Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File:                     KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier:          66P+LMdkCoBN7m2pVQlnj8Mw8k1XN44Iwbk05awvAck=
Subject key identifier:   13:6B:C7:11:42:D9:D0:C1:05:B9:4D:EE:83:58:67:BA:8D:D4:41:28
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer:       /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial:       01964D0FF521F104A873E2C526EB393237D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number:          03C3
Signing time:             Sat 19 Apr 2025 08:00:13 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:13 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:13 +0000
Files and hashes:         1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
                          2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: DisAfVaThq++2O+n1izAPFUEOrobypmCrGQJ66ngP0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:0f:f5:21:f1:04:a8:73:e2:c5:26:eb:39:32:37:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
        Validity
            Not Before: Apr 19 08:00:13 2025 GMT
            Not After : Apr 20 08:00:13 2025 GMT
        Subject: CN=136bc71142d9d0c105b94dee835867ba8dd44128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3b:fb:b4:0c:7d:d9:87:d9:1a:8a:db:12:b0:
                    be:c4:db:42:97:d9:8a:dd:a3:bd:60:8f:3e:4a:1a:
                    21:3d:83:0b:c8:bf:b1:ee:f9:34:55:dd:55:92:b1:
                    34:4d:6d:ad:92:03:22:17:45:f1:f6:bd:b3:44:4d:
                    dc:d7:34:f3:06:f3:29:83:15:cd:9e:10:ba:57:48:
                    53:7e:ed:74:29:40:01:ce:58:82:c5:2f:9b:a1:76:
                    16:36:ad:cc:66:62:b8:83:41:b7:7a:08:81:19:d2:
                    0e:a6:e7:09:e2:1c:fe:72:7e:3c:ff:04:60:c3:44:
                    62:29:78:87:af:fd:15:3d:fc:4b:82:49:40:d9:71:
                    24:3b:f9:fa:02:5f:eb:26:55:af:69:aa:82:55:93:
                    e4:12:98:85:7c:4b:33:4d:58:b8:6f:bb:8f:4a:0d:
                    1c:1e:9b:40:ec:7b:c7:c1:df:9b:95:82:01:31:4a:
                    1e:40:76:c9:f7:8e:22:84:1a:cb:91:83:a4:e1:c5:
                    c9:8f:25:d0:27:ed:8e:c5:75:4a:79:82:12:89:b7:
                    54:b5:9e:d1:88:b6:1b:b1:40:d1:a3:65:d4:57:98:
                    c7:4d:db:78:16:60:5a:a0:2a:c2:a5:b2:49:68:b5:
                    55:a3:c9:ed:a7:eb:c1:5c:64:ea:d7:c8:d3:13:bb:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6B:C7:11:42:D9:D0:C1:05:B9:4D:EE:83:58:67:BA:8D:D4:41:28
            X509v3 Authority Key Identifier:
                keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f6:2d:75:27:6a:97:ec:b3:c4:db:cd:35:d5:da:15:bf:29:
         ff:ae:21:30:c1:ce:87:4e:a0:0c:d1:de:2c:9d:39:e5:0c:d4:
         79:5e:42:2b:ec:54:fe:d4:78:56:17:d2:a4:48:d0:90:f6:b1:
         9c:a8:86:24:44:3e:7b:11:83:5b:e3:d6:ee:ac:a9:f3:2f:86:
         03:d4:60:da:54:8d:5e:e5:70:41:60:8a:5a:54:75:14:9c:9d:
         9f:fe:aa:66:34:2d:4d:b4:df:7b:ae:f4:9c:64:8f:4c:44:59:
         2d:31:da:92:de:5f:83:50:5c:b7:9b:10:bf:52:e4:37:2c:2f:
         d8:04:63:91:59:dc:59:08:7b:7e:49:53:56:b0:81:41:dc:a0:
         2e:18:76:43:c2:66:4c:5a:27:1e:5c:82:d3:03:c4:a2:d5:b5:
         ed:1f:9c:28:f5:46:48:19:5b:53:f5:52:62:de:0a:9d:da:cb:
         92:86:50:9d:bb:55:80:fa:7d:d7:ee:22:9d:6c:53:d8:0f:82:
         3c:f0:b7:d7:ff:e0:e7:67:32:d9:16:80:32:a8:aa:f0:7f:ec:
         98:96:9b:db:45:c0:2c:3c:e4:f6:6a:32:2e:f4:cc:49:32:0c:
         c2:0e:ad:a2:17:89:ee:d2:ea:92:4d:2e:69:ce:b9:bb:2d:a7:
         90:8c:4c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:28 2025 by rpki-client