Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
File:                     bb3coKsuvouFKafJzh3W6OpVXD0.mft (raw, json)
Hash identifier:          +Vq/iuoV/l/OtMTq5Mf7hhjArZM1CuAMtXK66/nwn9g=
Subject key identifier:   E3:7D:D9:10:96:D7:48:F1:39:47:4D:17:7F:1A:11:AB:28:B8:6B:F4
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Certificate issuer:       /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial:       0196515BD1C4531E19799A1D1A688270580C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
Manifest number:          1093
Signing time:             Sun 20 Apr 2025 04:01:34 +0000
Manifest this update:     Sun 20 Apr 2025 04:01:34 +0000
Manifest next update:     Mon 21 Apr 2025 04:01:34 +0000
Files and hashes:         1: 3CFsdbO_NdkVNQKrJjhbIF4SBso.roa (hash: R9TEphKFrn4GbHRX9svL6mjGOOWCjifpYgOEm5Ktk3o=)
                          2: bb3coKsuvouFKafJzh3W6OpVXD0.crl (hash: UkF9c1ZPTkQNdMfy4jTLKwwjxhMxXPhC1Q2Cggfytug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5b:d1:c4:53:1e:19:79:9a:1d:1a:68:82:70:58:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
        Validity
            Not Before: Apr 20 04:01:34 2025 GMT
            Not After : Apr 21 04:01:34 2025 GMT
        Subject: CN=e37dd91096d748f139474d177f1a11ab28b86bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:b5:5a:e8:03:81:59:73:2d:b2:62:9c:dd:
                    aa:9c:91:4d:bc:c5:11:06:65:54:79:0e:e5:94:e3:
                    6c:40:a1:19:a8:e4:bf:55:e0:48:0c:e7:95:21:ec:
                    1c:f2:ee:3c:a8:e3:f7:f3:c4:85:d9:f6:28:72:74:
                    ae:75:f4:9b:e4:ad:fb:da:27:fc:aa:9b:dc:ab:1d:
                    f7:e3:4a:1d:7e:c2:b0:69:bb:58:87:0c:19:68:3d:
                    db:d5:04:94:25:e9:48:3d:2c:ab:22:60:4b:41:6a:
                    5e:9b:ab:b1:2a:c2:74:8a:0b:91:9c:08:7c:c1:80:
                    0f:6a:07:da:52:b8:67:2e:f9:15:42:f6:73:c9:b6:
                    ce:11:ba:d3:d1:9b:3b:16:9a:77:81:b3:4f:5f:c9:
                    03:cd:bb:ac:48:d4:a5:4f:5c:8f:c9:e6:7c:ad:f7:
                    b6:0a:b5:e7:37:34:68:4d:6f:99:ec:11:12:9b:24:
                    09:16:5b:47:71:2c:3d:6a:cc:5c:ba:c6:e7:c2:cf:
                    13:c1:18:81:c7:80:91:4e:4a:bf:c7:c1:63:96:28:
                    a2:5d:1f:7b:35:7a:ed:1f:34:c6:1f:fb:bd:a2:52:
                    3a:2a:d1:66:e5:08:be:32:13:e6:3c:61:de:dd:d6:
                    71:96:0e:c9:07:70:84:0e:45:8a:1f:3e:66:d9:3c:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7D:D9:10:96:D7:48:F1:39:47:4D:17:7F:1A:11:AB:28:B8:6B:F4
            X509v3 Authority Key Identifier:
                keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a9:c9:a1:58:81:e2:5f:b6:f5:8e:89:78:48:1f:2a:f9:60:
         e8:e9:af:8c:78:69:a0:c5:65:47:2b:b1:fb:5e:2b:60:b5:db:
         f4:3c:09:12:5f:7a:6d:de:0a:cf:88:e2:84:78:eb:48:be:28:
         72:fe:24:2f:06:55:b2:4a:f5:f8:22:0e:46:36:9b:fd:3a:08:
         4b:14:80:1a:70:ac:04:7e:c1:35:76:9b:8a:b8:df:0e:1f:7a:
         62:19:c6:c3:2a:59:e3:0f:f1:9e:28:20:7c:5e:85:0d:80:74:
         27:c2:84:1a:cc:fc:d9:87:5d:f4:ed:21:9e:0d:a5:8d:00:8d:
         e9:cb:c7:62:0a:bc:92:00:5d:25:f7:8e:e3:c8:4b:98:99:fa:
         60:c5:1b:de:63:ec:14:31:7d:9e:7d:42:c9:36:f2:40:d7:6e:
         b4:9a:39:15:33:01:b4:b7:6e:e9:07:35:19:0e:f5:32:7e:b3:
         85:9b:89:64:1d:2f:f4:d9:06:d1:80:14:6f:5e:bf:82:73:f7:
         ac:1b:ec:1b:09:c0:90:d7:d0:e8:b0:63:c8:46:08:f4:10:e3:
         eb:9f:73:be:4f:75:d6:04:b4:52:9c:98:37:30:16:5c:3c:e7:
         80:63:09:ad:87:69:5b:1d:a6:10:ab:0a:1a:65:8b:d4:79:93:
         18:c0:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:03:22 2025 by rpki-client