Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File:                     3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier:          sZ5L/WbC7JHpLvcG8xxuZBnsnogQfUFe8NdEqNkugkQ=
Subject key identifier:   FB:30:EE:81:18:DA:17:A6:8F:55:97:5A:FF:60:6B:79:D7:1C:73:93
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer:       /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial:       0197B88F651167BFA2EE9422B63D1A14B78F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number:          1514
Signing time:             Sat 28 Jun 2025 22:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:34 +0000
Files and hashes:         1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: hKpYYVWqZybhicVj6CNiFm+7MHuV0i6VdjELlYdFUuU=)
                          2: GEM9-ollqfLjQn7AeKF24lQwKXo.roa (hash: eCeVt8e/9jCpwwszNxQjJjsbb8ciOYhEzxCEfvQbAY8=)
                          3: aV0HuR69hYJIPw5HwKLbzgnSUj8.roa (hash: SHFEsOqJwkOCmFGPA5WtYtOFrOaJ+2dQqhpAdP75uZE=)
                          4: faEiNZRiYifb0EqTXJxeRTJJP9c.roa (hash: cBxU65JI5dV7r1mACFfzIFB3UZOT4D1EEbkEettYNBs=)
                          5: iB-5Gh1pHVkAWY83mt70GWf7F_k.roa (hash: cjAD02BpLiwlKz0QWbmdYPtsy/2NR9/61nPXd4hWOkU=)
                          6: lICq0eo5P-Axsog5Hx6FXYSQY4k.roa (hash: JlcFYpOXnqLTDv9/pwm19BH50eR0rn9KZzLrCOo3RLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:65:11:67:bf:a2:ee:94:22:b6:3d:1a:14:b7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
        Validity
            Not Before: Jun 28 22:01:34 2025 GMT
            Not After : Jun 29 22:01:34 2025 GMT
        Subject: CN=fb30ee8118da17a68f55975aff606b79d71c7393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:74:a0:ab:db:ae:7f:b1:5b:8a:26:4b:54:
                    20:f5:e4:5b:21:c4:20:fc:28:de:6d:a8:d3:aa:fa:
                    94:42:7c:b9:00:7a:e9:18:df:9d:21:1d:92:64:f9:
                    9d:f0:82:39:10:2f:22:e2:b4:fe:9f:3f:fd:38:7e:
                    c1:3a:9c:94:8b:f1:5d:06:ce:8a:34:09:d3:40:8a:
                    38:d2:97:e4:77:9e:12:e5:4c:e5:f4:49:03:13:cf:
                    e2:7d:3b:bd:22:c7:ef:a2:ce:1f:90:89:26:52:ee:
                    a1:ef:11:c6:45:07:77:83:ff:00:48:c9:9d:96:73:
                    5a:c5:99:65:81:c2:c6:7e:f6:d5:7b:a0:72:ab:b8:
                    86:b9:4d:66:e5:ea:e8:4f:09:66:e3:4f:b6:6e:32:
                    e8:44:db:ea:1c:14:d4:c0:88:49:67:95:4d:d7:1d:
                    b0:a7:73:31:ed:eb:e8:6e:6a:76:0a:c2:61:47:1d:
                    74:35:22:5c:b1:9d:00:82:52:10:15:a5:a7:97:f7:
                    e0:95:41:01:24:cf:53:36:9f:fa:f2:18:ac:21:c5:
                    f2:55:ef:de:72:80:e5:0d:ca:0a:0d:7f:98:3f:bc:
                    b1:15:97:ed:65:15:29:79:94:83:c5:41:ab:8f:6b:
                    52:29:a2:7d:e4:b1:0f:2c:c5:19:fc:25:31:44:80:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:30:EE:81:18:DA:17:A6:8F:55:97:5A:FF:60:6B:79:D7:1C:73:93
            X509v3 Authority Key Identifier:
                keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ce:70:6e:e9:07:5b:58:dd:7e:2c:f6:6f:4f:15:90:52:96:
         0b:57:46:2b:58:be:e0:0c:35:22:99:75:f5:4a:18:a8:5f:14:
         d2:4a:6e:da:c2:c0:95:99:5a:9a:66:fb:b5:96:c3:9b:5e:c5:
         83:2b:0c:22:a6:1c:6e:1e:d7:3b:ca:e9:5d:09:20:a7:f8:16:
         a5:f6:4a:ef:b8:cf:17:ee:07:5d:ea:39:b5:27:89:cd:c3:1b:
         61:18:ac:8d:01:ba:23:78:f5:22:4e:f9:b6:90:52:1b:99:cf:
         8e:f5:3d:b5:81:ad:85:4d:3a:ac:81:9b:25:3b:73:38:fc:1d:
         3a:f4:78:5c:4b:0c:2a:94:af:ba:8d:c5:6c:86:6a:e2:dc:49:
         20:7c:cf:62:5b:50:a0:48:39:62:08:75:95:ce:f0:9a:83:b4:
         19:a4:f4:64:ec:ee:2c:78:fe:e4:f7:36:0d:dc:fd:a5:9d:e1:
         f2:aa:68:e4:bd:99:69:d8:cd:55:7a:86:76:44:cf:8d:a6:42:
         3e:ab:73:1b:08:8c:af:bd:56:63:aa:f7:7b:47:9a:02:14:c6:
         9c:a7:62:9b:a4:a6:d4:12:d5:7e:ad:16:cd:52:11:9b:15:98:
         db:5d:ac:a0:43:04:92:92:93:e2:b9:55:10:b4:68:6a:10:92:
         49:24:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:45 2025 by rpki-client