Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File:                     3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier:          IRvGrvKCfSv8TZkY2j+3DY2QCD++e07KUbKbMAf4V6g=
Subject key identifier:   E1:DA:C1:E4:8A:21:73:1C:E8:53:0C:70:C0:8B:E8:AF:3D:FC:53:0B
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer:       /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial:       0196C20209D82BF5C955A3E0952B8CB1642D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number:          1494
Signing time:             Mon 12 May 2025 01:00:35 +0000
Manifest this update:     Mon 12 May 2025 01:00:35 +0000
Manifest next update:     Tue 13 May 2025 01:00:35 +0000
Files and hashes:         1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: v+LIQ5fu1gucoPa8SaPo0FDxGCHmLt4tU3Gaa3nnVDo=)
                          2: _o5qzwf8rZDND75xcqQc9S6k6ok.roa (hash: h8CRUtj6ko4KAv2CzgQ3rS/pQtlcU73gDhCpzytsImo=)
                          3: aV0HuR69hYJIPw5HwKLbzgnSUj8.roa (hash: SHFEsOqJwkOCmFGPA5WtYtOFrOaJ+2dQqhpAdP75uZE=)
                          4: dSNgoevWRyMUfgjNoi_GXJ4H8_k.roa (hash: mvhCiOx4Qlj1FzGtfnYTbx0VdAMMtllc6DDb99JSemU=)
                          5: faEiNZRiYifb0EqTXJxeRTJJP9c.roa (hash: cBxU65JI5dV7r1mACFfzIFB3UZOT4D1EEbkEettYNBs=)
                          6: iB-5Gh1pHVkAWY83mt70GWf7F_k.roa (hash: cjAD02BpLiwlKz0QWbmdYPtsy/2NR9/61nPXd4hWOkU=)
                          7: lICq0eo5P-Axsog5Hx6FXYSQY4k.roa (hash: JlcFYpOXnqLTDv9/pwm19BH50eR0rn9KZzLrCOo3RLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:09:d8:2b:f5:c9:55:a3:e0:95:2b:8c:b1:64:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
        Validity
            Not Before: May 12 01:00:35 2025 GMT
            Not After : May 13 01:00:35 2025 GMT
        Subject: CN=e1dac1e48a21731ce8530c70c08be8af3dfc530b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:62:a5:c5:5f:90:ad:26:cc:2b:40:83:f7:
                    a7:b4:18:09:2f:13:7a:d8:b9:c8:27:d2:e6:79:94:
                    fc:a0:3b:ce:b0:cf:29:b4:31:e9:c0:ff:8b:88:a3:
                    48:15:5b:96:cc:c4:fa:60:70:d4:c8:6c:59:1b:b5:
                    04:12:b9:0a:e5:5b:fb:02:b5:43:6b:03:27:dc:f5:
                    86:7d:e1:5e:bb:34:d6:47:0a:2a:ca:69:f2:4c:4d:
                    ab:ec:6a:c3:76:02:f5:d1:72:6d:4a:bf:9f:24:40:
                    3d:cd:66:1e:9b:71:28:1a:df:9a:5c:e4:50:22:0b:
                    de:99:98:ff:26:e8:f5:13:de:66:27:45:fa:6d:75:
                    28:ef:86:f6:1d:ed:bf:7a:95:99:92:48:80:5b:b0:
                    be:d4:e8:08:03:8e:79:f1:a4:b7:89:21:86:ec:d5:
                    5f:33:90:0e:31:50:a1:7d:b8:0f:cf:87:2a:ed:d5:
                    86:e8:a4:09:88:45:29:5f:c5:47:22:f5:b6:a8:a5:
                    88:76:51:79:77:3f:10:f5:53:de:14:e1:92:a1:f8:
                    32:49:a6:8e:56:18:9f:bb:a5:5f:3a:b6:1c:43:2d:
                    d6:0c:b0:9b:aa:8e:b1:df:22:38:04:85:5b:0c:cc:
                    6e:b0:e8:a7:e4:4d:74:bd:8a:f3:70:0f:02:7a:9e:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DA:C1:E4:8A:21:73:1C:E8:53:0C:70:C0:8B:E8:AF:3D:FC:53:0B
            X509v3 Authority Key Identifier:
                keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c5:18:8c:60:69:b1:61:bc:97:5c:f3:f4:fa:50:5c:b4:86:
         41:e0:3b:78:1f:3e:4b:36:94:0b:46:20:fd:23:a4:b4:d0:d7:
         4f:cb:14:e7:ff:b7:21:45:73:f8:9b:a9:95:45:f4:79:05:66:
         a4:a7:c2:61:b5:e9:31:f0:c4:18:cf:e5:e4:1c:6e:0a:be:44:
         4d:7d:68:e1:99:96:40:66:6d:45:cb:f7:95:72:e0:bf:45:c7:
         1f:3e:5e:7f:4b:18:cd:78:2c:3e:28:25:4b:28:32:64:fe:4a:
         da:28:eb:12:1e:87:05:a4:aa:71:f7:4f:26:f0:2f:b7:3c:fc:
         32:75:de:97:ea:1d:64:5f:f2:c0:a5:54:ba:f6:f2:b5:f8:a6:
         5d:f2:e9:d5:28:c0:1c:0a:54:00:cb:67:c4:a1:03:94:1a:91:
         22:8e:9e:97:db:7e:b9:7e:62:0d:be:33:56:ff:ad:d7:f7:3e:
         0e:75:ad:36:40:c3:39:1c:5e:a0:91:8f:78:39:2b:fd:d0:02:
         d7:53:80:97:76:db:ce:06:50:be:b8:f4:03:d0:e8:15:96:3f:
         78:e3:74:c7:03:2f:49:dc:d6:c7:85:cf:a6:a0:45:82:6f:54:
         a5:ad:9f:a2:c8:29:64:fa:9b:3e:09:28:8a:82:f3:12:1f:67:
         05:83:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:26:06 2025 by rpki-client