Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          zXwirjAM2eGeUggLu2jRLa3A59X6+MGnKqajCbbhByQ=
Subject key identifier:   75:E5:3C:87:7F:0D:25:74:EB:C3:C9:57:2B:FD:B2:66:28:54:3C:D9
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       0196BAB676A0510A4C63D965F4906D3D3F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          0FD1
Signing time:             Sat 10 May 2025 15:00:42 +0000
Manifest this update:     Sat 10 May 2025 15:00:42 +0000
Manifest next update:     Sun 11 May 2025 15:00:42 +0000
Files and hashes:         1: 3-CeBnshHuRaivw3WbqdE0Qd_Xs.roa (hash: QxTBnM9GZ47qowObu5DgA3PPZPI+pK+0T/E1jxfDI4A=)
                          2: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: 7GMUvWm1WqbEzArf2hb8JZUOHksHM+ihdRDeAXn5ikI=)
                          3: HxAxelvKfyvRBGZgYNyGH359bcw.roa (hash: 54oYSMM6V461t0pj1oiVJIo5XRCMuwwoyF2Ks6PmNo4=)
                          4: Vij9kWTTMdVr0KoR9iCmyiP1xZU.roa (hash: rcjHhBt0ZSx11oiGkYVO9itg34bAhG/5unoT9d3Y9g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:76:a0:51:0a:4c:63:d9:65:f4:90:6d:3d:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: May 10 15:00:42 2025 GMT
            Not After : May 11 15:00:42 2025 GMT
        Subject: CN=75e53c877f0d2574ebc3c9572bfdb26628543cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:f6:0a:d2:fe:1a:9a:08:00:84:69:3d:af:
                    51:be:15:1c:91:2a:30:20:34:66:77:ed:3f:53:2a:
                    f9:ef:cc:40:19:8f:49:0d:df:84:11:2b:9e:db:ce:
                    50:9c:30:91:9f:94:b6:b0:41:2f:5e:6a:cd:1a:8c:
                    ad:62:ce:47:4d:29:0f:85:b1:51:ac:90:d4:d5:b8:
                    a0:2d:09:fe:41:1c:47:41:90:0e:c3:90:43:d2:5a:
                    62:1f:50:95:37:7d:cb:f1:3d:ec:35:50:ce:1e:0c:
                    67:fa:52:a1:96:33:68:fa:f5:a6:67:90:b0:3a:51:
                    b0:c1:1c:44:73:99:a1:f7:60:ad:95:11:8d:79:52:
                    42:e0:30:2d:f6:6f:e8:cd:f8:9b:ff:d8:45:f0:eb:
                    fa:96:1d:f7:11:ac:5b:5d:74:e4:31:b6:62:5f:ed:
                    16:46:b5:d5:40:72:4b:6c:21:4b:31:80:f6:1f:ef:
                    84:1d:02:96:b5:8c:5b:d4:76:89:ab:63:00:09:c6:
                    04:85:d1:b1:37:28:fc:ec:26:05:77:67:3b:b3:e0:
                    87:60:f6:7c:53:f3:d6:b5:ec:00:67:ad:c7:d2:16:
                    ed:67:bc:e4:00:a5:9c:63:1c:80:7d:de:cd:7b:08:
                    69:0f:4d:76:6a:22:ba:05:fc:55:c4:e7:31:dc:ae:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:3C:87:7F:0D:25:74:EB:C3:C9:57:2B:FD:B2:66:28:54:3C:D9
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:19:57:a9:ef:63:4f:cf:6d:41:37:28:9a:61:80:7e:09:5e:
         46:34:3b:55:7b:3a:02:7b:68:41:72:55:42:2b:c5:62:1d:f2:
         a8:7a:29:45:e1:81:22:c6:6f:4d:ef:26:ef:78:2f:76:b1:4d:
         2e:d4:00:e8:56:13:d7:af:76:fb:50:36:f7:81:06:09:20:34:
         6c:44:6a:78:30:b5:ec:37:78:8b:58:f7:c1:96:2b:ef:e2:5c:
         3e:70:95:fc:60:c6:3a:cf:9c:d8:35:fa:52:7d:5a:2c:a7:88:
         f7:a4:30:8a:c7:95:c8:d3:c6:eb:54:22:02:81:bf:8a:7a:1a:
         ed:2d:9d:11:6d:5e:cb:54:19:f5:1b:90:b4:70:81:c3:e4:0e:
         1b:32:f8:a7:45:eb:4c:18:93:85:26:4e:17:31:6f:10:0e:e5:
         97:28:f7:68:6d:98:4f:ca:34:d7:c5:96:00:ad:ce:b8:ac:e1:
         4e:56:8d:84:a0:22:8a:dc:c6:10:8c:c8:ad:09:75:6e:e4:af:
         09:b0:d8:6e:fc:57:c2:f4:9a:85:37:a8:f4:a6:aa:4f:76:ed:
         02:2b:c9:7d:8b:c1:e6:25:c9:05:d2:b9:00:9d:c6:52:cd:3a:
         95:7b:7f:0c:5d:61:b6:64:11:56:cd:4e:85:92:62:47:1a:47:
         d9:ee:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:56:48 2025 by rpki-client