Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File:                     3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier:          2t7C/v/vJwtuJ+/9LuC9ekwmJlJCwClQl9kR3li6Mx4=
Subject key identifier:   93:42:3D:EA:A7:63:BA:08:63:FC:79:92:49:95:43:4A:3B:22:6E:A7
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer:       /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial:       0197481E5D526AD0104BBC020FC36546566E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 02:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:38 +0000
Files and hashes:         1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: lbpSceZUBpedsFx6EAgCpXCDYte0lTDzUU3yTwGdnko=)
                          2: CURhnBTebRtFbuqIF-dFXdwxOsI.roa (hash: N2c5XcgW+AQpVpLwLHbjy6S9Vm1RjK7GXpDlAsFZpfk=)
                          3: EUX35BVNkJsUjFXuBk75OVm9PCc.roa (hash: K2j+jUDEk3zskvvRatSmoYAxHWdNXJq7sEJx+OMyHQQ=)
                          4: EpSf_xGsxic86z10zbwqzKmasW8.roa (hash: eSnnnz/WKP7V/MJyjND4ey6FBA8RQok1qLjk+ng6oW4=)
                          5: P2rbCazRzAecS6cq7qBlJh3ulhk.roa (hash: eS1swdw4PwPA3JuCzPIM9DRGgb8q7vXujdInn+mWiHc=)
                          6: mld6HE3RapKTIrTK3ARnJwX6Nfo.roa (hash: QckW2u4tae0vEXpqjOByW8q7ybuT0MKIf8YyQZ8Ec7k=)
                          7: pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa (hash: 8qojOgWb70IVU0ElW5/Sut6REATPavh52G81zhsEHj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:5d:52:6a:d0:10:4b:bc:02:0f:c3:65:46:56:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
        Validity
            Not Before: Jun  7 02:00:38 2025 GMT
            Not After : Jun  8 02:00:38 2025 GMT
        Subject: CN=93423deaa763ba0863fc79924995434a3b226ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:61:55:61:09:05:7a:a4:4a:75:a1:b9:9d:
                    d9:15:3f:65:5a:92:73:e0:d8:f5:50:3c:2b:86:a1:
                    e0:15:a8:92:2a:6f:65:c4:65:43:fe:5f:fc:6e:8e:
                    e0:fa:cf:3f:4d:68:4c:82:f7:58:c3:f4:67:cc:20:
                    d1:ee:f7:10:8c:e9:80:1e:61:3a:3b:71:e6:55:d8:
                    a0:54:41:2c:3b:bb:0c:98:60:2f:0e:5e:9c:0e:5f:
                    e2:1c:e7:c9:1b:74:f9:d1:56:44:b7:24:9a:3e:7a:
                    e8:30:d5:fd:76:2d:4f:9d:78:f0:8d:88:eb:c7:c5:
                    18:e4:0b:30:21:19:1d:88:6b:36:82:c2:bd:12:17:
                    c8:1e:41:c4:e8:85:4d:90:94:fc:41:ee:cb:bc:ba:
                    39:6c:0b:00:e0:a8:dd:22:c3:1c:29:f0:93:e7:a1:
                    0c:2b:bb:2e:3c:8f:fe:f3:2d:90:6c:07:62:5b:99:
                    85:1f:c6:dc:7c:ed:9c:3b:84:fe:76:4c:f4:fa:eb:
                    04:12:c8:af:05:cd:2a:9d:1e:68:33:2c:6a:67:de:
                    0e:b9:d3:b9:32:9c:64:d3:6e:d6:ab:de:30:19:84:
                    57:87:f7:90:70:b6:ba:5c:bf:5e:3b:41:73:15:ed:
                    c7:59:c5:e8:b2:d3:91:d8:80:34:a5:78:78:a6:78:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:42:3D:EA:A7:63:BA:08:63:FC:79:92:49:95:43:4A:3B:22:6E:A7
            X509v3 Authority Key Identifier:
                keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e4:9a:76:aa:79:60:be:5f:e0:bd:01:83:6f:9f:d0:2e:11:
         52:d9:5a:f4:bb:37:0a:33:75:f8:98:0d:48:2f:63:ca:02:24:
         27:d3:16:69:98:af:24:1d:e4:3e:65:75:85:3f:0c:8d:b2:e8:
         0e:c4:2c:e3:1a:4b:f7:a9:d6:6d:56:f2:98:e5:25:cc:ea:7d:
         4b:ec:68:99:34:3f:9a:36:81:3c:8a:27:0f:8a:10:fa:a2:4f:
         44:c5:95:40:e0:93:ba:29:22:6a:ba:8e:63:6e:e8:c8:a5:cd:
         07:2b:8b:f8:21:7a:8f:3f:ff:cb:06:ea:31:24:eb:43:ba:c8:
         56:02:1e:eb:23:e5:ea:cf:08:74:2b:23:93:f3:2c:3f:d2:39:
         58:53:fc:1e:02:40:0d:21:72:fe:79:74:a4:46:9e:84:da:0c:
         3f:3a:82:9f:bc:d9:ef:a8:fe:73:74:c9:25:93:04:b9:64:d5:
         55:07:04:09:fd:ea:bb:5f:d4:c5:c2:b0:87:d0:3c:29:46:e3:
         6c:1e:92:b8:0e:34:39:19:e9:dc:8d:dc:3e:b8:61:56:f3:4d:
         52:f4:a3:1c:1a:be:e7:48:b1:db:12:6a:7d:df:2b:fe:1a:64:
         be:5e:3c:dc:57:39:30:56:c1:5b:32:b0:99:a4:82:bb:04:f5:
         46:20:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:33:45 2025 by rpki-client