Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File:                     3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier:          Vp31EycrejGl8JQxpN8m5o8vg+9/7QrT0b2K1amS1Bw=
Subject key identifier:   F1:22:7D:66:54:97:E2:3F:56:DC:D9:53:68:A1:C8:F8:50:18:C9:2E
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer:       /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial:       019748FA9CB4DD6C88F7516B28F67F16A59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 06:01:12 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:12 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:12 +0000
Files and hashes:         1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: xQzxVleb79+pRNwT+QiEehZQI4vboTUk4tUO19xVqZA=)
                          2: JiXA3NEuZkH0QXN05zeuUA5jMwY.roa (hash: YFDd4vweHXAu3AFKCBPOWScIToP/BlFEZooHjiGGKLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:9c:b4:dd:6c:88:f7:51:6b:28:f6:7f:16:a5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
        Validity
            Not Before: Jun  7 06:01:12 2025 GMT
            Not After : Jun  8 06:01:12 2025 GMT
        Subject: CN=f1227d665497e23f56dcd95368a1c8f85018c92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:be:35:08:89:b7:5a:ca:07:36:92:a2:ff:
                    83:14:22:49:d5:68:d4:b2:bc:d4:9b:6f:b8:a8:49:
                    32:bf:13:f3:56:31:7d:e3:23:c4:fa:f3:8c:d7:8d:
                    5d:19:d7:e7:9c:77:eb:87:16:77:12:de:bf:96:4d:
                    9f:a9:72:64:8e:bf:8c:b9:ee:14:70:ca:e9:2e:54:
                    18:93:b2:0e:35:f0:e6:24:2c:d2:c4:63:e2:80:3f:
                    02:57:67:6b:8a:25:ed:8b:55:42:6d:93:70:ba:11:
                    73:64:92:c3:26:9b:ce:19:69:bf:7b:1d:23:4d:ed:
                    eb:5f:0b:5d:ca:fb:c2:7a:50:ae:2a:7e:25:83:03:
                    0f:97:38:cc:bb:e1:67:ab:f0:1b:c3:05:84:fa:f6:
                    b4:69:b0:a7:6d:ef:e6:79:6d:40:c6:f9:0a:12:16:
                    fb:94:9c:40:16:f5:49:ef:4e:d5:a6:17:dd:56:65:
                    f1:fc:fd:11:bb:fb:94:94:9f:98:e2:90:fd:45:8e:
                    02:5a:13:81:32:0a:29:a0:2c:a9:61:bb:10:6e:88:
                    21:78:41:5d:87:d0:cc:36:2e:0d:28:23:41:f1:e6:
                    95:4c:e2:85:67:f8:da:4b:b8:75:88:8f:c7:77:d1:
                    84:eb:cc:43:f8:cf:49:16:bf:df:be:50:bb:77:07:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:22:7D:66:54:97:E2:3F:56:DC:D9:53:68:A1:C8:F8:50:18:C9:2E
            X509v3 Authority Key Identifier:
                keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:92:5a:2b:ad:db:91:bc:fe:6c:c0:74:3b:b7:6c:0d:e8:d5:
         54:1a:8e:e6:30:ef:e2:8d:a3:38:b8:e8:0d:37:d0:42:48:58:
         26:71:de:c4:3c:1b:0f:78:34:1a:05:08:cd:99:93:f5:6e:7d:
         7c:e2:57:d8:09:41:be:1f:fc:57:88:ff:8d:01:f7:f2:b3:42:
         c5:d2:49:3b:d8:fa:8e:99:0e:6f:33:98:4e:60:05:0d:ad:dd:
         5d:5d:07:bd:82:f7:82:95:40:cc:f2:48:01:8d:a5:f6:5f:7c:
         3d:49:bd:42:42:be:cb:65:e7:7f:bd:c8:96:1c:67:32:16:3c:
         43:49:39:64:82:1e:a5:41:c1:28:a8:88:7f:0f:1a:e6:92:fc:
         36:bd:38:fb:a6:e1:cd:4d:51:a0:f4:15:2e:19:e5:da:23:8e:
         69:0f:ee:c8:35:f7:ee:d7:81:b0:33:6c:87:c3:44:ed:6a:70:
         3c:bb:04:10:e6:d1:e9:a9:e1:76:1a:66:61:ba:fe:d1:bb:c4:
         41:22:9a:25:c9:3a:02:c1:25:0b:79:0e:c1:76:47:fb:25:8c:
         30:32:f4:64:ef:51:b9:eb:20:33:23:5b:cd:fc:17:3a:f9:f6:
         a6:9b:eb:1b:f7:1f:7c:7c:ee:61:cc:90:f5:d1:52:9d:1c:97:
         fa:3d:dc:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+py03WyI91FrKPZ/FqWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmEzNzQyZjBmMGZiMTIwOTIyYjMzOWVmMDFjZWNmODdm
NGQxZWUwHhcNMjUwNjA3MDYwMTEyWhcNMjUwNjA4MDYwMTEyWjAzMTEwLwYDVQQD
EyhmMTIyN2Q2NjU0OTdlMjNmNTZkY2Q5NTM2OGExYzhmODUwMThjOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreG+NQiJt1rKBzaSov+DFCJJ1WjU
srzUm2+4qEkyvxPzVjF94yPE+vOM141dGdfnnHfrhxZ3Et6/lk2fqXJkjr+Mue4U
cMrpLlQYk7IONfDmJCzSxGPigD8CV2driiXti1VCbZNwuhFzZJLDJpvOGWm/ex0j
Te3rXwtdyvvCelCuKn4lgwMPlzjMu+Fnq/AbwwWE+va0abCnbe/meW1AxvkKEhb7
lJxAFvVJ707VphfdVmXx/P0Ru/uUlJ+Y4pD9RY4CWhOBMgopoCypYbsQbogheEFd
h9DMNi4NKCNB8eaVTOKFZ/jaS7h1iI/Hd9GE68xD+M9JFr/fvlC7dwdQpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEifWZUl+I/VtzZU2ihyPhQGMkuMB8GA1UdIwQY
MBaAFNxqN0Lw8PsSCSKzOe8Bzs+H9NHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgt
Y2MxZDJjNWUxYjMxLzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgtY2MxZDJjNWUxYjMx
LzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZJaK63b
kbz+bMB0O7dsDejVVBqO5jDv4o2jOLjoDTfQQkhYJnHexDwbD3g0GgUIzZmT9W59
fOJX2AlBvh/8V4j/jQH38rNCxdJJO9j6jpkObzOYTmAFDa3dXV0HvYL3gpVAzPJI
AY2l9l98PUm9QkK+y2Xnf73IlhxnMhY8Q0k5ZIIepUHBKKiIfw8a5pL8Nr04+6bh
zU1RoPQVLhnl2iOOaQ/uyDX37teBsDNsh8NE7WpwPLsEEObR6anhdhpmYbr+0bvE
QSKaJck6AsElC3kOwXZH+yWMMDL0ZO9RuesgMyNbzfwXOvn2ppvrG/cffHzuYcyQ
9dFSnRyX+j3c9g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:38 2025 by rpki-client