Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File:                     3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier:          LCb574CD2N4gnuT1ueD5c9mm4ZSeqOZG5pYj6tjMcb8=
Subject key identifier:   BE:AC:79:CD:B3:69:0F:2A:04:5A:D6:48:80:46:06:EC:E5:E0:02:49
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer:       /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial:       01976C9889B979BDA12EF0674A1648A6766F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number:          116B
Signing time:             Sat 14 Jun 2025 04:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:25 +0000
Files and hashes:         1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: gS48K7qN5nWSx71eLjp5J1es0av9KoRndSLofqjCGCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:89:b9:79:bd:a1:2e:f0:67:4a:16:48:a6:76:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
        Validity
            Not Before: Jun 14 04:00:25 2025 GMT
            Not After : Jun 15 04:00:25 2025 GMT
        Subject: CN=beac79cdb3690f2a045ad648804606ece5e00249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2d:72:24:ef:b0:bd:d5:7c:d9:f2:3f:86:8a:
                    1c:7e:44:03:9f:8b:c7:93:f9:13:bb:58:64:b4:ce:
                    39:f1:2a:7e:3e:ee:d7:6d:e6:b3:90:d8:0d:80:fe:
                    18:0b:f6:3d:52:51:ae:8e:ad:f8:95:a6:8a:81:86:
                    ba:c6:2e:cb:50:a0:21:f4:22:d4:ce:a1:f9:b6:5c:
                    3c:48:fe:7f:39:90:9b:a7:06:45:66:53:d3:57:87:
                    26:d0:cb:ee:b7:ec:57:53:0b:cf:b1:42:97:a0:ea:
                    35:64:d7:c5:f9:df:c7:06:9b:75:32:9c:3c:c2:51:
                    f2:dd:e7:8e:7e:c5:02:0b:4c:bd:48:1a:cf:85:64:
                    70:03:66:34:c5:eb:b6:38:02:f2:94:d1:3d:62:03:
                    6a:3b:22:dd:5f:86:45:bf:c6:96:42:fc:21:03:56:
                    f1:3d:32:9f:a2:ba:2d:ae:58:3f:74:89:dc:eb:c9:
                    ca:cb:4e:30:ac:8a:aa:b0:7c:4a:1c:f1:11:6b:05:
                    6d:26:6d:88:12:d7:89:28:1d:c5:a6:93:2d:48:a0:
                    20:fd:15:ff:b5:e6:a8:05:36:05:3a:be:38:af:c6:
                    b4:39:19:51:8e:d2:bf:15:83:7d:ef:4d:de:0a:0f:
                    ad:1b:98:2d:06:cd:23:44:d5:e6:0d:38:b2:de:0d:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AC:79:CD:B3:69:0F:2A:04:5A:D6:48:80:46:06:EC:E5:E0:02:49
            X509v3 Authority Key Identifier:
                keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:98:84:31:86:0f:f2:1d:bb:f7:16:01:00:15:79:05:3c:
         95:8c:84:a6:34:18:6e:79:fa:4e:1b:4b:46:04:33:f2:15:d2:
         9a:ff:05:e6:ff:fb:5b:20:2f:21:21:20:38:a0:79:37:04:f3:
         a0:f7:cd:e3:fb:6d:ea:7c:74:2c:7c:5e:d3:49:08:79:da:fa:
         fd:90:93:de:81:1e:a0:b4:0e:1a:df:21:fc:fa:3c:38:3a:ae:
         15:5d:7e:c2:80:3c:e7:b5:15:01:0d:0a:30:09:cd:11:9a:a7:
         00:ea:52:0f:7f:48:a3:88:72:47:3d:a9:4d:16:2f:6a:33:cf:
         eb:b8:81:38:12:91:f1:c4:74:d0:86:16:58:89:ff:da:57:3f:
         87:08:c0:2e:1a:56:9d:a4:64:18:d4:f6:b7:2b:31:94:52:14:
         7f:c1:cb:ae:06:7f:91:05:b4:6e:c0:cc:c3:19:f8:af:fb:89:
         3f:e6:c3:50:4c:4d:e1:c6:d3:da:47:3c:7b:36:da:ca:11:ff:
         dc:bc:bb:b4:0e:70:21:6e:7d:48:b7:2a:fe:62:16:9c:d8:e8:
         d4:28:57:46:4e:2c:c2:16:6c:61:c3:29:1a:19:b5:33:5e:d9:
         63:df:c9:8c:36:84:f8:6d:ef:65:93:f4:5a:59:b7:09:d8:64:
         08:a4:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:59 2025 by rpki-client