Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File:                     3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier:          K/hMu/k755jtVe7Gafrt8brm+w5rTn4YkehHXlraaaE=
Subject key identifier:   9F:AD:7E:60:C9:3D:15:DD:51:A0:30:D2:79:8F:D0:02:F3:3B:C7:14
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer:       /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial:       01976D06E8CBFD262B7179E0CA4D64F996D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number:          43
Signing time:             Sat 14 Jun 2025 06:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:58 +0000
Files and hashes:         1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: XhvsfUq6blG0J0MeDR0+pQ1datKCjMvC3bm4exs8dhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:e8:cb:fd:26:2b:71:79:e0:ca:4d:64:f9:96:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
        Validity
            Not Before: Jun 14 06:00:58 2025 GMT
            Not After : Jun 15 06:00:58 2025 GMT
        Subject: CN=9fad7e60c93d15dd51a030d2798fd002f33bc714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:9c:20:78:74:10:06:35:c5:33:76:a6:e3:
                    73:38:d0:f7:8c:77:d3:f7:d1:60:9d:ed:56:34:52:
                    21:c0:ef:3c:d5:e8:22:17:c6:a8:7c:e5:a8:5a:54:
                    15:90:46:3a:57:4a:e9:3d:f2:a0:24:8c:87:58:2d:
                    a7:f4:69:55:18:b3:8f:dc:d5:d9:85:fc:dc:42:06:
                    c3:11:c0:9d:5a:b6:62:e4:b0:69:92:cb:21:81:52:
                    c1:59:1a:ca:2f:f2:62:d7:4b:51:52:43:88:f1:6a:
                    61:e5:5d:0a:82:ae:1c:16:de:9c:99:2b:0b:fa:68:
                    bf:22:2c:06:5c:06:6f:77:31:ac:08:12:2a:2d:3f:
                    6d:64:08:9e:08:3f:45:e6:d8:d3:51:11:34:0b:df:
                    22:4c:e2:9f:3e:b5:cf:69:7a:d7:5d:90:f0:94:73:
                    f8:8a:33:70:2c:f3:01:91:bb:cb:30:0c:86:a4:b9:
                    32:4f:18:a7:4d:fb:82:94:15:0c:67:12:51:56:42:
                    1d:ec:c1:5a:21:45:c5:7c:40:77:9f:ed:00:05:e5:
                    3f:cc:40:88:4e:44:f1:16:9b:37:9c:91:1c:12:33:
                    05:1d:a3:89:7b:7d:79:8f:28:79:4c:17:1b:f7:7f:
                    a2:2f:df:d5:f2:c1:70:ed:70:68:ff:28:38:08:af:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AD:7E:60:C9:3D:15:DD:51:A0:30:D2:79:8F:D0:02:F3:3B:C7:14
            X509v3 Authority Key Identifier:
                keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:80:92:ea:6b:a5:53:f9:cf:8b:1a:3d:03:7c:51:22:e4:11:
         22:2b:bd:7a:b5:23:bb:95:a4:e8:b6:92:a2:4d:2d:27:b9:49:
         ec:19:66:50:7d:d9:b6:33:54:0e:39:a2:6c:b3:b2:0a:9e:a5:
         fb:3b:2d:6b:88:f3:16:8c:b3:88:db:c2:b9:ed:f1:58:87:9d:
         7c:73:79:0e:c2:d8:f1:08:29:5e:22:5d:a8:6d:2f:00:a3:07:
         e1:fd:20:16:04:40:98:a3:b2:f1:fd:16:8e:c9:17:87:62:85:
         d7:e8:e0:5c:f6:6f:08:ad:8f:7b:af:7a:05:13:6b:6f:1d:1c:
         73:cf:be:20:5b:65:d8:0d:58:49:31:57:dd:af:cd:45:0c:38:
         ff:69:45:ea:d7:bc:b4:79:af:3d:1d:c3:d2:0d:ff:36:7d:a2:
         78:cd:8d:02:a8:38:c6:91:dd:a2:43:16:f6:f6:a8:a5:28:33:
         bb:9d:40:be:23:0c:a9:ae:36:94:f9:e7:96:42:18:3f:99:fc:
         1c:0e:80:7f:7c:65:ee:e5:7d:ed:a3:fd:12:57:1f:7a:bf:97:
         0b:d7:7c:d6:f6:b7:08:68:ae:8b:91:99:94:e9:b4:84:9b:99:
         46:00:eb:c1:aa:34:6b:67:13:67:0c:56:e2:22:fa:24:26:20:
         b0:ba:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:43 2025 by rpki-client