Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File:                     3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier:          A6q3dlcATgCY81UzsB6OQ7KBrb5jAWRk0T3y3aAwJY8=
Subject key identifier:   C8:6B:63:79:C9:2D:BE:49:18:D2:13:02:D7:A3:A8:57:F4:CD:97:C9
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer:       /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial:       01974F6A41D754A7D4BBDC3A1FD205C75304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 12:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 12:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 12:00:53 +0000
Files and hashes:         1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: DjkyhCj3Nt+EVwfCKn/XGRporiGKi+5ENDvMpkig+U4=)
                          2: fl1IqJ22OZD_5WNed1aOqRFU-dQ.roa (hash: Kuo9lPYONUc1nk6pXtWGALeHz/jfanabaBDCbZ+GeWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:41:d7:54:a7:d4:bb:dc:3a:1f:d2:05:c7:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
        Validity
            Not Before: Jun  8 12:00:53 2025 GMT
            Not After : Jun  9 12:00:53 2025 GMT
        Subject: CN=c86b6379c92dbe4918d21302d7a3a857f4cd97c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:d6:0f:ff:cf:d8:15:fa:6d:e9:44:77:cc:
                    8d:5a:0d:4f:3c:22:55:d5:c6:65:34:f9:c1:01:3a:
                    c5:2e:6b:cc:16:90:14:0a:dc:df:65:01:ab:3b:f4:
                    83:ae:e8:42:7a:08:fc:70:d4:42:99:8e:5f:a1:3f:
                    a4:03:db:23:9a:de:51:83:6d:11:a2:56:41:c3:7d:
                    77:5d:6a:04:1a:f7:80:6e:33:5d:f7:63:cc:a2:da:
                    6a:f2:38:dd:52:9f:44:22:04:ad:fe:40:6c:6b:29:
                    3b:d4:95:f1:e4:10:06:d2:d1:94:25:fc:b9:7c:a8:
                    5e:86:e8:55:03:15:3e:4c:55:fa:82:49:f5:a7:b3:
                    3c:60:b7:79:42:3f:55:13:c6:99:53:76:2a:24:07:
                    18:0e:75:69:13:18:b2:5c:2e:f7:82:0b:aa:aa:ce:
                    41:2b:6f:f8:52:c2:67:14:33:e8:ea:b6:3a:05:f4:
                    3a:2f:9e:36:42:bd:fc:16:e6:d9:40:2a:65:27:ca:
                    98:f8:81:8a:e3:cb:8e:aa:13:a5:8c:ed:96:97:25:
                    e2:ca:66:11:52:db:87:70:7d:36:20:30:01:ca:d2:
                    98:ed:0a:c8:80:79:04:c0:e1:fd:ef:3e:ac:63:44:
                    e7:97:16:69:ce:1e:61:9e:ea:fe:de:6b:a4:db:bf:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6B:63:79:C9:2D:BE:49:18:D2:13:02:D7:A3:A8:57:F4:CD:97:C9
            X509v3 Authority Key Identifier:
                keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:99:71:6f:2a:80:03:f0:78:99:b7:b0:96:e2:24:43:c0:02:
         9e:64:b7:5d:d1:6c:3b:f1:d1:ba:f9:d7:ac:bc:e0:a1:d1:32:
         ea:68:b9:f7:a3:4a:8e:5d:5e:e1:8f:ab:68:70:3d:74:04:70:
         de:db:1e:cc:85:c2:e7:95:a8:86:2e:c8:09:a9:71:52:1f:2b:
         8b:fd:27:fb:7b:b6:e2:c4:d9:d9:90:94:06:80:c9:59:69:a0:
         95:f5:19:1b:08:49:10:0d:86:83:3e:eb:a1:15:30:00:64:78:
         e0:d7:a2:8f:8a:43:c5:76:f8:b9:f0:21:64:dc:cc:26:16:12:
         cc:e5:50:31:b9:fc:89:73:33:0b:3c:77:3f:96:d6:ff:52:dc:
         93:ef:7e:48:c0:0f:9c:87:ee:c2:99:95:1a:60:b8:ea:a3:2d:
         f9:70:31:72:1e:b9:c6:7b:7a:60:2d:c4:ab:9a:d7:3e:82:c9:
         d7:49:7d:42:c1:c2:5e:86:10:a4:33:51:df:54:4a:71:2d:66:
         3a:cb:d9:2e:03:36:60:6d:6c:f3:b8:54:47:ce:a0:34:a5:1d:
         66:39:99:ed:d6:1c:92:0e:8d:37:c2:ec:c8:82:ca:8e:f1:65:
         0b:30:e6:bb:7d:09:ef:d0:48:05:98:3a:2e:c8:8e:63:68:ef:
         b5:0a:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:29:20 2025 by rpki-client