Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File:                     F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier:          KgZp89OdPYqxVlQ4/vM/PBxTPjauWuel9Y1tLFaCqFQ=
Subject key identifier:   62:F9:55:80:2F:7C:19:2E:EA:D6:D9:A2:CB:FC:BA:58:33:CE:45:3B
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer:       /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial:       01976C61CD4FB8C815A342623F5D235BCA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number:          0DEC
Signing time:             Sat 14 Jun 2025 03:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:38 +0000
Files and hashes:         1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: AaN0xsWfKwW8wWSz70OBLW6tagji88o1Y5FmbF4QiQg=)
                          2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:cd:4f:b8:c8:15:a3:42:62:3f:5d:23:5b:ca:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
        Validity
            Not Before: Jun 14 03:00:38 2025 GMT
            Not After : Jun 15 03:00:38 2025 GMT
        Subject: CN=62f955802f7c192eead6d9a2cbfcba5833ce453b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:14:15:35:e5:d0:62:e6:be:90:b0:37:57:
                    01:ac:66:af:10:cd:02:eb:70:97:2e:48:93:45:6d:
                    da:f7:f5:bb:ca:a1:53:1a:99:b2:76:a6:c2:81:8b:
                    ba:fa:c0:57:4f:8e:d2:ba:8d:25:6b:f4:d0:6d:8a:
                    79:85:ea:23:52:5d:94:84:92:ab:27:e2:85:5f:c8:
                    5e:13:72:6c:30:24:e6:ca:37:c3:6c:61:ea:ba:be:
                    2a:54:82:6b:2c:fe:39:27:1f:21:2c:0c:99:85:c0:
                    b1:2c:a5:22:97:1f:18:cf:f8:75:ce:2f:bd:ad:c9:
                    5b:8b:a9:b8:f7:a8:ab:39:3f:35:dd:b9:6d:a0:fc:
                    fa:ae:33:3f:f4:0f:46:15:5f:d9:5e:e2:3a:49:4d:
                    ab:7c:32:d6:93:7a:d5:32:2b:15:ae:13:42:d5:7b:
                    c9:46:64:55:e0:05:08:19:a1:df:ce:03:0e:2b:11:
                    31:a7:48:df:30:5b:c4:16:b3:4c:06:cc:bd:c7:f6:
                    86:19:bc:51:e4:ff:b2:51:4b:cb:07:29:67:f4:77:
                    43:76:c3:4f:a1:c0:0d:c5:cc:28:0d:a8:64:8d:8c:
                    3d:ce:1e:9c:0a:6b:1d:92:d4:0c:76:f2:32:1a:a7:
                    ff:e6:f4:9a:e8:95:94:54:7b:c1:e8:ae:cd:99:a0:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F9:55:80:2F:7C:19:2E:EA:D6:D9:A2:CB:FC:BA:58:33:CE:45:3B
            X509v3 Authority Key Identifier:
                keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:13:96:31:11:8e:d8:3a:a6:b1:fa:3a:ae:e3:26:76:01:
         10:0c:86:ae:94:ce:70:ec:44:e9:d3:8e:a0:4c:83:2f:2c:08:
         40:cd:ae:94:aa:3c:72:2a:3b:3e:dd:a9:7a:8d:aa:13:db:b0:
         8b:4a:48:b2:7e:92:29:1e:93:a2:46:9c:b9:42:8b:6d:55:db:
         26:d5:4e:85:81:80:87:e4:d0:42:45:1c:26:ca:f8:4c:04:83:
         06:3c:05:1a:ae:eb:c4:ad:64:2f:34:bc:26:57:00:c2:54:6e:
         07:d2:2a:63:c1:4b:18:89:5b:96:86:ea:db:81:13:48:47:8a:
         37:2a:de:72:1b:6a:47:3b:72:ef:a1:5e:90:11:ef:c6:dd:a3:
         76:90:aa:bd:a7:78:c8:cc:7d:73:fc:5d:ec:bc:1b:a4:62:7a:
         1b:ec:7a:40:41:75:e7:e5:a5:91:91:40:e9:51:44:9e:a5:5c:
         74:06:ee:6d:c3:10:b6:d1:64:b4:ba:42:6a:d4:51:8e:c6:ce:
         77:b2:fc:3c:2d:5d:5c:c3:9b:df:84:73:17:be:16:83:47:31:
         dc:ee:60:78:be:5f:c4:27:02:94:3d:2d:7d:c4:e3:f2:e7:58:
         04:48:f7:59:6f:fc:88:04:d0:39:44:7c:07:2f:9f:16:04:86:
         2a:3b:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:48 2025 by rpki-client