Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File:                     88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier:          JU3NdYJ8nVpJ4pL2EI8SJo8y3iu6yAsXRx9kVS8af7g=
Subject key identifier:   82:40:09:F8:6C:00:BA:D2:D9:64:E5:6B:C2:70:06:FA:2F:BB:B8:DA
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer:       /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial:       0197CE3B3145F65E752ED5525C20A205D199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number:          15C4
Signing time:             Thu 03 Jul 2025 03:01:15 +0000
Manifest this update:     Thu 03 Jul 2025 03:01:15 +0000
Manifest next update:     Fri 04 Jul 2025 03:01:15 +0000
Files and hashes:         1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: /OshNF/k8deK0/Zcm/Q/B3WVa3CrmgnbgTk4d6QdEMo=)
                          2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:3b:31:45:f6:5e:75:2e:d5:52:5c:20:a2:05:d1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
        Validity
            Not Before: Jul  3 03:01:15 2025 GMT
            Not After : Jul  4 03:01:15 2025 GMT
        Subject: CN=824009f86c00bad2d964e56bc27006fa2fbbb8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:53:0a:b0:9f:51:49:f8:bc:3c:07:b7:ac:
                    62:18:d7:2c:e9:65:e2:ec:28:d5:20:ad:13:da:2d:
                    d7:69:02:93:71:cf:77:ad:97:70:50:5d:53:4c:b9:
                    c5:9b:ce:4d:97:0e:1f:8f:b0:e1:d0:32:05:85:a9:
                    eb:b8:b8:fb:eb:51:de:eb:15:b1:59:88:4a:26:45:
                    e9:ff:61:8e:5a:8b:1a:42:1d:ad:ad:a3:ba:29:4c:
                    0b:0f:39:3c:4e:dc:ac:87:5b:60:9e:ad:e2:43:72:
                    87:db:f3:a0:e0:56:fe:a3:ec:a1:49:97:cf:94:b0:
                    5f:db:95:e1:5c:a8:27:36:80:ad:08:49:2c:c1:e7:
                    61:42:9d:9c:7a:a8:d7:ed:39:7f:84:8c:1a:97:5d:
                    47:ba:9f:8f:55:64:51:47:dd:8d:1e:56:81:58:a7:
                    ca:42:ba:ec:c2:b5:9b:89:76:64:38:a8:d8:72:ef:
                    69:af:ed:fc:5f:c3:11:b2:54:a9:4c:40:04:ec:50:
                    cb:c7:10:3e:6a:19:ac:f8:90:99:09:7d:9e:2e:a5:
                    eb:d0:04:a7:53:6a:65:6c:64:e8:95:93:c3:cf:d2:
                    61:e6:b5:c2:49:5b:30:65:d4:d7:c3:53:cc:31:1b:
                    1a:2a:14:d8:2a:bd:ac:1d:b7:ea:10:07:78:fc:69:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:40:09:F8:6C:00:BA:D2:D9:64:E5:6B:C2:70:06:FA:2F:BB:B8:DA
            X509v3 Authority Key Identifier:
                keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:42:f5:1c:b3:a0:29:e4:e8:20:d0:80:f7:cc:78:a7:dc:ee:
         d5:3a:94:4a:83:36:f2:e5:9b:7e:9d:9b:d5:3c:1a:69:e7:95:
         a6:26:8d:ec:a4:6c:da:2c:48:e2:ea:40:71:35:6e:e3:13:3c:
         57:cf:d3:98:84:5b:f4:3d:9b:18:de:cd:ba:bb:f2:37:d2:11:
         86:44:57:6a:52:87:c5:80:43:e0:51:40:ca:6a:c7:c2:4f:bf:
         2f:52:93:f0:4e:16:44:7f:7f:56:8d:2a:77:e0:b8:9a:8d:22:
         85:cb:18:34:13:e1:f7:92:80:52:27:91:0b:e8:d5:d1:1a:cf:
         bf:66:e3:9b:8b:6b:d6:8a:27:30:0b:da:cc:87:6f:ae:69:aa:
         39:e6:2f:f6:16:af:85:33:6c:ae:11:41:1c:4f:4c:a9:21:1c:
         df:af:ac:6d:59:cd:75:6a:cf:e0:dc:79:48:fc:72:1e:25:a2:
         62:3e:3f:03:4a:6b:cd:4e:6c:da:ed:c7:bf:64:8c:e8:64:88:
         a2:f8:fa:95:1d:ae:e0:8d:3b:fc:ca:e9:8c:85:7b:f6:89:68:
         b2:15:04:61:92:37:e0:82:1b:94:f2:de:7f:ff:f1:2e:d8:93:
         dc:58:0c:77:6e:37:14:63:25:af:31:b5:76:83:f7:14:7b:85:
         07:f7:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:59 2025 by rpki-client