Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          MSczLTRMVRkW2DusMTjG1nGjNF43n2nSizXodLf/1U4=
Subject key identifier:   D5:4F:B5:85:6D:60:D8:BA:61:B1:F9:6A:9E:4E:E5:AE:24:CD:4A:44
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       0198477883F269052D0F4A5C4FC05DE5355B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 16:02:17 +0000
Manifest this update:     Sat 26 Jul 2025 16:02:17 +0000
Manifest next update:     Sun 27 Jul 2025 16:02:17 +0000
Files and hashes:         1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: 2Zrs7mWTTzeS1u602wDM36hJM2jxS8SgD4c6TMm/8BI=)
                          2: ya6fLqZqW9YiSMq0_70IzMeFSTc.roa (hash: xJjaUPhHWHICcif0SwgfpErfhFmKOtPZjx5JM2GQnhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:83:f2:69:05:2d:0f:4a:5c:4f:c0:5d:e5:35:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Jul 26 16:02:17 2025 GMT
            Not After : Jul 27 16:02:17 2025 GMT
        Subject: CN=d54fb5856d60d8ba61b1f96a9e4ee5ae24cd4a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:5d:ef:bc:bd:d6:35:4c:00:f6:95:99:a2:
                    2d:b3:2d:6f:9b:a8:a3:77:26:bd:f0:f1:74:3a:66:
                    ea:64:ba:b9:8f:3c:ea:ca:7c:07:a4:f3:61:86:5a:
                    71:31:d0:6c:42:20:4f:20:0c:75:1f:5a:b1:3f:fa:
                    e7:9d:97:cc:51:21:a0:9a:10:cf:82:24:be:a4:bb:
                    dc:ca:3a:44:3a:73:49:4d:dd:c8:82:95:96:cb:5b:
                    39:c4:18:8e:34:ad:3d:6b:d0:de:fc:cd:65:ff:b9:
                    25:01:f7:de:03:5e:07:11:22:fd:4a:50:f2:d8:77:
                    6f:6c:41:2e:7c:dc:e8:06:2d:2f:91:43:80:93:d2:
                    ce:43:71:b9:3b:96:32:21:fe:10:14:9a:31:66:b4:
                    3a:d8:08:72:21:93:d9:b0:9e:ca:10:60:7b:b2:e4:
                    64:db:3a:3a:0d:89:82:27:e7:21:ee:0a:f9:d5:35:
                    ae:bd:70:79:f9:74:72:49:29:48:b5:ec:1a:c6:b6:
                    99:84:83:8c:50:10:1d:e8:c8:9d:36:84:22:aa:8d:
                    42:6b:6f:61:2f:eb:66:9e:ed:7b:05:ec:0c:4d:8d:
                    a2:ba:8c:e7:55:6e:c2:a9:70:8d:93:38:71:11:93:
                    f5:39:7c:07:04:81:f1:0a:31:48:98:6a:ff:2b:7a:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4F:B5:85:6D:60:D8:BA:61:B1:F9:6A:9E:4E:E5:AE:24:CD:4A:44
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:57:bc:90:0b:21:f4:6f:92:f5:5e:3a:42:c6:99:6d:30:0c:
         b7:ba:3d:6e:29:08:27:c6:66:a6:7e:52:25:ab:f1:6e:43:ee:
         79:1b:38:f9:0e:70:70:06:1b:4e:c0:22:6c:e0:3c:48:26:46:
         96:d3:a2:c3:4a:a2:fb:a6:bd:52:89:5f:66:81:63:1f:31:2c:
         3f:03:9c:c4:52:be:f0:8a:9e:83:a2:ad:89:c8:fc:8d:94:f7:
         74:73:16:ac:56:71:fd:b6:23:08:c7:af:4b:07:1c:07:28:ba:
         83:2e:98:9a:6f:89:7b:e3:6c:32:80:47:ec:37:1c:c4:aa:64:
         05:1c:90:bb:a7:bc:1e:60:de:ca:b1:d6:7d:bf:ec:70:99:15:
         13:85:c5:50:c3:8f:b8:ae:2b:ea:2a:64:11:99:65:b0:89:06:
         0c:86:e4:1c:55:77:c8:bc:f5:d9:28:a9:b4:ae:47:de:7a:4e:
         4d:ad:6e:ab:2e:c5:5e:8a:fd:01:b3:44:c0:ca:88:66:02:4a:
         e8:36:08:c6:67:d4:63:c0:53:8e:17:0f:d6:f9:00:60:be:7f:
         bf:dd:97:c3:6b:dc:22:39:c2:29:a2:de:1d:c1:04:5c:2e:2d:
         43:97:a5:c6:da:80:51:4f:b7:43:da:c2:4c:55:47:26:d6:60:
         c8:0a:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:22 2025 by rpki-client