Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
File:                     3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json)
Hash identifier:          nPr9kmhG4p+EgEMgx36IFO2e8b07d8Q0oNP/k2yoDNQ=
Subject key identifier:   0E:45:20:2C:80:69:34:44:E3:98:76:A2:08:71:9E:F3:71:16:EE:EE
Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
Certificate issuer:       /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Certificate serial:       01976D3D877BC653F6C798FF0E8EC6A649C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
Manifest number:          05F7
Signing time:             Sat 14 Jun 2025 07:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:38 +0000
Files and hashes:         1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: kVeehv7uKVzxevq0odyeSWSpd82Mfg9chc79Be5s8lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:87:7b:c6:53:f6:c7:98:ff:0e:8e:c6:a6:49:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
        Validity
            Not Before: Jun 14 07:00:38 2025 GMT
            Not After : Jun 15 07:00:38 2025 GMT
        Subject: CN=0e45202c80693444e39876a208719ef37116eeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:61:bb:84:a6:64:78:91:f9:8a:bb:60:15:
                    84:a8:ff:bd:81:aa:f9:f1:f0:f2:1e:ac:31:7b:e7:
                    bb:1f:ad:70:20:45:54:12:7d:78:31:bb:65:3a:23:
                    bc:df:dd:e6:8d:a6:66:6e:b3:ab:96:b4:84:84:6c:
                    b7:2b:e0:cc:44:f0:b0:31:43:c5:ae:20:74:9a:cb:
                    9a:21:f4:a4:d9:57:cc:ec:53:4c:ed:e6:25:5a:9e:
                    2a:1f:fa:13:ac:b1:55:8d:19:70:b4:bf:b1:70:ab:
                    fb:ec:24:04:e7:3a:9a:ab:47:2d:20:cc:7f:1c:63:
                    83:ad:ad:1d:d3:12:6f:b8:d0:07:13:92:e5:61:26:
                    7f:88:7c:8d:e4:69:f1:a0:a9:be:5f:1f:d8:f5:c1:
                    23:8a:45:46:5b:34:43:f7:74:65:22:46:71:a7:dd:
                    d6:07:85:7b:45:33:08:5d:70:3e:f9:bd:da:64:4d:
                    b3:37:ea:87:e8:a8:41:0d:d3:4b:0c:d7:2e:d8:a6:
                    e3:2b:80:54:0a:d6:4e:18:43:8e:f2:8c:05:f6:ae:
                    24:f9:16:18:a5:76:33:4e:86:86:ec:b9:8f:96:ef:
                    fc:5b:9c:76:b1:cc:50:c0:98:ec:28:3d:ae:7c:d1:
                    20:8d:6a:3f:32:d8:a5:68:0b:0d:df:c4:e8:5c:34:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:45:20:2C:80:69:34:44:E3:98:76:A2:08:71:9E:F3:71:16:EE:EE
            X509v3 Authority Key Identifier:
                keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:39:42:bd:2c:97:67:a7:48:65:82:27:1e:44:de:11:92:
         b4:37:20:4b:52:1d:f0:ac:5a:46:82:33:6d:8a:73:4c:10:1e:
         c4:91:e8:f6:73:1d:ea:07:6f:cc:35:f8:c8:50:91:22:df:29:
         20:e7:75:e4:81:5e:e7:4b:ab:50:b3:1d:67:e5:49:e2:b8:7c:
         da:b9:55:60:14:32:bd:23:ab:7a:f0:30:6c:27:49:94:cc:c1:
         8f:a2:21:4f:76:fc:ad:2f:93:02:1c:8e:95:11:fa:57:0d:c0:
         1f:36:08:93:ff:7a:22:1e:f5:4b:ee:d0:4a:06:3d:eb:34:5f:
         12:7b:0f:25:15:da:f3:14:f0:97:89:3d:86:48:a8:a7:b5:9d:
         5f:7e:4e:61:60:e8:12:02:6a:0e:1b:f6:57:da:1e:7e:7b:1e:
         ae:45:1f:2a:db:7a:92:c7:c3:af:48:14:02:ed:3f:85:07:e9:
         33:bd:17:8b:92:5a:ac:fd:c9:90:d8:b3:44:b8:c8:4c:0f:f7:
         5d:5a:1b:e8:d2:ec:d4:f4:35:0b:a4:e1:1a:f2:e6:a0:a9:11:
         9a:fa:2d:80:a6:c0:8e:04:ca:eb:6d:90:f6:e4:a5:40:ea:83:
         44:fd:9a:16:34:45:2d:5e:46:cb:51:f4:60:1b:9b:33:b6:e1:
         1b:8f:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:46:41 2025 by rpki-client