Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File:                     s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier:          Sw6Bv08B5ez0wWsRhQAuloYcDtIILZ0nlcDlysVglcA=
Subject key identifier:   5E:10:CC:B8:E2:1C:B9:C1:A0:EA:35:EE:72:69:15:95:E6:E5:76:B6
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer:       /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial:       019751FD15C700E0B0ACDE7B37DEC1473C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number:          030F
Signing time:             Mon 09 Jun 2025 00:00:30 +0000
Manifest this update:     Mon 09 Jun 2025 00:00:30 +0000
Manifest next update:     Tue 10 Jun 2025 00:00:30 +0000
Files and hashes:         1: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: cQkQ8VsFgDPmAgkW3frfyxAYcxki5aSimLDumqbKmlM=)
                          2: uqWPOGEjKAK6cva-7ggQuyGZx84.roa (hash: LmiTjnCPg8ISEkh3ESWU5kwDHzMqe3y8V1474zgHE24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:fd:15:c7:00:e0:b0:ac:de:7b:37:de:c1:47:3c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
        Validity
            Not Before: Jun  9 00:00:30 2025 GMT
            Not After : Jun 10 00:00:30 2025 GMT
        Subject: CN=5e10ccb8e21cb9c1a0ea35ee72691595e6e576b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:4b:be:11:a9:b5:a3:71:46:96:da:35:99:
                    ee:97:42:d9:9a:9c:3a:d5:e8:b0:26:04:d1:69:48:
                    7c:8d:47:63:63:cf:e2:f6:bf:ad:e1:ac:cb:b5:44:
                    7f:02:3f:38:4e:be:7e:6d:73:6e:1f:4f:a3:36:65:
                    c9:b5:cd:97:58:e0:49:24:23:55:f8:8e:1d:4c:10:
                    63:78:1e:16:45:7c:ed:6f:22:64:d0:a6:e0:ef:8c:
                    c4:0b:58:a3:2d:a9:ff:a9:f4:53:ce:36:be:7d:4d:
                    e7:69:27:ff:7f:ca:ed:e2:04:0b:1f:e8:80:61:16:
                    c8:97:3a:67:f0:0a:ea:9b:60:8d:7f:f6:e1:ba:a8:
                    55:51:39:7a:08:48:d6:43:37:83:01:0a:60:6a:e2:
                    7c:a5:d3:59:f9:9d:4d:58:b8:be:88:d4:46:d1:4c:
                    38:e1:95:ec:e0:0b:2f:e2:87:7f:9e:02:ab:48:31:
                    ef:16:eb:1b:8b:68:21:38:8c:00:bf:55:c3:12:83:
                    1b:f6:22:8b:b9:21:84:31:d4:8c:01:75:2b:c0:b3:
                    49:0e:83:1d:fd:e5:5b:f1:45:dc:a7:22:d6:27:79:
                    41:13:c6:d6:74:99:37:1f:e9:94:af:26:d1:5b:a6:
                    40:6a:bc:bc:1a:6f:90:bb:c9:85:62:c1:92:39:a3:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:10:CC:B8:E2:1C:B9:C1:A0:EA:35:EE:72:69:15:95:E6:E5:76:B6
            X509v3 Authority Key Identifier:
                keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6f:b1:9f:be:98:b7:cb:5a:6f:ce:93:7f:82:ec:d3:b9:90:
         d0:8f:0f:2c:2c:fc:39:1a:e0:75:28:d0:52:6b:7a:e7:8b:25:
         71:f1:48:b5:2f:e0:ef:02:11:bf:14:21:45:bf:83:4e:e1:88:
         0f:e7:9c:8d:2a:14:53:dc:d6:c6:f3:4c:6f:6c:e9:f1:4c:98:
         7b:e0:28:cf:1a:e3:d5:7b:e3:c9:44:ff:c5:b8:6a:ce:7d:60:
         e7:0d:30:f0:81:6b:3b:13:06:e7:b3:1b:f8:e8:5f:7e:c3:75:
         34:ad:3a:f2:33:3e:d2:e1:97:63:57:e1:be:35:f4:11:14:b8:
         17:92:f1:f5:e0:46:95:5a:4f:3f:b6:4b:72:2c:43:2a:6d:bb:
         d2:c6:4c:b0:ba:f8:65:8d:ce:2b:6e:34:99:55:20:1c:5f:ef:
         72:dd:79:a6:a8:a9:ee:b0:1a:82:7c:7f:55:d5:43:1f:27:40:
         fa:97:ff:a9:8a:16:cf:2b:93:de:cd:bb:1e:a1:15:fc:8c:b8:
         ab:56:69:bf:68:60:7e:4b:b2:61:67:3e:dc:f6:82:7b:90:69:
         b7:5b:c6:51:21:71:38:cd:31:42:35:33:de:59:36:65:9e:66:
         1e:a2:f4:ca:44:20:d4:03:5d:99:5b:2d:b1:fe:b1:45:84:95:
         a5:6a:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:48 2025 by rpki-client