE=
Subject key identifier:   B7:F1:55:68:C1:0B:18:EE:D2:13:5D:7B:B6:F1:68:DE:2E:F4:9A:02
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       01965725EECC65D607A2452705684BF94BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          1515
Signing time:             Mon 21 Apr 2025 07:00:25 +0000
Manifest this update:     Mon 21 Apr 2025 07:00:25 +0000
Manifest next update:     Tue 22 Apr 2025 07:00:25 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: WVm6bkS1LZc+pEZRzeT09mcIq8YiN2Z0jEd04jBGyio=)
                          2: ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa (hash: B9pNA14gZya54yZcULKpZm4AHqIWlkttw9up4kc/opc=)
                          3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=)
                          4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=)
                          5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=)
                          6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:25:ee:cc:65:d6:07:a2:45:27:05:68:4b:f9:4b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Apr 21 07:00:25 2025 GMT
            Not After : Apr 22 07:00:25 2025 GMT
        Subject: CN=b7f15568c10b18eed2135d7bb6f168de2ef49a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:cf:32:a2:fd:72:80:83:32:34:1e:7e:38:
                    50:07:70:79:33:6f:45:39:6e:0d:a0:25:0e:eb:7c:
                    7f:75:71:94:92:ca:18:cb:13:fd:c0:c1:ef:cd:d9:
                    81:4e:36:90:0d:c8:d7:ee:51:06:78:27:f1:56:e3:
                    d1:a8:bf:09:91:7a:08:71:3d:15:7d:2f:fb:46:a9:
                    03:48:2d:cf:88:c3:98:ca:b5:15:52:e0:41:45:55:
                    8b:01:d3:81:b6:e1:9c:11:9b:1b:b5:0b:c0:17:31:
                    15:da:ef:09:66:e9:b1:60:38:e1:d2:22:73:1c:09:
                    da:61:f3:ec:5f:ca:b2:57:25:34:d7:98:8b:21:4f:
                    37:4e:7c:f1:be:4d:e9:8e:a8:d6:df:87:2d:55:09:
                    7e:bf:6f:a5:30:fa:25:af:9b:e1:77:cc:62:38:f8:
                    b2:59:9e:e3:31:2f:d8:67:01:8a:50:bc:1d:39:98:
                    73:06:a4:02:8a:7b:e9:e0:17:c0:76:52:15:c5:69:
                    b7:6c:0b:e7:a5:21:0c:b2:bf:5f:6e:d6:73:5d:10:
                    34:ab:7d:14:71:f0:3e:39:c5:1d:9d:8e:be:98:b8:
                    04:30:1b:90:da:f4:3e:4c:c5:1a:af:58:3e:bf:db:
                    77:a3:88:e6:a6:92:b8:03:0a:61:ac:ca:7b:88:ed:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F1:55:68:C1:0B:18:EE:D2:13:5D:7B:B6:F1:68:DE:2E:F4:9A:02
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:34:97:b7:7e:c7:8b:7d:24:50:8c:88:7b:a4:01:92:22:e5:
         1a:f8:b7:e9:50:45:42:42:65:55:12:7e:01:08:1c:db:af:25:
         ea:39:49:00:25:7c:e8:92:57:e4:4a:dc:65:4d:a1:c3:e9:91:
         31:a9:cf:8f:ed:2e:9a:32:46:d0:84:52:ea:92:83:bf:f6:72:
         3b:05:4f:18:35:ad:cc:2c:f8:09:08:98:6c:87:5e:08:11:6a:
         db:dc:d6:35:1a:37:17:86:c8:c0:c7:5f:7c:62:41:17:33:3c:
         f5:34:84:0c:d6:89:4a:2d:e7:6b:a2:db:6a:82:0c:ee:ab:d3:
         1c:93:77:f4:6a:da:e7:d9:9e:cc:51:b6:eb:13:ce:ad:ae:74:
         7b:95:6d:c9:4b:62:35:82:73:42:8d:1c:f2:5d:d3:fd:13:7b:
         33:d5:b2:19:b1:7f:78:f9:eb:ef:8b:30:b2:08:47:11:e3:d3:
         cb:3c:82:39:8f:28:a9:6e:5d:e2:0d:94:b1:fb:1d:68:fe:f5:
         6d:91:ee:a3:87:a3:a0:69:73:d9:aa:b0:3f:f7:3b:78:40:63:
         4b:20:1e:3f:de:ad:60:5b:52:d7:a0:67:0e:ba:dd:3b:b1:0c:
         92:b9:49:e7:f0:c5:7b:d3:87:60:7a:30:e8:df:c8:cb:98:28:
         d2:de:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:07 2025 by rpki-client