Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File:                     3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier:          VWcrLdy7oAmYNREf7MhEQbvFGFBfba04zkHo1D800ss=
Subject key identifier:   91:19:47:B3:94:4D:3E:9D:F6:76:08:8C:0F:A0:A3:8A:EB:40:A8:37
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer:       /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial:       01958B845C7EDF5C165122268AC5FDA03DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number:          1494
Signing time:             Wed 12 Mar 2025 18:01:02 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:02 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:02 +0000
Files and hashes:         1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: IKvJ4b7btRUKwlxpuBDfXz0ybXB+H0Ibzpdwq8wi0mY=)
                          2: W1OC8DXA-JBLcfhFPFVeaJnmF2M.roa (hash: Bn11GLaQo8vWxTsyNwP3g7O7jm760Wf0FQskPZIbPmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:5c:7e:df:5c:16:51:22:26:8a:c5:fd:a0:3d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
        Validity
            Not Before: Mar 12 18:01:02 2025 GMT
            Not After : Mar 13 18:01:02 2025 GMT
        Subject: CN=911947b3944d3e9df676088c0fa0a38aeb40a837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:f1:f8:6b:ad:9c:4e:ef:28:06:80:d0:7a:
                    57:e3:63:20:c9:4d:4b:3b:9e:e9:2c:29:6c:86:06:
                    42:b9:d5:ae:a4:34:10:6f:e7:96:4f:c2:10:bf:2f:
                    20:26:a2:8b:9b:30:fe:2a:6e:c5:e7:89:0a:43:91:
                    5d:81:48:d9:96:36:08:40:2e:25:04:c2:5e:30:f8:
                    cb:71:79:07:38:1e:a9:c5:f6:05:e2:0d:91:a6:40:
                    9f:49:e0:76:9b:30:63:58:13:31:43:27:4e:06:6b:
                    40:e3:82:b0:42:e2:14:a8:e4:5b:36:4f:76:36:4b:
                    30:cb:bf:e0:ca:75:0b:58:59:3c:a0:39:38:e9:5d:
                    56:e9:48:10:e1:3a:f6:57:21:56:3c:cb:8f:26:f9:
                    08:ea:fd:a6:fe:69:e2:19:aa:82:c3:fe:cf:ff:0c:
                    d8:d1:b2:3f:19:2e:aa:f6:47:1a:0f:3f:89:6a:d5:
                    fa:36:4b:c7:ca:c5:ce:36:7f:e7:f2:9a:66:6a:3f:
                    12:9c:e1:ad:ec:63:10:aa:f5:78:ab:8d:74:64:28:
                    5f:b1:c4:59:bd:e1:5c:23:b9:5e:2c:62:54:d9:e8:
                    51:2c:a3:9a:6d:06:42:e2:13:20:73:5b:27:ee:25:
                    85:16:3b:a0:72:c1:16:05:c7:95:ba:31:ce:ef:19:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:19:47:B3:94:4D:3E:9D:F6:76:08:8C:0F:A0:A3:8A:EB:40:A8:37
            X509v3 Authority Key Identifier:
                keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4d:1e:0d:60:d2:a6:3d:ef:3b:b7:32:6c:8f:51:7d:70:a0:
         51:52:54:91:f4:be:45:ab:ad:37:50:f6:a6:99:31:e7:9f:89:
         79:8e:6e:54:00:e4:89:78:1d:09:9d:bc:db:0f:b2:e3:3a:9b:
         bb:33:fc:ae:e4:c9:16:a5:8a:c5:80:1c:1a:c0:96:98:c0:cf:
         48:14:2b:f2:88:a6:0e:dd:f9:24:3b:dd:ea:48:62:c8:79:70:
         25:81:1a:81:04:c9:0f:9a:ee:3a:0b:2b:66:7b:d5:7d:05:0b:
         94:06:70:db:96:ad:f1:19:99:18:fa:b6:ea:5c:af:b7:44:af:
         52:39:d2:bb:87:dd:c9:06:c0:a1:7a:5e:44:44:e4:5f:b3:6c:
         b9:28:87:70:29:99:6e:5d:75:ef:ee:be:c8:d6:16:81:80:d1:
         e4:7e:d2:a9:04:8e:07:32:6e:2c:66:f5:d4:a0:e2:f0:4c:1f:
         ca:9b:ad:ed:23:cd:dc:49:06:0b:46:87:f5:b0:80:24:89:6f:
         4e:d2:6a:16:70:5e:64:56:c2:56:60:bb:e3:9b:28:75:c3:9d:
         57:36:79:92:a8:88:1c:50:8d:b0:6c:81:5b:69:fe:a7:d6:34:
         eb:6f:9d:94:a5:7c:98:59:f6:32:bf:25:7a:5c:cd:13:14:17:
         e3:f9:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:57 2025 by rpki-client