Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File:                     3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier:          DpQX4W85kiH4NNc5LGXT7D9xqQH8CO2MtP7Y4ujk2B0=
Subject key identifier:   C2:E1:10:D9:F2:6A:BF:66:03:BC:BF:86:CB:67:87:F4:69:4F:FA:F9
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer:       /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial:       01975422A762590D7AEB78B48586211D0A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number:          14D7
Signing time:             Mon 09 Jun 2025 10:00:46 +0000
Manifest this update:     Mon 09 Jun 2025 10:00:46 +0000
Manifest next update:     Tue 10 Jun 2025 10:00:46 +0000
Files and hashes:         1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: 5gocy391i40KydSvZEV9IoIueOuxhRjoYbgjpxdSDno=)
                          2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
                          3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
                          4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:22:a7:62:59:0d:7a:eb:78:b4:85:86:21:1d:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
        Validity
            Not Before: Jun  9 10:00:46 2025 GMT
            Not After : Jun 10 10:00:46 2025 GMT
        Subject: CN=c2e110d9f26abf6603bcbf86cb6787f4694ffaf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:76:6f:29:fe:32:f7:47:1d:16:2c:c9:fb:
                    8a:e0:ee:09:ae:09:cf:fc:8b:1c:37:0f:b3:09:f6:
                    53:c5:6f:c7:57:f6:3b:76:c7:51:97:a3:8e:b2:30:
                    76:d6:1b:45:c1:f9:f6:8d:5b:2b:a7:d8:13:ac:b1:
                    7a:bc:d9:9d:32:e3:4d:f5:5c:02:ec:92:19:4c:d5:
                    24:55:dd:c6:0d:f9:96:a1:65:5e:5e:62:47:26:16:
                    f3:90:54:4f:09:a9:67:bc:6b:f5:3e:e6:07:a1:a6:
                    65:06:6f:e7:63:53:2d:ef:b2:93:a0:62:60:02:83:
                    a8:f4:34:24:bd:64:3a:ac:b6:72:f2:ff:77:40:db:
                    ab:d9:2f:a3:da:ea:0e:4d:6a:7e:91:bf:ee:37:06:
                    89:ed:4a:ab:11:47:cc:62:0d:94:53:0f:91:1e:75:
                    64:14:ca:ef:37:ef:d8:92:b0:4c:5a:f8:1a:45:05:
                    a0:e6:65:ec:57:77:dc:00:8d:ec:82:94:57:93:d5:
                    d2:b3:33:27:01:be:6d:5b:75:45:89:09:2f:55:95:
                    ed:1d:d2:a9:3e:1d:f4:9d:29:c1:71:bf:8f:95:37:
                    80:8c:0c:de:b5:e1:6e:e2:21:69:42:bb:22:e1:3f:
                    03:a9:79:3f:e1:22:8c:62:3b:f3:5c:6d:8f:0f:e6:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E1:10:D9:F2:6A:BF:66:03:BC:BF:86:CB:67:87:F4:69:4F:FA:F9
            X509v3 Authority Key Identifier:
                keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:63:03:c9:bf:08:62:8c:51:00:7f:49:ea:ea:e8:0c:8e:
         b7:32:85:b8:cb:1c:8b:0c:5f:d0:63:07:a9:18:86:e5:5b:e0:
         d7:eb:f2:6c:f9:0f:aa:8a:79:71:0d:65:96:97:4b:84:2a:22:
         d1:04:e4:55:82:b0:02:3a:e1:54:0c:ab:f5:c1:9b:aa:fe:04:
         dc:69:e9:1b:11:94:42:e3:39:cf:7d:e0:84:28:c2:33:24:88:
         2f:79:a0:fb:e0:eb:ba:0e:e4:20:c0:27:69:76:0f:5d:f1:3b:
         02:f1:66:2c:9c:ae:3e:2d:47:c7:85:d5:7d:19:95:74:f0:18:
         83:14:ce:83:c9:19:a2:63:b9:96:33:92:ff:62:d0:b1:93:55:
         e7:69:62:b0:2a:97:6e:b4:c5:b4:6a:b7:60:94:29:78:b4:40:
         d9:0f:97:27:2b:d9:8b:55:ce:ab:78:21:f4:7e:b3:0b:d3:5e:
         52:bc:95:b3:9e:18:6a:a8:1b:2f:1f:68:0e:fd:a0:19:a8:19:
         a1:46:e3:70:5b:0f:f4:d0:67:80:61:56:45:b5:2f:e8:21:f8:
         ae:dc:5f:49:c9:b9:90:9c:80:d5:33:2d:74:e5:d0:81:95:2e:
         aa:54:ef:32:e2:f6:f2:df:1a:4c:ce:f5:5b:1a:e9:27:d8:13:
         8e:1f:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:18:53 2025 by rpki-client