Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
File:                     3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json)
Hash identifier:          EIq+2hjs1xMxl7z+H2NXcLipGgYfb9r5aBwKFjuahiE=
Subject key identifier:   08:7A:46:BC:8E:3A:38:4D:0F:0D:4C:D4:A9:AD:BF:A9:38:64:A4:3F
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Certificate issuer:       /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial:       01976D06AE6684033CCAE16C4FF7B13D67BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
Manifest number:          0CDB
Signing time:             Sat 14 Jun 2025 06:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:43 +0000
Files and hashes:         1: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: C1Nt8vIDYRA624ILAEnWemWve2x6+7InoQQTcoHVqVA=)
                          2: 6QLt8gn6308YVRHTv77skONgyv0.roa (hash: WOVtEt3WWdPmMOLnSpBdtQecprDqkDjMDowLpoTrLSs=)
                          3: BlrozZPONvKYEp2UEAlnW_YzHI4.roa (hash: L9GHrxzoIcunUF/HHDD1IUg78PGRjvbme0vJn+zzCvE=)
                          4: CyRu--zwDhYd5zhamEbAkFcQBvQ.roa (hash: sO2VoYkxgTRufknOOSGAsTFVUrBvzkN0qo3ZnwDHlpE=)
                          5: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:ae:66:84:03:3c:ca:e1:6c:4f:f7:b1:3d:67:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
        Validity
            Not Before: Jun 14 06:00:43 2025 GMT
            Not After : Jun 15 06:00:43 2025 GMT
        Subject: CN=087a46bc8e3a384d0f0d4cd4a9adbfa93864a43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e0:0e:9c:ab:30:9d:0c:1c:c4:f9:2b:cf:ac:
                    21:d7:b3:57:c5:ac:1a:cf:1c:7e:ef:5b:1e:20:ff:
                    84:d6:09:55:41:ee:71:bd:cb:69:bf:15:e7:94:ae:
                    48:23:9a:bc:08:5d:2a:2d:67:d0:cc:3b:ba:95:0c:
                    4a:ed:57:6e:2b:30:b7:ac:a3:7e:98:32:c0:0a:d6:
                    ef:ae:88:a5:20:eb:be:95:65:ac:a4:90:14:8f:19:
                    42:54:d9:35:6b:ee:53:e7:3e:a4:ce:01:3b:68:d4:
                    3e:bf:ae:01:44:1b:06:56:5e:31:7f:39:3b:58:48:
                    ef:6c:23:2c:ca:74:11:c4:fe:3a:3c:69:19:29:bd:
                    66:6d:e0:59:1f:ea:f7:3c:4a:99:1f:01:67:26:d5:
                    1f:d5:31:63:6b:7e:20:c5:69:5c:76:00:64:07:4c:
                    a9:f7:8b:0e:56:c7:9e:39:e8:a0:74:bb:f2:09:d9:
                    90:81:f2:63:1d:bf:5c:a2:0f:4a:38:42:37:e1:0f:
                    ab:e6:b7:b7:ef:fb:b8:76:06:21:f7:e8:d3:08:0f:
                    7b:fe:73:d6:33:c2:1f:f3:5e:56:e8:6d:b3:d0:a3:
                    32:4c:66:dd:96:51:d8:9a:15:36:b9:c6:1a:4f:64:
                    5e:1a:f3:31:de:3b:03:ad:5b:30:f6:b2:ac:51:59:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7A:46:BC:8E:3A:38:4D:0F:0D:4C:D4:A9:AD:BF:A9:38:64:A4:3F
            X509v3 Authority Key Identifier:
                keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:05:37:3b:8d:7f:c8:cb:13:d5:42:e6:b2:94:b0:3a:29:
         11:f2:1d:e4:5c:a4:e9:07:c4:e2:e4:93:d2:d5:fc:ca:b5:77:
         6c:03:6d:df:04:07:1d:9f:05:33:fa:3e:7c:9e:02:d1:9c:b9:
         92:c9:ed:43:b8:28:ae:cb:e5:b0:bb:bd:4e:30:e9:df:98:54:
         40:bb:68:7e:27:b9:e9:4b:5a:89:6a:bf:ad:75:6b:1e:b1:53:
         c6:85:c8:6b:c4:26:f6:5f:27:3f:d8:2b:69:15:fa:9a:81:5f:
         dd:29:80:0d:1d:29:4a:4b:51:18:f6:c2:55:9f:25:bb:32:e9:
         91:b5:3a:fb:21:58:38:44:f9:be:32:e5:22:ea:7d:45:b3:a0:
         1b:30:31:8b:cf:da:98:34:34:7a:fa:97:ef:50:89:32:17:8d:
         0b:33:61:b6:71:7b:72:9f:2c:be:2b:b4:b1:1a:2e:b2:18:45:
         d8:4b:94:4b:a9:9f:95:62:de:50:e8:10:59:b2:c8:1a:a4:31:
         e0:1b:4c:2b:55:df:a0:a1:2f:17:0e:17:05:ef:9d:20:63:e1:
         90:9d:48:e9:a5:3b:3d:37:0e:1b:ca:89:71:c7:ad:f9:38:60:
         29:88:7f:e4:d3:a6:04:a2:1d:68:12:a0:97:a7:ac:dd:d9:17:
         29:b8:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:04 2025 by rpki-client