Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
File:                     b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json)
Hash identifier:          axhM3cb/YjPrkcsCOh3YRi4R7MmYBV420yGrKqGBTO0=
Subject key identifier:   3E:B3:89:15:57:B6:9D:F0:CE:B2:21:48:9A:92:39:B2:1D:8E:B2:41
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Certificate issuer:       /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial:       0197477972BF510671442AEC32DC95F2804C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
Manifest number:          0807
Signing time:             Fri 06 Jun 2025 23:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:30 +0000
Files and hashes:         1: 7oPgYuLkR8YeCeBAjdj-EV5NcO8.roa (hash: cfjdHkH+PZdGo+DIF9TmRoRCIzPJW7XiEbCIBO7MIlM=)
                          2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: I/K/Inm7nFzRbOKpneCn1Ai+RDp1H0mPFBRrPIuPCWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:72:bf:51:06:71:44:2a:ec:32:dc:95:f2:80:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
        Validity
            Not Before: Jun  6 23:00:30 2025 GMT
            Not After : Jun  7 23:00:30 2025 GMT
        Subject: CN=3eb3891557b69df0ceb221489a9239b21d8eb241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:43:2e:8a:7b:b0:a5:70:65:5b:76:41:fd:
                    e7:36:d0:d1:31:33:90:7d:b7:39:3b:eb:b2:e7:35:
                    09:a0:45:b2:46:0c:e8:20:1a:ab:50:5a:1a:a0:db:
                    e5:a1:df:68:ba:ed:45:70:a6:3f:49:50:e9:79:2b:
                    7c:5e:b1:c7:ea:4d:a3:05:9b:be:5c:7a:68:2a:3f:
                    ef:05:0e:b2:d4:70:93:a1:d2:a9:26:d8:d6:7d:17:
                    60:49:cf:ff:aa:78:d8:b3:b9:1a:06:d5:49:2c:2b:
                    c0:ed:88:b8:3b:3c:67:ed:88:a3:79:84:a3:c8:77:
                    f4:ae:61:24:44:de:74:89:be:0c:6e:0b:68:f5:be:
                    e5:64:20:fb:14:bb:33:06:11:38:92:58:bd:d3:af:
                    43:1e:22:8e:02:56:7c:e8:1d:11:b9:a2:71:af:82:
                    2c:40:f0:87:6d:85:b1:bf:c0:51:b1:5c:88:8e:b6:
                    a2:1e:df:25:93:83:20:64:f5:bd:96:d3:cb:38:81:
                    84:65:41:53:26:83:aa:56:a2:d7:90:1e:fd:a4:96:
                    20:80:b1:7a:f9:c4:e5:b2:03:f3:6f:16:40:9a:92:
                    7f:47:c8:bb:78:a2:b8:c0:77:78:14:a0:cd:7a:37:
                    e6:0f:4e:c8:9b:7f:7d:cc:73:92:ff:c5:3b:fc:a3:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B3:89:15:57:B6:9D:F0:CE:B2:21:48:9A:92:39:B2:1D:8E:B2:41
            X509v3 Authority Key Identifier:
                keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:a1:ec:4f:7f:32:72:54:7d:c9:eb:2e:4f:ad:4e:01:50:
         53:5c:71:21:54:82:e0:68:48:0e:c2:a1:42:18:54:f8:42:8b:
         fd:f2:c7:79:19:f2:5b:22:9f:2e:be:fa:d4:63:b3:b5:17:a9:
         24:6c:4d:05:65:4f:ee:9f:fe:0f:56:e2:fa:84:c3:ff:bd:ed:
         07:20:dc:e7:b9:05:23:95:8c:35:9d:6b:4e:37:d6:b3:17:2e:
         ab:78:e5:54:91:15:cd:f3:e2:52:a6:db:97:ef:09:a4:8c:51:
         8d:87:bb:4f:ae:18:63:b7:37:e0:88:a6:88:4e:65:c2:91:be:
         07:d4:fa:6d:bf:1f:bb:5c:b0:d2:b7:37:47:35:6f:00:f0:43:
         eb:cd:a7:39:c1:3d:ee:fd:7e:b7:d7:86:82:37:b9:41:df:7b:
         91:44:8c:b7:f1:68:e0:85:73:4b:9e:1f:a4:22:a8:37:fc:47:
         18:4e:44:2f:56:c4:72:41:1a:a7:a1:69:f5:8e:63:93:06:27:
         65:b6:23:e6:8e:30:44:f6:ba:b8:6c:e3:8f:ce:41:bb:a2:c5:
         0c:a6:f4:f3:48:30:27:15:a7:3b:cb:b5:c6:3f:62:54:a8:2e:
         a0:2f:e6:1c:40:4d:c4:35:4a:94:89:1c:d6:d5:2d:44:b5:95:
         bc:38:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:29 2025 by rpki-client