Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File:                     _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier:          nIFCZB6G+wYZBG+zei0fft9OG4/4iMLAb1lyDg/fNp8=
Subject key identifier:   23:07:1F:7D:9F:08:01:59:78:E6:7D:7B:74:1E:AF:C6:6C:AE:72:AE
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer:       /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial:       019745C29BBDFEA3CA8542BBBB48AC5633CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number:          3A
Signing time:             Fri 06 Jun 2025 15:01:11 +0000
Manifest this update:     Fri 06 Jun 2025 15:01:11 +0000
Manifest next update:     Sat 07 Jun 2025 15:01:11 +0000
Files and hashes:         1: 3gBbUpzoZ_NS48pVPCMN6ErX32g.roa (hash: LdH7+fCou1DXhFQSVmkaHCyede3+anbIJwlMXR+OI+M=)
                          2: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: DoBVPUT+YgvHUR+RLPY8pCOGCpGueCX1EBxtl0Mwbas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:9b:bd:fe:a3:ca:85:42:bb:bb:48:ac:56:33:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
        Validity
            Not Before: Jun  6 15:01:11 2025 GMT
            Not After : Jun  7 15:01:11 2025 GMT
        Subject: CN=23071f7d9f08015978e67d7b741eafc66cae72ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:26:43:56:40:5f:ec:1f:68:11:fc:0f:f5:a6:
                    b3:0b:19:d7:68:01:fb:28:5b:9e:55:ab:72:1c:c6:
                    80:8d:05:c1:cc:a1:dd:32:b6:d7:80:40:7d:71:09:
                    f9:ad:d0:ab:43:7c:82:d5:37:70:e0:16:15:37:a9:
                    0d:a4:1b:76:8b:9e:d0:5e:49:47:68:c6:ad:24:76:
                    19:21:be:3c:ca:75:06:b1:5b:77:f9:02:30:09:40:
                    46:8e:3a:54:5e:0b:53:aa:e1:e4:1e:35:9e:d3:2a:
                    1b:17:5e:33:3c:00:32:ff:81:d3:a1:88:d3:58:ef:
                    88:59:b5:b6:04:9b:5e:e6:18:31:0b:b9:8c:d7:11:
                    69:a4:c2:9e:ea:f2:4b:6d:f2:65:53:aa:0e:87:e7:
                    0a:80:82:44:9a:15:dd:3a:56:fe:d3:7f:02:15:89:
                    10:d4:b7:2d:f3:07:cc:2c:3c:ba:da:dc:ac:82:40:
                    cc:79:d6:18:04:4c:b2:b8:18:34:b4:eb:46:51:43:
                    e1:55:e1:67:e0:a9:8a:5f:3b:34:5d:9a:3a:15:8c:
                    97:89:88:4d:a8:c1:72:d0:20:d8:9a:b9:90:e1:7d:
                    f1:c4:99:12:0a:e2:49:c5:7f:fe:d1:bb:a2:ea:98:
                    37:2f:a2:f6:9e:80:5e:e3:ad:70:ec:ce:b1:4e:ff:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:07:1F:7D:9F:08:01:59:78:E6:7D:7B:74:1E:AF:C6:6C:AE:72:AE
            X509v3 Authority Key Identifier:
                keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:de:45:23:0e:21:03:25:49:b9:40:69:1c:f3:73:9c:b0:84:
         aa:e6:52:11:70:30:c0:2a:bc:36:50:64:ba:98:ef:e8:dc:d4:
         d5:f7:14:05:45:8e:47:65:e8:c3:2a:d4:51:75:9b:87:18:9e:
         a1:4e:9a:d6:27:4f:99:f9:ac:d1:f6:db:53:cc:7e:f0:28:2c:
         b4:9b:a9:50:27:3c:33:14:34:ce:b0:56:72:43:ba:ad:3d:50:
         5c:25:c3:90:02:48:07:a4:e8:04:ba:da:b7:7e:0f:9e:bb:f0:
         61:75:49:bf:8a:2f:9c:22:63:f2:05:74:24:59:e2:2f:ea:b2:
         d4:e3:ec:4b:09:6f:d6:d2:3e:ca:9b:09:9c:22:97:a3:ad:ea:
         95:f7:07:63:d8:a3:c5:85:f4:5a:03:63:0e:b3:87:f0:7a:3c:
         3d:0f:1c:40:09:86:5e:ae:56:bf:cb:2b:2a:15:27:c4:8e:ee:
         91:0f:89:a3:bb:41:f4:18:d9:47:a0:35:88:97:61:3d:1d:4d:
         a3:28:cd:1b:21:fb:ad:2d:74:1f:50:2c:a0:f1:7f:33:cb:88:
         ba:6e:4a:ae:3f:c8:4b:c3:ee:87:86:81:02:a9:dc:18:ba:11:
         b0:d4:c6:cb:40:b8:7b:27:61:05:f8:14:9b:9b:6c:41:33:a7:
         10:31:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:43 2025 by rpki-client