Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File:                     3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier:          1rYRIdkonMam9wqVUmUbDjy9VXz+6wMwNDfdA3unQ0g=
Subject key identifier:   63:DF:A7:3A:A9:3F:30:BF:88:5A:FD:46:F2:C8:FC:A5:D8:F9:F3:1E
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer:       /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial:       019746303CC145EC170E53A3CA2B51CA72BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number:          1388
Signing time:             Fri 06 Jun 2025 17:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:55 +0000
Files and hashes:         1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: hfvOX1GL9Kut7eJ9FDRUD8cGmFN8pNvT/Fm68oZI6mY=)
                          2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:3c:c1:45:ec:17:0e:53:a3:ca:2b:51:ca:72:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
        Validity
            Not Before: Jun  6 17:00:55 2025 GMT
            Not After : Jun  7 17:00:55 2025 GMT
        Subject: CN=63dfa73aa93f30bf885afd46f2c8fca5d8f9f31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:81:1b:3e:13:2b:d8:d2:df:e0:51:94:b7:
                    e0:62:bb:ee:90:08:e0:ea:50:d2:30:a0:7e:fe:96:
                    95:d9:01:e3:7c:df:be:74:a8:3f:1e:03:c3:97:68:
                    b7:97:42:70:5f:f8:bd:96:1d:c3:d3:20:a2:82:8a:
                    7f:f0:c4:1e:5f:6f:88:3e:69:f7:e1:36:69:89:64:
                    40:24:cf:c3:a8:ca:37:94:32:1f:dc:33:26:da:ef:
                    91:42:4e:12:1a:20:d0:30:f1:ac:c1:15:f9:b3:70:
                    44:36:37:35:e7:2d:29:94:e8:15:cb:a4:bc:bf:6f:
                    b0:90:78:81:b3:3e:94:ba:8f:28:54:02:53:d9:35:
                    b3:61:31:69:70:c9:6c:18:7c:e0:1a:3a:c8:7f:a5:
                    c2:c3:dd:76:95:bb:d0:73:4b:9f:f3:91:75:a6:a5:
                    53:c4:52:78:2d:2b:af:fb:e3:c7:5c:1b:40:96:31:
                    3a:77:a9:21:cd:60:cb:1e:60:53:51:4f:a0:d1:46:
                    f7:e0:b7:35:47:dc:39:87:bd:72:15:ae:f2:bd:ca:
                    14:8f:31:54:e4:6f:49:d9:c8:38:9e:a4:ef:7f:cd:
                    98:b6:2a:97:57:9f:ec:b1:67:13:bf:55:8f:de:e6:
                    65:d6:df:ba:22:29:f7:0b:1b:38:37:9b:5a:64:a3:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DF:A7:3A:A9:3F:30:BF:88:5A:FD:46:F2:C8:FC:A5:D8:F9:F3:1E
            X509v3 Authority Key Identifier:
                keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:28:46:86:4d:3d:28:ec:f6:ab:07:c9:d7:4c:db:24:81:5f:
         2c:37:59:4f:05:af:45:66:18:e7:60:db:da:de:f6:44:f1:ea:
         40:71:6a:65:c8:6f:08:5a:8c:fc:a3:83:f6:1e:59:eb:44:d3:
         41:08:3e:2a:bc:de:89:a3:a4:5f:10:aa:be:1c:70:ed:62:35:
         70:29:75:ab:88:a1:ac:ca:e7:b6:96:2f:e1:be:c4:c5:2f:19:
         d5:54:a0:6d:5e:7a:a0:92:02:4e:00:07:ec:05:f1:42:4d:58:
         a0:ad:53:8c:8d:56:cb:1b:fc:3e:0d:d4:42:82:aa:7d:e0:a9:
         e2:8f:f0:9a:72:ad:f6:cd:0e:81:d2:d6:80:3d:9d:28:e6:00:
         58:95:f1:84:70:f6:bd:61:b9:9f:29:b8:d2:30:5c:55:78:03:
         97:f9:36:f5:13:7c:18:be:2e:f5:41:fa:74:20:b6:74:f8:de:
         41:72:75:01:13:90:c3:45:5e:c3:99:70:cd:ac:72:36:d0:0d:
         e2:a2:12:34:ef:76:65:f3:75:0a:5c:b4:1c:f5:96:03:81:c2:
         c1:a1:fc:0a:10:92:39:9e:5d:c0:8d:ed:21:4e:d4:b5:54:e1:
         15:ca:80:08:e6:2e:61:09:c1:dd:ab:90:16:1c:3a:5b:c0:03:
         67:81:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:21:36 2025 by rpki-client