Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File:                     o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier:          28flfaezLHGR7mBwLRU20ZKY2x2YJClDuDr5Y+m6vxE=
Subject key identifier:   3F:17:34:AA:89:EF:A3:B4:09:28:C1:1D:C4:EB:74:6D:E6:81:54:E8
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer:       /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial:       01975FEFA2E0C8E3554AE8203863BBACD0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number:          14CA
Signing time:             Wed 11 Jun 2025 17:00:29 +0000
Manifest this update:     Wed 11 Jun 2025 17:00:29 +0000
Manifest next update:     Thu 12 Jun 2025 17:00:29 +0000
Files and hashes:         1: 8M6EvOOueKa7PM6SUMWysNV1P1E.roa (hash: tXy3k1V6q4E+Xjy/ypSFyuA9ZzVHmCAzqLsaHasRW9o=)
                          2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: aZ+dlt0Oh9rmM24454pi4IYhdWg6ScD/e1t+a+95aqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:ef:a2:e0:c8:e3:55:4a:e8:20:38:63:bb:ac:d0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
        Validity
            Not Before: Jun 11 17:00:29 2025 GMT
            Not After : Jun 12 17:00:29 2025 GMT
        Subject: CN=3f1734aa89efa3b40928c11dc4eb746de68154e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:c1:2c:45:a5:b2:ee:10:9d:0d:10:a5:1b:
                    f7:37:70:75:09:3c:aa:c9:7a:b9:e7:0f:01:02:dc:
                    20:0d:9c:51:71:46:66:a0:ff:8a:74:1c:38:d2:5f:
                    fe:70:c7:bb:62:32:bf:af:38:a2:f2:41:18:d2:92:
                    91:78:b4:5d:a0:b9:1d:96:2e:7b:41:e9:ed:2a:de:
                    fe:de:26:05:5f:af:0c:41:56:50:d0:bc:01:cb:ed:
                    64:f9:50:e0:f6:ab:6c:29:4b:9f:b8:21:a0:5b:a8:
                    4d:78:f3:f4:88:cb:fe:d1:b6:64:74:c9:7d:c5:d7:
                    92:40:48:12:1c:8f:21:c0:cb:22:b8:cd:b8:fd:80:
                    a6:17:17:24:90:2f:c4:84:84:8f:bc:fe:e2:55:0b:
                    e7:84:54:cb:3f:4d:30:bd:a8:bf:43:b8:d3:b5:fe:
                    20:3a:5e:be:33:87:1d:d8:b6:dd:cd:8e:ca:c4:e9:
                    26:b6:c6:f3:13:f2:93:3d:3b:bd:35:6d:0a:c5:6d:
                    9e:5d:39:e1:eb:f0:7a:8b:64:eb:d0:2d:ff:ce:4f:
                    39:57:74:ce:de:bf:e4:e8:ca:b4:b8:0f:60:bd:34:
                    03:44:0d:48:77:b8:46:05:ce:fd:94:0a:68:dc:91:
                    86:85:e7:40:69:a0:b6:ae:3e:67:b2:80:41:bc:26:
                    b6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:17:34:AA:89:EF:A3:B4:09:28:C1:1D:C4:EB:74:6D:E6:81:54:E8
            X509v3 Authority Key Identifier:
                keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:98:e8:3f:6a:94:d3:e8:79:1b:6c:70:51:97:e0:42:86:c7:
         23:0c:b5:dd:f4:e8:53:4c:79:f6:c8:75:ec:e0:63:88:be:59:
         2a:b9:fa:6a:b4:c1:0b:b7:23:c7:ac:b2:42:a2:b7:91:b0:e5:
         41:4c:6d:53:4a:6c:91:75:c0:51:98:97:63:71:f6:72:2d:3d:
         2d:82:1a:0b:99:2e:03:71:23:98:eb:f9:f1:fc:63:70:fd:c4:
         10:86:5a:6a:87:4e:f7:4f:65:af:21:13:2e:40:01:0a:47:fe:
         74:7b:f2:5f:ad:87:5d:9d:e8:5c:45:f5:a3:b4:d2:fe:b5:1c:
         ec:04:a6:2f:bc:c0:58:da:4e:4f:b6:c6:13:ef:ff:91:bb:d7:
         cd:fc:5c:e2:8c:5b:39:98:ec:27:a7:18:52:f2:b7:22:51:9d:
         f1:61:58:c7:09:14:c6:9f:0c:22:de:71:5c:b7:bf:dd:24:03:
         42:a0:b9:2e:b9:cd:dc:4b:2e:3e:dc:36:a4:96:b8:4f:de:46:
         0e:99:c1:b4:d4:df:07:38:3a:ed:7f:d9:e1:65:e5:bf:be:68:
         60:48:ae:19:15:50:60:a3:58:00:48:8f:7e:9f:d2:77:08:34:
         68:af:88:6a:08:7d:63:d3:68:3b:3a:8f:06:b5:bc:ce:35:c7:
         ff:7c:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:32:49 2025 by rpki-client