Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File:                     3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier:          YhTipXnaM6HXW4A2WxowyH30JFCAPX0t57BRySC39cs=
Subject key identifier:   5E:70:D5:CC:2C:E1:10:C9:9D:21:8B:D3:0D:BD:C2:60:E5:0A:E6:92
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer:       /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial:       019768BBFA0CAB5485A8C56556A9EA5522BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number:          11CF
Signing time:             Fri 13 Jun 2025 10:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:39 +0000
Files and hashes:         1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: kFqlUB/TpbEQQpi2dJvWKuYkkj1e4ZceAlN/uHLZ81M=)
                          2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:fa:0c:ab:54:85:a8:c5:65:56:a9:ea:55:22:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
        Validity
            Not Before: Jun 13 10:00:39 2025 GMT
            Not After : Jun 14 10:00:39 2025 GMT
        Subject: CN=5e70d5cc2ce110c99d218bd30dbdc260e50ae692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:c3:8e:4f:d9:5e:82:cb:fc:08:05:07:61:
                    dc:f5:21:87:ba:5e:ea:a8:4c:07:15:6c:84:c5:fb:
                    9c:db:f1:ef:25:89:34:e9:75:73:fe:47:ac:7f:53:
                    63:ef:e7:87:e6:24:9c:0e:74:09:9b:2b:14:7e:1c:
                    76:81:15:7c:31:6c:b1:c4:2d:62:aa:df:93:89:3f:
                    10:c4:c4:4c:bb:c6:b2:a4:4e:d0:47:6e:04:16:c1:
                    3b:c0:bd:85:ae:c8:5b:b4:ac:55:b6:7d:78:8e:7d:
                    56:8d:ee:cf:e3:3d:7b:5a:8d:3a:07:c3:bf:34:03:
                    38:9d:06:74:1e:99:b9:7d:51:9a:b6:38:c3:c9:2d:
                    a8:fe:ec:28:7f:e8:00:a4:ba:a7:b6:94:7c:8a:3e:
                    5a:38:6f:b2:49:b4:2a:fa:6f:5f:b1:f1:2f:fd:d4:
                    47:e1:fa:2d:cc:22:21:d2:41:9b:f3:3d:a3:fa:ae:
                    70:c7:bc:91:75:b9:eb:e2:a7:df:e4:43:69:69:a8:
                    bd:e2:e7:51:fb:0d:56:ab:c1:b3:c5:ab:4c:b5:15:
                    ec:f4:3b:bd:2e:c0:7b:75:4c:c2:21:2d:9e:16:24:
                    8e:03:0d:02:c8:08:76:3d:d0:10:d7:48:0d:ec:ed:
                    3e:e0:c1:ab:85:86:cf:7d:bf:3e:da:d7:df:de:08:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:70:D5:CC:2C:E1:10:C9:9D:21:8B:D3:0D:BD:C2:60:E5:0A:E6:92
            X509v3 Authority Key Identifier:
                keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a5:d2:64:9b:df:73:c6:4c:64:6e:3c:98:86:11:8e:be:fa:
         d6:9a:11:0b:a4:1a:1e:2f:87:00:41:ac:d8:12:b1:e4:2f:cb:
         61:c6:a1:c3:52:83:e5:5e:6b:2a:48:3e:8c:aa:b6:3a:0e:24:
         17:da:81:53:83:ba:41:8d:92:e9:c2:10:d3:f3:aa:ab:7f:1a:
         bc:c3:13:a9:8b:fd:9b:33:51:f7:29:22:63:de:e8:f7:ba:77:
         f5:20:fc:20:ec:03:46:d9:c3:b6:37:a3:85:b2:fb:d8:e2:9c:
         a3:77:3d:f5:3d:12:f7:0a:fd:ad:ef:ed:51:59:17:39:73:13:
         93:39:67:4e:46:5a:06:9e:04:05:25:28:96:33:7f:04:e9:d5:
         c6:10:bb:d3:73:b8:41:ab:63:02:7d:79:52:0b:36:fe:d0:e2:
         ca:2a:da:a7:de:c8:96:10:06:6d:af:0c:9a:f7:a7:00:f0:c8:
         3b:f8:27:2b:80:b9:f7:95:10:75:1f:15:5a:b2:01:1d:b4:a6:
         17:17:65:96:f2:22:2e:44:f0:fa:1e:3b:d0:11:62:05:b7:0f:
         1f:0e:16:9b:70:44:dc:ff:48:df:5b:fa:68:76:49:15:e9:43:
         d5:35:1b:51:9e:7d:72:68:67:f0:3a:f6:5f:83:0d:6c:80:75:
         b2:7c:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:54:09 2025 by rpki-client