Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File:                     3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier:          mPmnfg3UQlBN/ofwuRnWJCSnsqVXN0IG75Ip8nKnQGQ=
Subject key identifier:   FD:A7:C3:7E:EA:BA:B5:BD:6E:D4:F1:E2:F2:49:6D:D7:1B:FC:D9:9E
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer:       /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial:       019644443371ACD53D5E9811240A04F6C60C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number:          1416
Signing time:             Thu 17 Apr 2025 15:00:42 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:42 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:42 +0000
Files and hashes:         1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: 48+pO0C9Cm2/PyWm/UDEpkUSrdO+mjM5fWtphUpdk3k=)
                          2: LYPvA08Q5up42ir_ROLNJePR6WM.roa (hash: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:33:71:ac:d5:3d:5e:98:11:24:0a:04:f6:c6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
        Validity
            Not Before: Apr 17 15:00:42 2025 GMT
            Not After : Apr 18 15:00:42 2025 GMT
        Subject: CN=fda7c37eeabab5bd6ed4f1e2f2496dd71bfcd99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:aa:a7:4d:ee:c1:58:4f:40:65:62:4a:54:
                    f3:53:48:da:8d:e9:a8:ce:b7:bf:28:72:d2:83:98:
                    b9:d5:b3:5a:a4:8e:3c:f8:51:8b:93:ed:82:4c:8f:
                    b8:e3:11:da:73:ff:5f:1d:3e:23:ba:ac:33:88:d8:
                    d1:88:e5:03:e1:1c:76:ee:98:26:47:de:21:5a:a9:
                    63:f2:88:c0:41:c2:f8:a7:c6:b9:a7:65:af:51:3c:
                    c5:1a:04:a1:72:a8:bb:67:ac:a4:72:12:ad:83:44:
                    b7:5a:c2:0f:8f:43:f6:17:16:27:10:06:78:ca:f7:
                    cd:d7:dd:f8:fa:a0:c8:44:90:eb:6c:42:35:4a:96:
                    d0:74:e3:f2:f5:0a:8a:69:89:48:85:60:17:39:2e:
                    c0:b5:15:87:d4:3f:a0:3c:fa:69:7b:aa:9e:2c:16:
                    fd:c2:e8:a5:c8:74:7f:40:d2:25:de:e8:71:9e:71:
                    cc:1b:db:ff:63:d4:95:0f:63:bc:c0:42:31:92:1b:
                    bb:f0:8c:30:9c:34:e6:ad:4e:9e:9c:e9:65:c9:aa:
                    99:ff:e6:ec:1e:c7:bd:ad:9d:ae:ed:18:73:4d:41:
                    99:f2:86:97:f8:9b:2a:fa:6b:b2:67:b6:5d:93:29:
                    99:5d:2d:52:ea:fe:00:bd:14:e2:58:c1:6f:27:82:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A7:C3:7E:EA:BA:B5:BD:6E:D4:F1:E2:F2:49:6D:D7:1B:FC:D9:9E
            X509v3 Authority Key Identifier:
                keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:85:7a:10:d1:86:63:47:5d:63:e0:37:ed:c8:49:b7:7d:28:
         7b:7c:de:8a:91:96:f8:2b:1a:6a:64:a0:9d:36:65:ae:28:72:
         78:b3:76:47:f3:5b:00:44:f8:9a:8c:62:85:9c:c7:fb:ec:a8:
         b0:76:51:c8:d9:f6:7f:ea:cc:9f:5f:3b:ee:73:7e:c2:cf:2e:
         5c:7c:c9:4a:78:a5:5f:83:05:ed:73:16:9c:e3:3a:85:0e:45:
         2a:1d:19:27:84:77:40:47:81:2b:2e:bb:0f:c4:c4:f7:dc:ac:
         fd:9b:02:49:61:62:a3:46:35:3b:50:7f:e3:cd:aa:bc:f8:eb:
         1f:e7:60:e4:cb:ce:4d:78:99:82:ac:d7:37:07:91:67:c3:46:
         e7:03:aa:be:ad:a5:82:0d:86:01:e1:ca:64:78:b9:f9:98:c1:
         1f:a5:01:3f:5e:8b:e3:42:0c:47:b1:42:82:09:46:17:e3:b4:
         ba:a4:d5:95:38:87:a4:36:88:c0:29:91:3c:8a:89:16:66:4a:
         09:e3:9c:4d:e1:85:52:f9:36:2d:4a:52:39:f4:85:15:31:8b:
         45:93:25:7d:b6:6d:6c:7b:0a:5f:78:09:85:18:99:32:bb:a9:
         4c:e0:38:29:92:a2:44:d2:8c:b6:33:2f:a7:27:03:8e:f2:89:
         fe:ae:26:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERDNxrNU9XpgRJAoE9sYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2YyNjM5ZmZjNzg4NzFhZDY0YmZlZDcxYjc5NTRiYzkw
ZGVhYjUwHhcNMjUwNDE3MTUwMDQyWhcNMjUwNDE4MTUwMDQyWjAzMTEwLwYDVQQD
EyhmZGE3YzM3ZWVhYmFiNWJkNmVkNGYxZTJmMjQ5NmRkNzFiZmNkOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwGqp03uwVhPQGViSlTzU0jajemo
zre/KHLSg5i51bNapI48+FGLk+2CTI+44xHac/9fHT4juqwziNjRiOUD4Rx27pgm
R94hWqlj8ojAQcL4p8a5p2WvUTzFGgShcqi7Z6ykchKtg0S3WsIPj0P2FxYnEAZ4
yvfN1934+qDIRJDrbEI1SpbQdOPy9QqKaYlIhWAXOS7AtRWH1D+gPPppe6qeLBb9
wuilyHR/QNIl3uhxnnHMG9v/Y9SVD2O8wEIxkhu78IwwnDTmrU6enOllyaqZ/+bs
Hse9rZ2u7RhzTUGZ8oaX+Jsq+muyZ7ZdkymZXS1S6v4AvRTiWMFvJ4K8hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2nw37qurW9btTx4vJJbdcb/NmeMB8GA1UdIwQY
MBaAFNw/Jjn/x4hxrWS/7XG3lUvJDeq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDct
OWNmZjNmZTA1MTgwLzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDctOWNmZjNmZTA1MTgw
LzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4V6ENGG
Y0ddY+A37chJt30oe3zeipGW+CsaamSgnTZlrihyeLN2R/NbAET4moxihZzH++yo
sHZRyNn2f+rMn1877nN+ws8uXHzJSnilX4MF7XMWnOM6hQ5FKh0ZJ4R3QEeBKy67
D8TE99ys/ZsCSWFio0Y1O1B/482qvPjrH+dg5MvOTXiZgqzXNweRZ8NG5wOqvq2l
gg2GAeHKZHi5+ZjBH6UBP16L40IMR7FCgglGF+O0uqTVlTiHpDaIwCmRPIqJFmZK
CeOcTeGFUvk2LUpSOfSFFTGLRZMlfbZtbHsKX3gJhRiZMrupTOA4KZKiRNKMtjMv
pycDjvKJ/q4mIg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:46:54 2025 by rpki-client