Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File:                     F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier:          WW191xDvhN25aXsqitnkYtbYHT3f19AgWUR4hbCtV5A=
Subject key identifier:   0D:26:36:A6:B4:E9:94:8C:9B:A4:68:1B:B7:3F:46:AA:59:85:F5:70
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer:       /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial:       01975CEEAD389D8F5894853B64D08860E2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number:          0DE4
Signing time:             Wed 11 Jun 2025 03:00:35 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:35 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:35 +0000
Files and hashes:         1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: HyZkJlHq/9imtzDQzRTkErqgLf8iqxIc2tcohqoJuJ4=)
                          2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ee:ad:38:9d:8f:58:94:85:3b:64:d0:88:60:e2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
        Validity
            Not Before: Jun 11 03:00:35 2025 GMT
            Not After : Jun 12 03:00:35 2025 GMT
        Subject: CN=0d2636a6b4e9948c9ba4681bb73f46aa5985f570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:c3:e3:bd:64:3e:09:84:5e:7a:25:85:ef:
                    c8:cd:7d:ad:20:5b:78:b0:ad:af:73:82:42:43:2f:
                    e6:d9:91:1b:63:8c:f6:41:c9:d6:05:9e:06:7c:76:
                    07:e1:7b:9c:c0:60:fd:4b:d6:29:82:21:7b:10:c0:
                    bf:4e:b6:b7:52:af:6b:e4:c0:fc:6a:50:b3:59:be:
                    e9:8e:5c:f8:92:0c:94:6f:ab:c6:22:5e:7c:3a:18:
                    db:60:d8:5b:a8:e8:51:f8:7f:54:74:4c:82:26:75:
                    6b:18:3d:04:aa:28:5b:6d:19:d6:50:86:d7:4f:d4:
                    ed:e5:09:13:9c:87:1b:ff:26:6a:3a:39:5c:87:23:
                    eb:51:62:01:00:89:97:7e:0b:52:41:f1:77:83:52:
                    28:b7:b8:85:59:1a:e5:9d:b4:1c:58:05:b7:ef:da:
                    97:97:a3:30:01:53:e0:d7:1c:65:56:c3:07:1f:cf:
                    4e:00:e9:73:2c:7e:d1:25:88:42:bd:47:99:3e:41:
                    ea:7e:e4:c8:37:6e:70:d6:96:70:da:b6:53:b6:0d:
                    5d:66:9f:85:29:cc:1a:c3:e8:23:f4:ab:84:e3:f3:
                    52:69:df:c5:04:10:68:0f:04:fe:27:be:2e:c8:35:
                    29:31:d8:6f:7d:58:73:2a:c2:84:95:87:02:7d:71:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:26:36:A6:B4:E9:94:8C:9B:A4:68:1B:B7:3F:46:AA:59:85:F5:70
            X509v3 Authority Key Identifier:
                keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ac:c1:4f:38:6a:9b:db:4c:03:1e:24:59:9a:ec:b5:6a:d9:
         01:c1:cb:72:a7:cd:42:b4:93:e1:2d:dc:c1:0c:6c:e7:53:be:
         4b:61:1b:f7:92:fc:1d:59:aa:61:5f:f4:53:e3:b0:fe:1e:35:
         ba:f2:34:31:a7:d4:96:4d:d6:49:c6:a1:39:75:c1:52:f6:68:
         53:13:53:96:86:06:60:8c:cc:3b:75:12:19:bb:7d:1b:e8:9e:
         26:65:06:7a:bb:99:73:e3:b0:8f:10:42:65:c8:e4:b8:d1:11:
         4b:27:75:9e:e2:52:87:ec:ee:81:13:b7:ff:df:19:d5:43:a6:
         c3:e3:35:62:4f:32:88:27:46:20:51:6f:7b:03:7a:d7:7b:23:
         77:f1:21:61:b2:20:09:43:d2:53:de:1e:aa:f4:e6:5d:25:33:
         85:af:f6:0d:f9:ff:11:0b:56:91:6a:43:95:9a:16:c7:ac:82:
         56:f9:2c:0f:88:ec:de:5f:c5:69:ea:db:b7:c8:bd:8a:9d:0f:
         c3:9e:f5:da:80:78:a5:ea:bd:38:ba:96:93:63:ff:07:7b:62:
         88:4a:1f:9c:de:f8:53:2c:c4:c9:35:72:33:c6:b1:3c:74:79:
         39:29:fb:15:dd:63:c1:48:e2:fb:00:48:b6:96:80:21:b7:e1:
         8e:00:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:55:47 2025 by rpki-client