Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File:                     3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier:          1iyvCL3z5JhG3ypn3f9ZHkqYZElRO8+McWFiE/B29dM=
Subject key identifier:   D3:AD:64:72:93:D3:AD:C3:FA:B8:1E:7F:DF:D6:A3:A8:A8:CC:C5:9F
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer:       /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial:       01974C32548B7FB8DCC7B07225311C8A36FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number:          098A
Signing time:             Sat 07 Jun 2025 21:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:56 +0000
Files and hashes:         1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: n9osOWTYA7ftesuzQmh3wvaLYJjKsYl9Clh8UYQlHyk=)
                          2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:54:8b:7f:b8:dc:c7:b0:72:25:31:1c:8a:36:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
        Validity
            Not Before: Jun  7 21:00:56 2025 GMT
            Not After : Jun  8 21:00:56 2025 GMT
        Subject: CN=d3ad647293d3adc3fab81e7fdfd6a3a8a8ccc59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:8e:21:1d:2f:70:75:09:34:6c:dd:12:42:
                    24:d6:4c:52:06:bb:55:2e:7c:bc:a0:8f:c8:a9:2e:
                    eb:65:b4:ee:1d:b5:ac:41:9f:48:90:77:4e:67:35:
                    43:17:a5:07:e4:6f:69:4c:66:a4:67:8f:7b:86:3b:
                    6d:b9:4d:c3:67:3f:2e:11:ef:44:3f:a8:35:e7:63:
                    58:24:c1:fc:92:5d:51:7d:0c:4c:89:0e:b4:1e:fe:
                    22:1b:d7:8c:13:20:f7:ee:f6:6a:04:b3:1f:5a:12:
                    db:ab:d6:41:76:4b:c3:e2:70:2b:64:3c:fc:db:29:
                    b9:4b:01:cf:f3:c9:f8:12:f3:46:3c:c5:d0:e2:14:
                    9a:ca:97:6b:3c:9c:0b:fb:be:54:a8:44:4f:82:2b:
                    b0:68:6a:78:f3:83:d4:25:d9:21:04:21:1d:c8:03:
                    06:e4:97:d0:53:89:d3:0f:28:32:85:a9:bd:8f:35:
                    58:e9:cb:c9:08:b5:65:50:e3:d1:87:3b:49:a0:30:
                    ab:d6:37:f3:55:90:d5:12:21:39:04:96:87:25:b2:
                    18:34:12:73:88:fa:b6:d6:d6:27:71:b9:99:1d:e7:
                    05:44:8a:2b:2c:62:df:20:1b:96:aa:b2:5b:69:56:
                    a6:76:ec:1f:4d:c8:01:5d:f1:bf:e7:5a:ed:cc:2e:
                    44:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AD:64:72:93:D3:AD:C3:FA:B8:1E:7F:DF:D6:A3:A8:A8:CC:C5:9F
            X509v3 Authority Key Identifier:
                keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:88:56:10:70:3a:18:12:5c:3b:1a:06:99:70:fa:a9:4f:88:
         e7:ef:4c:58:be:8b:90:ac:57:3a:69:df:fc:3b:6f:38:3c:73:
         43:66:66:a7:0a:81:ac:9d:12:10:e1:3c:27:b8:2c:e2:56:1d:
         9c:7e:57:58:56:44:fb:3b:d4:d0:d2:d7:e3:8c:42:ff:a2:74:
         48:4f:b2:fb:c8:60:f0:14:36:2a:57:54:16:48:9d:e4:03:60:
         60:ba:eb:4d:bd:54:0e:59:ba:60:6f:81:b6:ef:b2:d2:86:8c:
         0b:8e:43:3b:0d:3a:e9:cd:52:02:51:44:c7:f1:e1:e7:72:3f:
         f4:02:cf:ef:10:86:d9:b1:96:f2:9f:e4:4d:73:98:38:53:a4:
         69:43:25:95:03:6e:15:cb:d0:b3:f3:81:b8:b2:f6:1d:25:1b:
         af:e8:e5:bc:cd:77:20:42:a3:d1:09:54:7b:85:23:9a:58:3f:
         86:69:ce:b8:dd:a7:4b:99:3d:68:2a:14:36:d1:ac:03:6a:35:
         1b:4e:f2:3f:1a:3f:09:db:7c:d4:0f:6a:a5:3d:90:2b:34:5d:
         3b:df:13:b8:2e:6a:5d:b6:03:d2:05:52:59:8f:b2:5b:b4:b9:
         90:a4:51:ac:aa:e0:29:ca:a0:a5:0f:6f:3d:07:1c:c2:76:26:
         28:ef:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:48 2025 by rpki-client