Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
File:                     362LFgmdbN-MOoEcpYYN8Pa69t4.mft (raw, json)
Hash identifier:          z5ntRbE8BI84Zdg/X94O7AdwQVQE5YwHqaAe3NJums4=
Subject key identifier:   43:1F:01:4E:4E:77:1D:FC:43:12:5D:64:6D:66:DD:3A:54:D2:E5:78
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       019757C8391C0D2A4331FF01EF3E79B37806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
Manifest number:          1585
Signing time:             Tue 10 Jun 2025 03:00:28 +0000
Manifest this update:     Tue 10 Jun 2025 03:00:28 +0000
Manifest next update:     Wed 11 Jun 2025 03:00:28 +0000
Files and hashes:         1: 362LFgmdbN-MOoEcpYYN8Pa69t4.crl (hash: Bxaa6ctSkJ1TK2Pi6z577/lcCSe3ZORxg3bVipt3ywU=)
                          2: ix48MvDGuyMGC7SsCyq5CBbj9_U.roa (hash: TdU/FjmcGDmmVtUcG0hSM2P6GM5lo+c3VUYtonFIPUY=)
                          3: y9Bh0m6kauwP6kD0s73D8-vrbVM.roa (hash: fBYPL7fiPGaFShtarMcQPH8FKsxoKQThi2vjq34Xkk8=)
                          4: yI6sGULCtvHmcNyhlI3Ib9zoJh8.roa (hash: XOXs8qRUtBdFjA6Dpn1zPYBHYPckC8k/wFskDMsHcgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:c8:39:1c:0d:2a:43:31:ff:01:ef:3e:79:b3:78:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Jun 10 03:00:28 2025 GMT
            Not After : Jun 11 03:00:28 2025 GMT
        Subject: CN=431f014e4e771dfc43125d646d66dd3a54d2e578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:35:0b:33:c0:70:9d:7d:49:ef:57:85:c6:
                    bf:6d:27:aa:21:37:49:28:5b:33:7f:7d:66:83:c8:
                    c2:6e:cd:72:05:78:c8:65:0b:93:23:cc:9e:ce:66:
                    90:7b:51:4b:df:8a:38:d9:1c:6d:e2:af:78:4b:04:
                    3a:b8:eb:f0:ef:4c:2c:2e:fb:ab:1d:e1:67:4a:ef:
                    35:39:ef:01:1c:40:8d:18:82:f7:6e:59:dd:2f:0a:
                    92:0d:5b:1c:99:f7:2d:1c:d0:74:bb:95:ca:84:87:
                    76:03:ab:67:c4:c8:83:74:a0:34:0d:95:56:2a:6a:
                    f8:77:8a:eb:93:29:d2:b3:80:3d:1a:06:c3:93:58:
                    ae:2f:3f:9a:96:b7:c2:69:67:06:47:d1:bf:12:8c:
                    87:b2:a3:c7:db:79:cc:58:ce:34:ee:f2:c8:2a:2b:
                    66:1b:c7:0e:f7:43:2b:14:e4:8c:e0:36:b7:fc:3b:
                    1f:1f:61:1f:c9:1b:f6:31:6c:6a:e6:73:55:d6:ac:
                    92:3b:e7:ac:b4:0c:5c:0b:65:f6:48:42:5d:08:a3:
                    f3:5b:ed:85:76:0d:2f:ce:a6:29:4a:43:e8:a0:1d:
                    62:e2:75:df:55:97:34:a7:d8:19:01:79:46:58:63:
                    f1:e4:aa:9c:ab:71:c5:a2:aa:c3:b7:d1:70:ea:cf:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:01:4E:4E:77:1D:FC:43:12:5D:64:6D:66:DD:3A:54:D2:E5:78
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:59:22:37:50:cf:4d:26:36:0d:7b:40:f0:de:86:75:d1:97:
         5f:db:6b:30:a5:a1:42:3c:3e:cc:a6:9d:ce:31:a2:f0:30:45:
         8a:6c:9e:a9:c4:ae:5e:0f:0b:16:0a:3e:31:37:63:00:65:46:
         d6:9a:ef:f8:73:e4:8b:4f:73:62:bc:03:93:38:f1:24:28:83:
         94:4f:7b:cf:cf:38:40:fa:80:a3:ab:f5:44:32:c3:46:b4:6d:
         ed:e4:64:7e:3a:73:2d:e8:8e:29:71:96:72:4a:bd:ae:7d:d3:
         1c:1a:29:30:8e:da:23:1e:75:01:a8:89:30:e3:88:bd:04:0c:
         72:0a:b6:e9:73:7a:45:ae:40:fa:75:97:0e:33:1c:26:0a:16:
         ad:d5:03:09:a6:99:f6:f2:d8:66:49:d0:de:38:94:fd:1b:c0:
         6e:e0:2a:9b:30:d0:1e:b9:25:67:88:d2:f0:20:82:fe:2d:54:
         d4:6f:29:fd:9e:91:03:94:b2:f1:eb:75:c2:24:11:21:a7:b7:
         d6:4c:c3:33:93:ab:ef:35:c4:b3:4f:86:82:a7:6f:4c:41:46:
         7e:c4:bd:10:34:01:96:30:10:75:f4:93:c2:aa:76:23:53:e0:
         95:28:0b:c3:10:9f:32:e6:47:c0:98:d3:b1:2b:b6:1c:e5:a6:
         7c:a7:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:18:55 2025 by rpki-client