Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File:                     rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier:          PP/4F4aX3RnAkP9FBNNF80DabGqAz5V0Zg3yyurjryo=
Subject key identifier:   5B:A8:65:41:81:5E:36:9E:52:EB:FC:E3:06:D4:39:2A:F9:77:CC:6D
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer:       /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial:       01976327C04594E2873202F604672F7068B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number:          114F
Signing time:             Thu 12 Jun 2025 08:00:38 +0000
Manifest this update:     Thu 12 Jun 2025 08:00:38 +0000
Manifest next update:     Fri 13 Jun 2025 08:00:38 +0000
Files and hashes:         1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=)
                          2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: VNsLgnY0BDG4UJOkfUbTKALClyW/yerNvohL3iZBMxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:27:c0:45:94:e2:87:32:02:f6:04:67:2f:70:68:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
        Validity
            Not Before: Jun 12 08:00:38 2025 GMT
            Not After : Jun 13 08:00:38 2025 GMT
        Subject: CN=5ba86541815e369e52ebfce306d4392af977cc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1f:e7:9a:92:c8:87:4a:cb:c7:ea:bf:35:d6:
                    a1:00:cd:3a:48:89:4f:97:d8:ad:7e:3d:c2:97:58:
                    e3:8e:1f:a0:de:38:33:e4:df:31:ab:4e:b9:ae:c9:
                    58:ca:24:fa:67:3a:33:fa:99:6f:64:3d:4c:c4:75:
                    cb:42:ec:55:4e:67:41:be:b0:8e:e7:2f:31:29:f9:
                    e5:5a:9d:4b:93:81:45:6c:9d:d7:61:15:61:6b:f3:
                    1c:ab:7f:87:ef:a5:13:8f:a2:df:47:05:38:bf:47:
                    6f:56:8c:ae:dd:e0:39:07:ca:71:7b:50:79:57:02:
                    fb:71:1e:80:51:9c:9e:c0:29:bc:63:65:af:cc:55:
                    e1:f0:4d:f4:f3:01:96:51:af:ed:c7:65:8c:10:bc:
                    c9:c1:fa:2c:ef:27:5c:63:4c:ec:59:d5:7d:39:ce:
                    5d:0d:95:27:4f:3e:14:c4:ee:6b:ff:89:a7:3c:10:
                    58:c7:47:02:f0:ae:05:6d:6d:ba:33:81:c1:67:63:
                    49:df:09:5a:fb:9f:ac:98:81:09:c3:4b:6b:20:5c:
                    b4:c9:4a:68:e6:46:97:69:cb:62:99:91:3e:95:6f:
                    d0:12:5b:5f:27:b2:92:88:76:35:ea:b6:cd:3d:53:
                    3b:ba:cd:b6:51:89:1c:91:77:36:f2:bf:6d:bf:75:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A8:65:41:81:5E:36:9E:52:EB:FC:E3:06:D4:39:2A:F9:77:CC:6D
            X509v3 Authority Key Identifier:
                keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:df:51:61:11:07:03:e5:d1:30:e6:83:a3:d6:da:42:75:75:
         46:37:ee:8f:14:4d:43:55:3d:93:74:4f:a8:8d:54:c9:b7:b7:
         fe:8a:9a:e3:a3:af:75:64:3c:b2:0a:4b:2c:f6:1e:54:dc:a3:
         d3:e7:55:4c:d7:74:0c:bc:e4:51:03:6d:0e:73:f0:32:5e:26:
         51:c7:e8:e2:9d:6c:4b:64:e4:c0:bb:eb:0f:8b:99:13:7d:14:
         9f:e2:9c:d1:5c:23:3f:5e:de:12:dd:f5:19:9e:4a:4c:54:90:
         af:66:2e:18:19:81:96:02:c3:7f:05:85:a6:1b:13:fd:12:17:
         10:7b:09:2e:2d:7d:0c:8b:a2:56:1f:8b:ef:e4:11:78:a7:69:
         66:7b:34:13:b4:56:f4:4c:b2:61:5b:f5:2f:25:c4:f4:70:7c:
         77:17:35:8e:fa:45:cb:b4:f8:05:c4:a3:23:27:90:71:b4:91:
         c0:e5:f6:a6:3c:57:42:3d:f2:4e:10:95:1d:14:af:b1:c2:a9:
         d8:41:32:40:e9:b8:0a:6b:23:16:9f:93:7d:7d:4a:68:4e:32:
         75:3f:f4:1e:64:c4:c9:b1:9b:b4:f1:54:a2:5e:a6:19:74:0b:
         e8:76:4f:0f:c7:80:04:35:02:63:62:f6:b5:3c:fb:03:6c:17:
         40:02:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:46:37 2025 by rpki-client