Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File:                     3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier:          3rRI5n6ZxIac1JekTClrDrqrjbsqgkopdc2BH15hw18=
Subject key identifier:   9D:0B:27:18:D5:F4:A2:DC:40:A9:E8:18:57:A6:F6:8D:70:C9:57:E5
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer:       /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial:       0197756503999B26904E16FC1906B8FA3605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number:          14B4
Signing time:             Sun 15 Jun 2025 21:00:43 +0000
Manifest this update:     Sun 15 Jun 2025 21:00:43 +0000
Manifest next update:     Mon 16 Jun 2025 21:00:43 +0000
Files and hashes:         1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: vufFLhOhiKggmk9d1Vlbepwz6ZRYlvOOcRDE5sPGK48=)
                          2: LYPvA08Q5up42ir_ROLNJePR6WM.roa (hash: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:65:03:99:9b:26:90:4e:16:fc:19:06:b8:fa:36:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
        Validity
            Not Before: Jun 15 21:00:43 2025 GMT
            Not After : Jun 16 21:00:43 2025 GMT
        Subject: CN=9d0b2718d5f4a2dc40a9e81857a6f68d70c957e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:db:24:ac:1f:ca:9b:50:f1:ce:11:84:ef:
                    9a:f9:69:b7:ea:ce:41:4c:61:ed:1a:30:90:62:02:
                    6a:c5:41:c0:41:2b:b2:ff:66:ad:bb:a6:e4:17:eb:
                    44:47:99:13:a6:9d:43:d3:fb:b6:dd:60:87:47:07:
                    a9:e4:ab:d4:4d:29:d8:24:02:d5:80:06:df:b2:27:
                    6a:1e:d5:d9:20:e6:92:03:13:0b:1d:f8:e4:40:b0:
                    f1:dd:16:9b:2a:11:e6:62:c9:36:48:e8:12:42:1f:
                    d7:02:af:4d:e9:7a:fd:66:6d:27:98:7a:d7:a9:22:
                    91:23:a3:8b:cc:ad:5d:68:72:5d:b4:5c:76:93:6a:
                    d9:a1:ea:98:40:79:5d:8e:82:aa:0a:ea:2e:74:6e:
                    9b:22:32:74:01:81:2a:af:7f:6e:ea:8b:24:14:ac:
                    e8:f3:89:93:79:13:49:54:6e:f5:0c:75:9f:02:be:
                    25:fa:24:7f:8a:95:4b:f1:9a:d0:ae:1e:3c:8f:53:
                    04:d3:a8:c6:c3:93:70:9e:40:94:6c:d4:f1:ce:6d:
                    a1:d8:15:f7:a7:24:a8:b4:d7:8f:a6:d1:0e:81:f0:
                    0b:5c:b9:62:ae:ab:24:2a:07:1a:39:92:8d:69:23:
                    3b:09:78:ac:93:09:2e:81:c1:11:df:fe:68:b5:ed:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0B:27:18:D5:F4:A2:DC:40:A9:E8:18:57:A6:F6:8D:70:C9:57:E5
            X509v3 Authority Key Identifier:
                keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:59:38:88:2d:f5:f9:2d:6b:5c:34:79:7d:43:9a:f5:e2:85:
         8c:68:e2:85:28:36:69:b6:f3:5d:62:3d:f6:d5:70:47:15:3b:
         27:9c:1c:df:32:c9:64:ae:7c:23:5e:9c:d0:c3:4a:05:a8:b8:
         f7:e0:9b:ae:cf:df:01:45:3e:aa:34:e4:11:c8:52:f2:db:98:
         ef:e8:3e:f4:4f:bc:ac:fe:ef:ca:9b:49:e2:13:c4:44:51:47:
         4d:87:1c:ff:28:5f:ec:7f:36:fa:76:5c:21:10:ac:40:4f:db:
         8a:b3:52:86:f1:95:02:6b:f1:04:a5:d6:d0:b7:d2:2b:10:0b:
         11:42:7d:7b:04:bf:4f:36:0a:32:9f:0d:bd:2d:0e:4b:f6:d6:
         f1:15:b6:3d:b3:06:ec:22:09:39:3a:81:db:8d:7d:b8:ce:83:
         06:dc:6b:0a:3f:6a:39:ed:a4:a4:ce:b4:96:94:8d:59:f1:d2:
         30:a1:2b:be:b4:29:cd:f1:cb:19:97:dc:68:52:f8:21:7d:54:
         b8:45:1c:3c:fb:60:28:bd:54:be:4e:21:b5:c7:25:c7:06:0f:
         1a:1e:5f:bf:46:7a:f7:5a:3d:f2:0e:f0:21:d1:21:a4:3f:33:
         37:e2:3a:01:47:da:ee:6e:2a:76:f5:19:e9:09:57:0f:6e:fc:
         f1:8a:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:48:44 2025 by rpki-client