Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File:                     3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier:          z/7rY5Sx7hPTbVYQ0VWg63vAeI1s2xrYdm62IgmN0Xg=
Subject key identifier:   4F:3C:04:4D:6F:B7:9B:00:65:BC:10:EF:A9:6C:F0:26:C4:C7:99:39
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer:       /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial:       01975647EB8CDDF36B7C3C152D46E2B2F32E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number:          0E3F
Signing time:             Mon 09 Jun 2025 20:00:43 +0000
Manifest this update:     Mon 09 Jun 2025 20:00:43 +0000
Manifest next update:     Tue 10 Jun 2025 20:00:43 +0000
Files and hashes:         1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: UR9r3dsJ0LKP0gT4lyGFHdt5gkl/zmdLZJpRwr9yjfQ=)
                          2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
                          3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:47:eb:8c:dd:f3:6b:7c:3c:15:2d:46:e2:b2:f3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
        Validity
            Not Before: Jun  9 20:00:43 2025 GMT
            Not After : Jun 10 20:00:43 2025 GMT
        Subject: CN=4f3c044d6fb79b0065bc10efa96cf026c4c79939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:63:9f:5a:30:79:47:8d:03:89:53:35:76:
                    45:96:cf:a9:09:30:f7:38:51:9a:ea:1f:89:db:e5:
                    96:cf:00:ab:c4:56:35:51:2c:ba:af:03:b5:0a:d1:
                    33:58:0b:10:60:09:e2:3f:68:0c:5d:e0:36:0c:07:
                    dc:d4:97:7f:db:07:1c:f7:83:5d:a6:6e:79:d5:df:
                    9a:2c:bf:39:15:ab:0c:4c:4a:48:97:14:1b:73:84:
                    29:44:97:b1:02:27:88:69:27:ce:c1:e7:6a:d1:2e:
                    9f:1a:eb:24:de:0f:e2:35:c3:90:81:11:81:23:39:
                    2c:b7:1f:5d:84:98:6d:a6:e3:f5:58:38:b2:43:32:
                    9e:7c:68:9a:79:0b:26:1f:77:ae:e2:a9:2b:c6:b2:
                    f8:3f:3a:6b:6c:24:fd:18:1b:34:2d:b5:a9:50:19:
                    41:aa:ba:ec:68:ce:45:81:c8:b8:15:e3:4b:e2:4e:
                    4a:a0:95:14:0a:86:cb:15:64:b3:cc:21:23:ff:16:
                    95:6f:99:ed:24:28:b9:eb:a2:10:eb:d9:f0:92:92:
                    63:1f:98:16:7b:f6:91:ca:c7:5f:44:42:68:12:c2:
                    d6:ee:df:54:b4:69:98:07:88:f1:71:b9:7e:23:c2:
                    3e:b6:ab:cf:f8:c3:30:4d:73:59:44:be:c8:0a:d9:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3C:04:4D:6F:B7:9B:00:65:BC:10:EF:A9:6C:F0:26:C4:C7:99:39
            X509v3 Authority Key Identifier:
                keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:de:12:75:fc:d2:8d:17:66:17:c9:d2:a8:50:3f:d2:59:46:
         71:83:ba:96:32:18:f0:bc:f4:ea:15:32:d9:64:46:a9:8e:99:
         28:3c:cd:1c:f1:3a:c7:56:dc:cf:8b:1d:e4:33:e9:de:64:0e:
         80:30:ae:88:23:22:83:b9:3e:1f:ef:29:19:79:cf:76:69:5a:
         2c:96:9d:a9:68:e9:8c:d2:c7:49:13:dd:36:5b:fa:13:32:e3:
         d8:29:27:97:05:da:25:d0:5a:d2:34:38:0e:86:a5:8f:16:32:
         24:11:fb:4e:52:68:68:f1:e6:b2:25:7c:f7:d4:6c:26:03:6f:
         66:3e:57:03:f6:7f:e2:8b:12:bd:6f:e3:e0:46:a7:7a:5e:3b:
         37:5e:d6:a1:f8:c2:5d:d5:bb:76:8a:fd:14:1f:46:d5:90:97:
         17:b9:a9:2f:7c:7b:50:f7:37:d4:42:2f:b7:32:53:2a:1e:72:
         0a:72:e1:14:7a:3e:be:5b:b4:64:19:0e:c7:82:26:6e:cd:cf:
         e2:10:f2:b2:73:0b:de:9d:93:f0:06:36:6d:7f:a2:cd:ea:76:
         58:f8:3f:45:6d:7c:8e:e4:4c:44:f9:f6:33:2b:10:a9:cf:4b:
         c9:f1:15:ac:f6:e8:34:dc:d3:6e:52:e6:75:77:b7:44:8e:9c:
         cd:36:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:51:51 2025 by rpki-client