Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File:                     3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier:          uGsxrbiBVDq+WstGB6NF1mLZTO49eam+HVqHTl97qfQ=
Subject key identifier:   7A:95:69:A4:7D:D8:13:E6:A2:8A:FF:69:7B:80:82:00:D9:F6:73:3F
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer:       /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial:       01974E8E5831809025B34A2D65BA9D49F9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number:          0271
Signing time:             Sun 08 Jun 2025 08:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:40 +0000
Files and hashes:         1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: 8zQvIO4yzEzIAh/eModTZQFtkvHQd2VqlBkzuBmG/V8=)
                          2: SHvoKKIBU3wgrybj6zWAE812zjc.roa (hash: yK7W9vbdAmqtnEpvGmawrHGyq/oUYACQgVTYc+60SM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:58:31:80:90:25:b3:4a:2d:65:ba:9d:49:f9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
        Validity
            Not Before: Jun  8 08:00:40 2025 GMT
            Not After : Jun  9 08:00:40 2025 GMT
        Subject: CN=7a9569a47dd813e6a28aff697b808200d9f6733f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:d4:66:6e:43:64:6e:a5:06:05:46:c4:67:
                    cc:de:43:91:83:ba:90:69:ac:44:20:02:e7:a2:31:
                    49:43:1c:bd:d4:76:4d:2d:f9:2f:92:52:b1:8c:04:
                    92:66:27:d9:0f:16:56:e4:b1:95:22:0f:da:a6:5d:
                    50:7f:b6:d1:e2:d1:fd:89:88:a1:6d:f3:f2:aa:32:
                    12:26:ee:f1:55:28:a8:6e:16:11:d2:e8:7a:b7:9e:
                    6f:b6:96:b6:cb:eb:4d:46:8d:a7:06:58:bb:5a:01:
                    44:72:9a:35:ca:b4:5d:d8:7c:ca:40:8f:11:b9:db:
                    19:4e:c3:72:a9:6f:6c:65:a7:1e:ef:bf:ad:26:10:
                    5e:e3:a9:c3:fe:0f:a4:c9:15:32:36:bd:51:13:b3:
                    e0:13:7e:23:54:94:82:d1:98:6d:dd:49:6f:38:31:
                    f1:41:65:f0:f2:12:c1:84:10:0c:d8:40:a4:25:f2:
                    24:c4:35:40:84:34:eb:3f:59:74:f7:a3:9b:33:44:
                    42:3a:f7:29:df:ae:51:55:25:30:ad:70:75:c9:3d:
                    3e:f6:4d:9c:1f:4c:8b:19:66:14:20:86:d5:93:9a:
                    60:75:e2:aa:dd:4b:30:d6:40:52:87:cd:f8:7b:c7:
                    01:e2:9b:f6:aa:73:31:34:e3:3b:5d:65:57:0d:20:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:95:69:A4:7D:D8:13:E6:A2:8A:FF:69:7B:80:82:00:D9:F6:73:3F
            X509v3 Authority Key Identifier:
                keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:17:89:44:95:33:50:19:ca:7a:44:17:40:a3:f0:aa:11:3c:
         f5:6d:65:09:bc:8e:82:45:86:80:17:ba:d6:31:be:fb:00:5d:
         1b:a4:32:cb:fc:61:b5:c0:8e:66:8f:12:8d:0b:4e:3e:ad:cb:
         23:6d:f0:61:dd:ce:fb:f8:9a:87:7b:04:bd:cf:0f:e3:13:f1:
         2f:62:72:bc:8c:9f:27:55:71:9b:ef:a6:31:2c:8a:a3:77:87:
         86:cd:94:97:58:ea:1d:b4:06:19:d9:ea:7b:82:a2:5f:65:60:
         b0:d3:a2:2a:eb:be:92:16:f0:66:87:36:4c:99:51:37:48:5b:
         f9:52:45:04:f6:20:31:09:ed:6f:c9:e5:89:ef:d0:1e:7c:2d:
         b5:9e:3e:d5:d4:75:6c:a7:59:fc:67:70:40:8c:d6:6b:07:c1:
         af:25:31:47:e3:66:a9:86:7d:dd:23:35:89:e5:b1:5c:4d:4c:
         57:43:46:68:88:ea:83:a9:cd:f2:a7:d0:44:21:f9:d4:4a:60:
         e4:7b:eb:f5:9d:7b:60:77:5c:80:e9:7a:ec:35:49:63:3a:14:
         f2:bf:a7:de:7e:03:f3:54:92:64:d9:e6:ff:f4:20:60:55:76:
         e5:3f:ef:83:ac:7f:09:3c:db:84:9a:ea:9a:74:1b:a2:06:8d:
         ac:1a:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:07:16 2025 by rpki-client