Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
File:                     3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft (raw, json)
Hash identifier:          umfY15G9Daqic4Gk0RSHmIMRsIpO6efq44xNWrMVzM8=
Subject key identifier:   48:58:66:99:DB:9D:71:05:BF:8C:C1:B4:5B:A9:7D:04:DE:75:74:1E
Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5
Certificate issuer:       /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
Certificate serial:       019897132B7A06A9A6BFCAE42854D18B1D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
Manifest number:          162A
Signing time:             Mon 11 Aug 2025 03:01:12 +0000
Manifest this update:     Mon 11 Aug 2025 03:01:12 +0000
Manifest next update:     Tue 12 Aug 2025 03:01:12 +0000
Files and hashes:         1: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl (hash: I5wQmPEGFDduqYGXmqszuFth5NHKO8Q2+ml65he90BA=)
                          2: euCMx_LYVLnswJw2ZtJH1lfD6W0.roa (hash: RH8n6d/oLJKbEl/TRP31aGK7zEruU0/gmBS7WXFdED4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:13:2b:7a:06:a9:a6:bf:ca:e4:28:54:d1:8b:1d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
        Validity
            Not Before: Aug 11 03:01:12 2025 GMT
            Not After : Aug 12 03:01:12 2025 GMT
        Subject: CN=48586699db9d7105bf8cc1b45ba97d04de75741e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:c6:c3:59:cb:5b:b5:2e:f3:c7:66:5a:ea:
                    d3:a5:2f:5c:13:3a:13:b6:44:97:d4:27:d3:a0:16:
                    dc:72:e7:16:36:fd:b8:ef:fb:c1:14:a1:c8:f2:05:
                    28:f3:f6:9a:0d:5e:3a:c5:85:18:df:0e:a7:54:ea:
                    70:3f:6b:c0:92:61:cf:8d:3c:11:f2:65:2b:81:96:
                    d7:42:b0:bc:87:4e:ed:0a:41:cf:41:17:20:67:ef:
                    6e:dd:b7:6c:91:89:c5:e4:0a:4e:86:c7:9c:18:ca:
                    fd:4c:74:7a:1b:ba:91:68:79:5d:1a:23:cd:1c:93:
                    01:16:d4:07:e3:d7:1d:e9:70:80:5b:86:c5:c3:01:
                    f4:ed:6c:48:ae:c7:bd:b2:ee:a8:25:a1:17:61:26:
                    23:d8:de:3e:26:81:42:30:0a:75:01:79:ad:ee:86:
                    cd:8b:19:b0:16:ad:e8:0f:ba:38:56:7a:48:e9:eb:
                    cc:9d:0f:72:f3:5e:71:fd:c7:34:07:b3:43:52:49:
                    b9:d4:3e:52:c9:a7:1e:8a:7a:bf:4d:9d:79:a8:aa:
                    13:f1:a6:2e:0f:bb:fc:fe:d1:bb:4e:e2:6a:87:9e:
                    cb:ed:f4:14:92:da:1d:8b:85:64:72:69:b0:53:1f:
                    5d:8b:00:43:ee:f6:28:25:31:7c:11:4f:5c:a1:dc:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:58:66:99:DB:9D:71:05:BF:8C:C1:B4:5B:A9:7D:04:DE:75:74:1E
            X509v3 Authority Key Identifier:
                keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:e4:1b:b7:9e:cb:e2:58:44:fa:64:cc:ad:0d:64:48:da:
         2d:bc:d7:82:ee:8a:6b:e2:0c:13:9c:cd:7d:b8:95:98:0b:3f:
         bd:a8:09:8f:11:f4:fe:cb:0b:ef:52:b8:85:f4:4c:5f:88:3e:
         e8:64:5f:7f:1b:90:fa:b8:4f:5b:51:45:29:a6:5d:bc:9c:2f:
         72:0a:68:2f:d2:2f:c2:d4:0c:fd:7c:a9:d4:4d:df:31:43:7c:
         af:e0:57:03:4f:36:b9:3c:87:67:10:0e:a3:41:38:fd:b6:50:
         45:e8:68:d0:c4:60:01:e7:c8:8b:fd:7d:b8:f4:02:5b:a5:5f:
         93:4f:d3:2a:a8:da:8e:69:d4:c1:af:dc:d1:6c:00:c5:de:ad:
         61:26:84:8a:e5:ff:89:d0:80:10:a1:9b:5a:08:f0:0f:24:37:
         6e:d7:a1:f8:ea:d7:16:b4:99:94:a3:ae:e5:75:79:45:07:af:
         54:3b:df:fe:45:ab:15:0e:7d:3c:af:6a:42:ab:99:a4:14:47:
         e7:e6:ec:30:31:b7:bd:61:1a:84:9f:a1:0f:1f:ae:34:32:e0:
         94:a4:55:4d:52:d9:8b:77:a6:80:bb:d2:79:5e:65:c1:b5:19:
         52:34:44:b9:be:bf:87:c3:9e:69:3b:c3:e2:7f:e5:8f:f0:36:
         76:e1:50:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:34:28 2025 by rpki-client