Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          lzU8m+LcdQplEcLkR8zNEsa9cWZr4+lo1ZvmeXqkhRc=
Subject key identifier:   25:8B:35:24:2C:4B:33:A5:F4:39:00:6E:93:A6:92:FE:50:13:65:40
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       01974C692253214282891F9355F79FBF26CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 22:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:47 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: NbUx+6thSb2YSyVnNoN7nZkI7e9kfWaBj0srMOuUaOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:22:53:21:42:82:89:1f:93:55:f7:9f:bf:26:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Jun  7 22:00:47 2025 GMT
            Not After : Jun  8 22:00:47 2025 GMT
        Subject: CN=258b35242c4b33a5f439006e93a692fe50136540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:52:f3:cf:75:0e:16:9c:94:c1:0d:ec:ec:
                    d9:0c:57:33:12:a4:31:04:16:7e:77:ed:03:19:82:
                    18:cb:1a:ce:cf:6c:2f:e6:62:cd:41:12:47:fc:38:
                    3b:96:93:af:55:eb:bf:71:7d:63:03:39:89:09:6e:
                    04:2a:15:44:74:e6:12:1d:31:38:5e:8e:00:9a:21:
                    d3:1c:aa:c7:91:72:74:cc:a2:26:fe:23:92:63:17:
                    64:c1:7d:89:99:13:0a:1b:85:3a:d5:45:67:6e:cd:
                    db:41:06:f2:ba:8f:04:df:1b:f0:5e:42:95:58:99:
                    fc:a1:74:52:c4:19:6c:38:e5:ba:97:25:2d:e9:c6:
                    a8:9d:c7:b0:ed:b7:48:72:85:24:c6:99:0d:3f:5d:
                    76:40:25:78:35:86:bb:47:a8:1f:7e:3f:96:74:db:
                    03:c6:dc:88:80:c8:7e:de:35:a7:01:bd:00:fb:9b:
                    73:64:c6:cf:0a:ee:3e:a1:fe:fd:fb:eb:66:62:b4:
                    4b:04:d2:ae:d1:16:21:a9:f9:3f:13:b1:6c:8b:7b:
                    46:36:76:94:44:32:da:f4:98:5f:52:f4:0f:be:d6:
                    04:13:3c:16:59:c8:f1:91:ed:c4:ef:84:96:8a:04:
                    a8:b2:23:12:df:2b:8a:7f:60:f0:cc:ff:3e:92:84:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8B:35:24:2C:4B:33:A5:F4:39:00:6E:93:A6:92:FE:50:13:65:40
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:02:62:6b:32:e7:b7:03:e1:0c:8e:5f:62:c7:83:d7:b5:12:
         f8:ae:73:7f:eb:7f:33:96:ea:87:be:a8:da:63:2b:65:7e:df:
         49:75:6d:5d:0a:01:4d:fc:a6:d6:b5:cd:72:8a:b2:29:6a:6d:
         f0:2c:c2:a1:98:44:bd:e2:bf:bb:30:18:1a:68:3c:dc:98:58:
         2b:c4:64:8c:20:25:7b:18:0e:5c:c4:99:27:06:b8:7e:f1:f9:
         ba:86:1e:1f:35:cd:d5:ad:b4:e8:42:12:b8:c4:ce:07:04:eb:
         00:3f:ab:5c:7c:c1:c4:50:69:af:b8:d1:a8:5a:76:7f:4b:c5:
         97:51:46:8f:9e:c4:7a:12:92:56:57:92:99:42:78:7d:e0:6f:
         1c:6f:71:75:c0:6e:2b:cb:e9:17:b0:56:4a:07:3c:b5:c7:4f:
         bb:cd:c4:17:fd:03:98:a3:16:e1:ad:6f:90:dc:56:f1:d2:c8:
         22:18:a5:a8:f2:78:72:f3:a1:4d:ff:8e:c0:8d:59:ff:10:42:
         90:8d:ca:c3:54:38:fb:c3:e3:76:6c:18:d6:c9:d8:6a:98:7b:
         3f:7d:37:b7:08:16:22:78:52:5e:f7:4b:de:11:c5:c1:ad:23:
         dc:8e:cb:a4:33:ea:17:63:9a:72:99:26:da:6a:85:4f:f6:9c:
         c2:b7:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:14:23 2025 by rpki-client