Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File:                     i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier:          D+diXCbv/tc1tpucQKh+xvkHfN+LaMVod4E1lIB7KSs=
Subject key identifier:   3B:BA:9A:BF:27:74:F0:75:3E:AB:A8:E9:7C:EA:A7:19:22:5B:02:0A
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer:       /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial:       01974A7ADBD9FC87A8E8CA5216D5EEEB3A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 13:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:55 +0000
Files and hashes:         1: CPJvfKG9AEorpsEiz1e05zSo0sY.roa (hash: NjB+IttX3MugwGYS/PHLAC82z3nIjH+wrKBqWV/iJTI=)
                          2: I_z7vCGW6xyHTeNvbDKPhdARG-M.roa (hash: 8r7UrdzqYCx67NNR1NUCqQusmj+6qkdlQ4GFbuJ8L+s=)
                          3: P2LC5eQJryM958-FLkXKkEDZeLw.roa (hash: QpIfoLa+fmj9YdQlV+XdklTrRRwRDMjjOVtTi9BX00s=)
                          4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: 1cvx1JZtvibSH13s0LPGoYJY6KbLJDevqSrRer/D33I=)
                          5: uvd1cKCOmqZYi8L4xtWD1skpDvw.roa (hash: +e/+widvxtIhard+pWDd7C4vDgFDP2T3458Wltd2Nbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:db:d9:fc:87:a8:e8:ca:52:16:d5:ee:eb:3a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
        Validity
            Not Before: Jun  7 13:00:55 2025 GMT
            Not After : Jun  8 13:00:55 2025 GMT
        Subject: CN=3bba9abf2774f0753eaba8e97ceaa719225b020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:a0:02:5c:24:8f:7f:00:db:c8:04:f6:00:
                    a9:88:23:58:d0:12:cb:64:7b:32:02:9e:2b:22:f7:
                    d9:8f:08:10:37:d8:3a:f2:b9:b6:9d:7c:72:9f:93:
                    bf:e9:fa:ab:66:48:58:4c:37:f7:8d:77:53:64:b1:
                    ef:7c:c8:92:94:5e:80:3a:55:1a:e3:85:58:29:5b:
                    46:60:60:e9:e5:e0:f3:35:94:58:a8:68:53:b2:bd:
                    25:6d:dc:01:7e:34:a3:97:70:37:ee:cc:1c:64:28:
                    f5:d4:67:fd:72:9d:b1:95:c1:aa:6d:ae:73:fd:82:
                    d4:3f:8b:2c:f5:b4:3d:ff:07:85:1c:f5:07:f9:aa:
                    de:84:66:88:dd:4c:6e:46:7a:79:12:af:90:20:49:
                    fd:4f:dc:ac:a2:e3:af:c2:67:0c:ea:32:9c:8c:29:
                    2e:7b:35:01:f8:5e:3d:fe:fc:a8:77:39:84:99:cc:
                    e1:c7:9a:bd:af:17:9c:da:90:ab:3d:fa:77:80:9f:
                    d0:c1:8a:77:fb:e5:b2:36:30:13:a2:4e:94:4e:a8:
                    2a:4e:3c:4e:e9:b6:00:33:36:dd:1f:84:67:46:39:
                    d2:54:ee:5c:c9:b2:ab:cf:d8:6c:f2:6d:e8:f8:05:
                    dc:12:a7:ee:b0:75:3d:61:dc:43:68:78:24:c0:fe:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:9A:BF:27:74:F0:75:3E:AB:A8:E9:7C:EA:A7:19:22:5B:02:0A
            X509v3 Authority Key Identifier:
                keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:95:00:96:87:be:82:1f:e3:3f:a6:db:23:03:0c:c8:e6:60:
         81:c9:45:9a:b9:e6:01:cd:b0:96:3f:82:e6:6f:59:ab:c4:88:
         78:b5:5f:4b:d0:41:55:4e:79:eb:72:1a:7b:8a:3e:82:4b:1c:
         76:95:27:af:37:9d:e6:cb:74:07:8d:b7:4d:99:55:c8:84:15:
         27:6e:b2:b8:98:3a:79:8e:dd:dc:0a:61:5c:31:f9:b6:99:38:
         4c:73:db:9c:ba:da:85:dc:5f:a1:fe:d8:4a:6e:3d:a2:ca:09:
         53:31:bd:a3:d7:84:31:fb:5b:ca:21:56:11:c4:42:67:d8:f9:
         5a:01:1d:1d:1c:33:e0:80:de:b8:a3:b8:9a:a6:58:df:5e:6b:
         ad:89:21:07:c4:66:1c:6a:d0:65:44:78:a4:f2:04:89:a0:9e:
         13:0f:37:08:9e:22:dd:a3:01:ac:06:f1:de:f0:85:5a:db:56:
         a1:43:64:67:0b:6b:82:2f:f2:0f:27:cf:2c:10:d1:4e:60:e0:
         8b:73:ec:a8:52:8c:87:4c:b9:63:22:de:13:c0:f4:27:f9:7b:
         cd:0a:91:5b:7d:9f:6f:68:a0:73:19:75:7f:66:83:0d:72:77:
         5f:c9:9b:15:c3:65:5f:93:10:1c:51:be:7a:74:aa:45:d9:fa:
         fb:db:0e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:10 2025 by rpki-client