Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
File:                     n3Zvv-bZVxAAITgLsFVeCjum2OM.mft (raw, json)
Hash identifier:          FNXoXqnkiyQeoe5Hq8//nWeV7XjUouEob2Yhc68Nieo=
Subject key identifier:   3E:16:F3:43:5B:89:D5:3E:19:06:B8:FD:2A:17:55:42:EB:06:6C:F8
Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
Certificate issuer:       /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Certificate serial:       019845F61EFBE82EFAEA72C5DA1676BCDDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
Manifest number:          0307
Signing time:             Sat 26 Jul 2025 09:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:14 +0000
Files and hashes:         1: n3Zvv-bZVxAAITgLsFVeCjum2OM.crl (hash: VT/PXyZPI1zpV4WvklbZWfgWnlODxEr4KlzVVmLO1r8=)
                          2: nw68p4MzATkHpZnxEQJwmsW_HEc.roa (hash: 1npuAHi5i81w1SD+MRYJu+5LmG8V+WtE/rfrB9iI3FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:1e:fb:e8:2e:fa:ea:72:c5:da:16:76:bc:dd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
        Validity
            Not Before: Jul 26 09:00:14 2025 GMT
            Not After : Jul 27 09:00:14 2025 GMT
        Subject: CN=3e16f3435b89d53e1906b8fd2a175542eb066cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:b3:6b:25:71:03:d5:68:58:d5:1e:f7:33:
                    8a:03:ff:75:03:ca:df:7a:b7:e8:9e:41:ee:cd:da:
                    83:33:59:e0:eb:57:24:4f:f9:d4:44:57:bf:fc:37:
                    e0:06:f8:37:cf:26:f4:12:d1:96:30:1f:4f:2b:66:
                    cb:29:88:72:01:48:3a:51:aa:f7:f7:2c:74:de:82:
                    c5:77:60:24:99:6c:89:ee:b5:4b:7a:b5:fc:a6:24:
                    39:8f:7b:23:bc:cc:c0:93:ec:7f:dc:55:8f:9b:93:
                    8f:5a:88:b5:ea:6c:1e:3e:ca:13:3f:b5:5f:bc:45:
                    e2:ee:21:40:2b:47:9c:fe:45:2f:7e:9b:ae:89:ad:
                    c2:e8:27:b7:78:90:39:83:ea:49:4f:dd:dd:40:f3:
                    7d:0a:38:02:0d:8d:bc:75:f2:1d:1d:56:da:86:6b:
                    9d:5b:98:ff:5e:69:f2:b0:5c:00:6e:e9:92:0e:81:
                    35:69:6d:ea:69:8b:74:b2:e4:98:82:e9:1c:f8:44:
                    79:65:c9:9c:08:82:1e:ac:52:dc:62:55:95:1d:ce:
                    8e:c0:d7:a1:d9:36:61:5d:49:5f:54:df:38:18:36:
                    e6:7a:2c:69:57:96:67:5e:c8:18:a0:22:fa:77:d5:
                    bb:f2:06:08:11:99:2b:9c:40:27:ef:42:23:67:21:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:16:F3:43:5B:89:D5:3E:19:06:B8:FD:2A:17:55:42:EB:06:6C:F8
            X509v3 Authority Key Identifier:
                keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:81:98:83:f3:b5:77:1d:82:7e:ac:09:eb:f5:70:82:10:11:
         93:39:3c:b2:27:95:2c:ca:ff:e9:28:03:f7:26:4f:2d:38:6d:
         a9:53:e0:d8:4b:91:bd:e1:bf:31:ce:17:d8:b3:bd:5a:da:b5:
         25:e3:1e:4f:85:bf:ff:d3:02:73:11:cf:4c:63:47:97:e2:80:
         92:50:09:67:25:2e:0f:80:a3:34:71:de:95:fa:b6:1f:c0:1e:
         f1:7e:cd:d2:09:f4:61:b5:f9:50:33:02:ed:49:3b:5c:f3:15:
         79:5f:89:a1:68:06:d6:7e:d3:3b:74:b5:46:84:5e:b2:1c:81:
         51:81:29:27:f9:4e:f7:42:d2:4c:9b:3f:d9:85:5b:e9:b4:0b:
         14:e8:38:f4:9f:89:0f:e6:96:4a:1a:d6:b2:05:66:01:b4:97:
         fa:34:f4:26:e0:43:52:28:b3:5c:4a:96:61:d6:1d:45:4a:a8:
         43:bc:56:f7:ea:50:ac:c4:c3:3a:5d:5f:df:5f:b9:fa:25:8a:
         a6:aa:18:8e:e3:80:7c:39:7b:e1:5d:79:85:da:f2:34:70:d7:
         be:93:42:25:38:28:c8:06:9e:9f:92:89:f6:51:4a:6f:55:51:
         72:c8:d7:49:78:af:20:44:1a:fe:89:18:a4:d9:fc:f4:48:76:
         f2:34:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:16 2025 by rpki-client