Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File:                     3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier:          oRh2sbZh27mx8GV3hrRjoPyCKd0tgELXpMK2osIs32Q=
Subject key identifier:   0D:1A:C3:20:2A:53:F7:ED:79:DA:6A:DA:D0:26:68:71:05:03:DE:70
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer:       /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial:       019769611291377A6953EDA3528B08017D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number:          159D
Signing time:             Fri 13 Jun 2025 13:00:58 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:58 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:58 +0000
Files and hashes:         1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: ML4V5eOaYPhcirtVvO7S1iS7OajQWYbEzm+SmDe3eI0=)
                          2: AvB8ANlawjDpzo5pEv-ozc274As.roa (hash: JAMHGl8FA3FqoIkdY9hmqgyAMGPXFfGq49FOeMqcpDU=)
                          3: P4Cb5oaFevIjC5s1wM4Yzi97PJE.roa (hash: 3Ogb5mf4rx+IYcLkaQHDj7kY0bKNooxxAV2yrkt6glM=)
                          4: aVZfkgdjFOvfxBL5XAyzz6LnyUI.roa (hash: WgbxMCftHGdyFNLtFynanqdwxY2enPXaHJp/iH1q7Do=)
                          5: yytkDg390wURQAs45MKB5G-EL9Y.roa (hash: Zh5YMYHrmE+MJNbhijbyZkT5VrFHROVfxZElaGb2ngI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:12:91:37:7a:69:53:ed:a3:52:8b:08:01:7d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
        Validity
            Not Before: Jun 13 13:00:58 2025 GMT
            Not After : Jun 14 13:00:58 2025 GMT
        Subject: CN=0d1ac3202a53f7ed79da6adad02668710503de70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:a3:52:d8:73:ab:dd:d6:b3:df:d1:30:2c:
                    d2:d0:fa:d8:ab:8c:d6:64:22:07:4a:af:4a:36:7c:
                    0b:15:66:45:79:2f:c1:17:db:86:31:ae:55:de:65:
                    bd:ac:d6:86:db:90:bb:a3:e1:4f:d1:17:93:3f:ec:
                    e5:19:05:9b:b3:a5:dc:2f:6f:3a:18:fc:4a:50:e0:
                    aa:af:fd:ef:b5:29:90:4d:3c:dd:91:89:4b:a8:a3:
                    15:bd:4a:6b:b5:61:0b:b7:25:26:b6:61:8a:1a:dd:
                    e5:c0:a4:92:8a:98:87:94:21:86:69:d6:0a:42:76:
                    c0:07:1b:69:2a:50:11:07:3a:a6:74:45:a6:a5:6a:
                    58:a0:d4:e3:2e:72:b6:eb:b3:3a:b3:39:df:67:64:
                    c3:31:6a:2f:0a:65:c1:38:f5:a6:f1:9f:c1:d8:9f:
                    a5:c5:64:8c:cd:7c:a4:6c:58:89:cb:b0:98:6e:c4:
                    36:d3:b0:26:0b:16:2f:26:fd:3a:b9:0a:5a:e8:60:
                    81:04:42:9a:de:0b:26:73:2d:79:8f:fa:6f:99:30:
                    11:d0:1b:e9:4b:83:75:6f:d0:b3:af:5a:d4:9d:b1:
                    c0:e0:da:a4:bc:be:02:62:0f:8d:74:6c:bb:07:ce:
                    f1:00:34:f5:65:bb:12:8d:df:3e:dc:17:7c:5c:d4:
                    1e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:C3:20:2A:53:F7:ED:79:DA:6A:DA:D0:26:68:71:05:03:DE:70
            X509v3 Authority Key Identifier:
                keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:ba:5f:34:97:60:98:db:6a:e1:05:05:62:ce:45:57:25:
         db:49:f0:56:be:c4:42:b7:98:ee:53:5c:2f:06:2d:f9:fb:03:
         bb:be:9e:38:90:9b:0b:94:9f:bc:66:4b:63:93:e8:ae:0e:89:
         4c:f6:55:3d:71:ce:13:fa:a8:51:85:78:a4:95:57:0a:8f:37:
         6a:b4:3b:13:b3:b0:8a:0d:86:8c:6e:3c:b7:08:fe:0a:12:e9:
         71:c9:ed:36:af:36:e9:ab:53:1f:f6:f0:8b:13:50:fb:24:89:
         b5:cb:d2:db:6e:e0:9b:7f:c1:df:bb:8f:2f:43:90:7a:61:b9:
         7d:e0:51:2c:31:88:49:1d:59:11:c0:5b:26:a6:e9:2d:77:c7:
         c5:0b:87:7e:61:fa:66:5b:14:ed:e9:a7:82:13:76:b5:49:a8:
         d3:b1:2b:9d:2c:c3:2b:25:ef:f6:4c:48:7c:e2:2d:88:29:59:
         72:46:8c:b7:33:0a:b5:f1:17:1e:ae:7c:f7:95:2f:91:df:53:
         f3:37:93:09:c7:b6:c1:e2:12:b4:6f:36:95:0b:fe:3d:a9:7c:
         e5:53:75:1f:6e:0b:50:df:ee:35:8a:11:72:77:65:bb:d2:4f:
         a0:73:6a:24:e2:cf:68:dc:72:e9:38:6f:28:23:ab:6e:ba:e9:
         6e:1f:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:49 2025 by rpki-client