Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          jbRFdlGttG5v5hPK1ZfYJRGmzjElorK/WSXmrf/XXlg=
Subject key identifier:   9F:15:54:A6:0B:C3:E9:73:4D:3D:23:BD:C3:69:2A:ED:E2:D4:52:01
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       019754C74007DCB38F90077F245ED5CE547A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0A74
Signing time:             Mon 09 Jun 2025 13:00:33 +0000
Manifest this update:     Mon 09 Jun 2025 13:00:33 +0000
Manifest next update:     Tue 10 Jun 2025 13:00:33 +0000
Files and hashes:         1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: +VPjuKrx1xkIYTmtk/KDRkSttuxm3Og/IQ26oOLSHRo=)
                          2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=)
                          3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=)
                          4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=)
                          5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=)
                          6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:c7:40:07:dc:b3:8f:90:07:7f:24:5e:d5:ce:54:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: Jun  9 13:00:33 2025 GMT
            Not After : Jun 10 13:00:33 2025 GMT
        Subject: CN=9f1554a60bc3e9734d3d23bdc3692aede2d45201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:cb:2f:67:8d:41:49:1c:36:ee:90:cd:ef:
                    dd:a5:6e:6b:af:3d:ce:54:e7:f5:cf:04:1d:25:5d:
                    51:2c:41:4a:57:0b:82:db:e8:dd:31:c1:c0:d7:00:
                    b4:69:eb:01:1d:04:c6:0c:52:f7:e2:ed:92:26:70:
                    9b:d7:c5:d2:3a:99:06:7c:06:d3:b0:51:de:f1:39:
                    56:04:97:31:fd:29:bf:f3:f5:78:73:9b:6c:13:76:
                    61:a7:78:0a:86:61:b7:00:bc:57:bc:77:c0:8d:ac:
                    a7:c2:55:e9:c0:33:4c:38:1d:df:70:72:b6:1d:6e:
                    ec:f3:15:7d:7d:b1:30:4c:6d:f6:c4:62:4e:ca:4b:
                    1a:ef:62:33:e3:76:3a:a7:b2:78:05:6c:7e:74:43:
                    44:76:3b:a5:4b:c8:20:e9:89:de:45:ae:55:86:22:
                    7f:21:bc:5c:b7:53:cc:2a:64:5e:c2:72:7e:f9:3e:
                    a2:2b:e0:63:53:f1:dc:92:39:dc:6f:ba:11:07:50:
                    6a:08:d3:73:6a:6b:a7:cb:2e:14:e7:0e:d9:1f:6b:
                    7e:d4:4c:fb:02:83:ed:2a:6a:1e:62:17:36:2d:84:
                    e3:34:ff:f1:f9:4e:20:43:0f:3f:55:26:9b:6c:b7:
                    19:cc:fa:34:ee:b5:00:58:c8:e1:a1:fd:a7:44:6e:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:15:54:A6:0B:C3:E9:73:4D:3D:23:BD:C3:69:2A:ED:E2:D4:52:01
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:48:53:3a:46:c5:9c:c9:a8:4a:62:9c:bc:10:08:6c:7b:b7:
         88:24:10:80:67:ae:94:79:6d:42:eb:26:20:e9:7d:5a:b1:e0:
         08:f7:f7:6f:a8:25:36:48:b1:2f:90:db:c8:fb:33:f1:44:9e:
         73:d0:66:0f:1a:54:aa:f7:ef:a3:e5:d2:3d:f7:d7:b5:75:54:
         74:47:fa:ce:74:ec:31:aa:de:c7:21:0d:78:0d:c7:ae:2c:a8:
         38:7c:70:6f:d5:35:54:2f:63:03:98:1d:79:33:4e:13:10:25:
         15:9d:f6:ab:5e:e5:39:66:1e:d0:3d:9f:b4:27:fa:55:ff:07:
         b0:23:5a:2d:20:63:c9:a5:ec:9c:dd:79:06:93:53:d6:28:b3:
         97:70:cd:3f:d1:fb:12:89:bd:ac:9d:a9:59:c6:c4:73:33:69:
         85:a8:99:5c:9c:24:30:3d:99:19:32:69:c4:35:8b:2a:2c:de:
         2a:01:55:50:8c:3e:7e:60:bd:70:ed:02:78:92:0a:4f:6e:65:
         a4:50:f9:28:2a:0c:b6:26:31:10:ef:1f:40:80:b5:bc:aa:4e:
         4e:f2:d9:a2:c1:a0:dc:a4:f5:b6:79:42:c6:d5:2d:8d:9c:be:
         8c:4c:c1:41:af:6f:7a:91:b5:4c:d6:88:f9:39:e9:ea:3a:7e:
         f7:7d:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:38:52 2025 by rpki-client