Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File:                     3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier:          E3t5a4WGCK+gNEN0uiTuAfzcKtTM0Bhik2Nvyjc+5y8=
Subject key identifier:   8D:21:5F:CF:18:DD:2C:2F:7A:3E:6E:A8:31:91:6F:3B:24:29:CC:93
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer:       /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial:       01987306C906E8394E8889F010DE95F5E651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 03:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:21 +0000
Files and hashes:         1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: j46FqmQtaOvkVwBTm2E2Xh0xUfa/VOmfFhjqICluJFo=)
                          2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:c9:06:e8:39:4e:88:89:f0:10:de:95:f5:e6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
        Validity
            Not Before: Aug  4 03:01:21 2025 GMT
            Not After : Aug  5 03:01:21 2025 GMT
        Subject: CN=8d215fcf18dd2c2f7a3e6ea831916f3b2429cc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:3f:94:3e:dd:06:d0:f3:ca:5e:8c:20:9a:
                    c4:18:7a:2c:b5:c5:2c:41:d5:bc:8d:a3:c0:6c:35:
                    f0:1e:f5:d6:96:75:1f:aa:8c:a3:93:40:8e:df:75:
                    11:56:c3:fa:95:ca:b4:20:c1:45:06:a8:2c:8b:58:
                    c0:ba:11:60:a2:14:34:2f:f8:b0:09:1b:35:05:4a:
                    17:01:3a:9f:16:3a:78:90:69:c3:66:5d:eb:66:e0:
                    3b:2d:71:94:bc:83:b5:54:db:0c:f7:71:bf:95:03:
                    8d:62:7c:fc:46:c3:34:b3:a9:11:d1:21:be:b2:dc:
                    54:5f:fe:48:00:d7:35:76:8b:15:15:fa:51:c5:ef:
                    09:b7:ae:79:06:e1:03:9f:66:b5:7e:06:79:7d:64:
                    11:68:be:b2:cd:b7:c4:3b:30:c9:d9:b3:08:29:db:
                    b0:1c:76:39:db:cc:41:12:ff:fb:b2:6b:2c:6e:71:
                    39:fd:dc:f5:ab:eb:83:df:3f:df:a9:15:4c:c9:0e:
                    a4:e4:40:87:1f:64:67:63:81:8d:24:83:8f:47:d3:
                    94:02:5a:7b:a5:9d:01:14:40:02:4c:06:9e:34:ff:
                    2f:e6:0e:10:7d:48:0c:16:be:97:82:dc:ba:1c:4b:
                    a5:12:c1:31:94:34:1d:71:86:83:2f:2f:5f:4d:04:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:5F:CF:18:DD:2C:2F:7A:3E:6E:A8:31:91:6F:3B:24:29:CC:93
            X509v3 Authority Key Identifier:
                keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:25:8e:c5:f1:3f:be:2d:3f:0a:4e:a3:ee:c6:fa:47:b8:
         37:58:9a:19:90:31:f0:7c:15:6b:ab:5a:21:f9:dc:e3:66:33:
         66:a3:a8:28:ff:e1:cb:ad:77:f3:8d:13:4a:b7:e8:58:49:55:
         51:32:ac:ca:23:93:41:43:9e:fe:93:bd:cd:10:d8:7d:63:88:
         71:31:f8:bb:1e:de:d7:3a:11:52:15:ce:b0:60:c6:c9:78:7a:
         cd:a0:e1:25:3b:46:a6:f4:75:ce:5c:3e:50:8e:ff:68:18:3f:
         17:34:82:60:ee:05:0a:ac:a2:8c:4f:c6:06:ac:64:59:2d:66:
         58:ca:c9:73:18:42:1c:6e:6e:3e:c5:10:75:a1:00:16:cb:4e:
         85:8e:ed:7e:df:4b:b9:ff:76:f1:20:66:9e:56:ef:b9:0c:43:
         cb:35:89:e7:da:16:90:98:41:16:12:4a:da:59:b0:c0:91:a7:
         6c:e6:a4:57:35:d0:07:67:1f:40:b0:92:90:26:79:2a:79:03:
         cc:ae:e9:e1:0e:4a:e0:aa:8a:99:96:1d:64:1e:76:d4:23:7c:
         f2:63:54:5f:6e:1c:89:b3:c7:5e:ec:40:d0:5c:48:93:ba:96:
         8c:12:f7:4f:43:3b:4c:a1:48:1a:59:68:cb:e2:81:7f:50:18:
         fb:b0:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:14 2025 by rpki-client