Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          oebcUDavcn/s84G0dWqiWuPash8iWWmKo6KZkUi34lY=
Subject key identifier:   3F:FC:C6:F8:50:0B:E1:9A:80:1C:8B:BC:70:55:F1:35:2F:49:19:92
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       01987306CF4C8DD5BCF1ED3535FFC707AECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0A64
Signing time:             Mon 04 Aug 2025 03:01:22 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:22 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:22 +0000
Files and hashes:         1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
                          2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: brKmGVvuxPbvrLFc1a3TIP1JGjIrjoFzcTJ4+kaYNYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:cf:4c:8d:d5:bc:f1:ed:35:35:ff:c7:07:ae:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Aug  4 03:01:22 2025 GMT
            Not After : Aug  5 03:01:22 2025 GMT
        Subject: CN=3ffcc6f8500be19a801c8bbc7055f1352f491992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:f1:ac:09:75:e6:d4:f5:6c:c2:ca:8c:d9:
                    ab:7f:83:92:d0:02:8f:f7:0d:6f:a9:99:d7:42:b7:
                    8e:b7:4e:9c:55:53:fa:1b:74:32:46:93:00:3b:f3:
                    d5:51:3d:92:b1:a0:09:6f:a4:82:a7:80:b4:d7:1e:
                    dd:86:7f:70:29:72:11:42:4a:aa:72:b1:76:3b:cc:
                    e5:e5:99:8a:f0:fd:86:87:7f:39:63:61:bb:c9:a6:
                    8e:73:cc:fa:aa:d9:a7:33:dc:c9:a9:09:f2:67:04:
                    d3:b4:0e:7e:25:c9:d4:53:17:a3:e2:b7:dc:32:40:
                    5b:05:58:f4:f2:f5:4f:13:1d:11:bb:ea:10:72:13:
                    21:a4:46:c6:de:37:3a:09:b6:0f:c4:35:81:32:31:
                    55:f8:1f:57:19:ef:11:4b:a5:b9:4d:48:af:e7:16:
                    3a:42:41:4e:29:7f:a7:1d:f6:0a:48:c6:3e:df:f0:
                    90:90:d4:2d:1c:14:88:5c:b2:69:82:7f:d8:2f:b4:
                    94:c4:df:9f:cd:b3:ac:1c:d8:57:13:c2:bd:6a:f1:
                    04:01:98:18:95:34:56:6a:95:9d:03:74:7b:af:11:
                    54:b1:d2:d2:a4:08:6d:ca:d4:4f:a0:cf:97:ed:c4:
                    ee:81:57:a5:86:e9:80:84:fe:d7:ed:0d:c5:bd:6d:
                    3b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FC:C6:F8:50:0B:E1:9A:80:1C:8B:BC:70:55:F1:35:2F:49:19:92
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:65:ab:65:48:55:82:25:97:f9:f2:69:c5:49:2a:95:fc:
         5f:3d:fa:36:8a:8b:03:b6:fe:72:5e:94:31:61:20:1a:ab:7f:
         80:70:39:56:95:e9:45:54:fc:b6:ee:71:25:18:d9:68:d1:0f:
         c3:87:6d:72:dd:66:e3:6e:d1:c0:76:0b:36:ae:33:bb:b1:e9:
         f5:c9:2f:7e:1e:cc:92:13:2f:de:db:2f:3d:a7:a4:e2:68:49:
         d6:7b:c8:43:b8:e4:ff:44:eb:7c:b0:ce:29:b3:8e:ec:11:36:
         5e:c1:0e:af:50:06:9d:a7:2a:68:4b:40:f4:19:fa:aa:1d:69:
         b2:15:d5:1b:18:fd:3d:f5:e5:84:82:4d:76:a3:5c:ba:7a:57:
         be:ac:0d:36:ad:f6:d1:26:bb:89:2b:ab:4d:50:2f:5d:6b:7b:
         f8:68:a9:f5:66:05:4c:12:38:bf:ba:d0:b3:fc:4e:0e:61:69:
         0c:c6:ea:2c:04:1f:a7:cc:0c:6f:ae:c6:84:ee:e7:02:a6:6a:
         fb:2e:f5:44:30:7e:69:42:4c:09:30:98:41:6e:65:05:96:1a:
         ed:8a:d0:38:78:25:cd:a1:ed:f8:b1:2c:6c:e1:fb:70:3b:26:
         89:ff:90:af:b9:31:1e:1f:12:17:98:42:b8:53:00:d4:1d:49:
         8c:8d:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:35 2025 by rpki-client