Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File:                     3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier:          vxwr8meeTNcqgZ6wjWOeJ1kfUQnS7WGaWV4ytQbg/us=
Subject key identifier:   B5:C7:1B:F9:5E:88:24:0B:46:AD:20:50:37:CE:EE:44:DE:45:98:8D
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer:       /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial:       0197499EECF32D5EBB49A5A38D32882F5E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number:          1205
Signing time:             Sat 07 Jun 2025 09:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:41 +0000
Files and hashes:         1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: DxhmE8wQUroRtLaY2LlTnH5O7fCUUqz+QECFMYNKW3Q=)
                          2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:ec:f3:2d:5e:bb:49:a5:a3:8d:32:88:2f:5e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
        Validity
            Not Before: Jun  7 09:00:41 2025 GMT
            Not After : Jun  8 09:00:41 2025 GMT
        Subject: CN=b5c71bf95e88240b46ad205037ceee44de45988d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:0d:ca:15:38:11:5a:f9:c7:f0:2c:bb:39:
                    2c:e4:ea:6e:65:b6:41:d0:a5:4d:09:82:c5:79:47:
                    fa:0b:75:4b:de:ad:27:ff:eb:ca:9e:cf:4f:de:cb:
                    e1:35:51:a5:0c:a5:13:fa:41:3f:29:20:80:e6:62:
                    9d:3d:26:19:90:b7:f1:f8:d8:04:e4:09:67:ed:d9:
                    4e:21:f9:db:1c:6e:93:46:fa:6f:a9:ff:0d:71:3d:
                    8e:69:ed:97:c6:a4:b8:20:b0:7b:cf:bf:9e:19:2f:
                    75:b2:c7:6a:21:6c:2a:1d:0d:9c:93:be:03:70:4b:
                    b9:b2:78:37:0e:6c:f1:d2:aa:1b:54:57:37:2a:bf:
                    32:d6:e4:b4:bf:98:bc:29:e7:0f:8c:62:68:23:b6:
                    0b:db:be:ff:47:a2:98:fd:8c:6f:47:b2:8e:52:53:
                    f0:2b:e3:73:14:6f:63:5c:3f:9c:a0:2d:5f:3e:57:
                    e2:e6:bc:88:eb:80:0a:cc:9c:7d:af:a3:35:1d:79:
                    7f:b9:0e:3e:33:cb:ad:58:2f:07:7f:77:c0:65:ff:
                    3a:98:a4:cb:1a:d2:82:95:49:da:2a:61:ed:b9:e0:
                    0a:d7:67:de:f8:53:32:5a:cc:0e:00:66:30:d8:8a:
                    db:fe:5b:48:d5:48:d8:6b:15:60:dd:07:40:a6:f9:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:1B:F9:5E:88:24:0B:46:AD:20:50:37:CE:EE:44:DE:45:98:8D
            X509v3 Authority Key Identifier:
                keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:a4:d1:9d:2c:51:66:22:20:2a:ae:c6:c9:75:7d:c4:85:
         b3:8d:40:2f:44:5e:21:74:5c:85:0e:1e:fb:62:e8:05:f3:9e:
         d7:4a:c3:18:59:60:e4:5d:49:0f:9c:72:d1:32:9b:a7:0b:f6:
         3d:3e:e6:1b:05:89:c8:77:0d:31:82:b0:d3:6f:cb:e9:41:49:
         fb:84:33:cd:66:0b:21:8c:44:f6:5e:ab:80:a7:f0:a9:5e:98:
         1a:54:cc:f0:8b:56:32:91:24:fa:aa:ae:b7:45:b9:62:d3:c7:
         3a:2f:a8:eb:40:68:e7:fb:17:3f:e2:d0:da:b9:05:d1:30:b6:
         b6:81:7e:09:63:b0:b9:13:eb:e2:46:f4:0c:26:00:1b:e1:b8:
         a0:e3:ef:27:84:47:47:c8:8c:ac:7b:50:ea:4e:52:99:45:40:
         36:77:37:f8:30:02:cb:9a:4e:62:14:96:ca:f9:a0:52:f2:1c:
         78:4c:2e:18:d1:b4:b3:9f:40:0f:0e:9d:ad:11:87:2d:41:01:
         fd:b4:53:67:e5:b7:02:03:70:48:64:24:c5:ce:f8:ae:48:b6:
         b0:4b:16:b9:5a:65:8a:df:20:10:f0:0a:07:b9:51:8d:ba:f7:
         f8:8f:60:ee:08:7b:77:5d:f0:1b:3e:f0:09:64:76:4d:a8:84:
         94:91:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:19 2025 by rpki-client