Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File:                     3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier:          OuHlEZxYdwDl/8wSLkjxaeWXfCQBJUn9GEQs2vDx430=
Subject key identifier:   D2:1A:4F:0B:1D:15:AB:62:BC:91:59:33:8D:9F:E4:F0:63:59:B5:BC
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer:       /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial:       0196B220BFA8F71FEAC616405C59B8AAE745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number:          146F
Signing time:             Thu 08 May 2025 23:00:12 +0000
Manifest this update:     Thu 08 May 2025 23:00:12 +0000
Manifest next update:     Fri 09 May 2025 23:00:12 +0000
Files and hashes:         1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: z0Cz7kNet0CCtv5aoNON9YNOJQyjG4Ppxtyl8Pmyzb0=)
                          2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:20:bf:a8:f7:1f:ea:c6:16:40:5c:59:b8:aa:e7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
        Validity
            Not Before: May  8 23:00:12 2025 GMT
            Not After : May  9 23:00:12 2025 GMT
        Subject: CN=d21a4f0b1d15ab62bc9159338d9fe4f06359b5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:41:d8:35:27:8d:e7:7e:5c:c6:20:51:7d:
                    50:b0:08:e5:ca:c3:4e:c1:b2:e9:01:50:50:e5:3b:
                    eb:f7:50:40:04:47:85:27:6d:05:67:e8:18:01:46:
                    8c:eb:e1:ce:8c:7c:7b:56:89:a0:22:4f:9f:e1:0f:
                    4b:8e:fa:91:17:8c:0e:4d:80:df:cd:40:a8:e7:5b:
                    d3:4c:95:7d:60:e1:ba:ef:3e:c5:85:7d:38:73:04:
                    62:e5:e8:27:57:b5:6a:d3:11:cf:9e:0d:5b:e1:ff:
                    92:eb:28:da:aa:1b:eb:06:23:c3:75:53:e3:3c:5b:
                    cf:9a:99:b4:a3:36:54:0b:b0:d8:40:0d:7e:94:ea:
                    63:cc:d8:4b:d3:6c:9f:4e:8a:be:6e:d4:b8:e7:97:
                    e4:b0:cb:66:9c:80:f5:05:fa:59:06:4f:94:7d:4f:
                    39:fe:8a:5f:16:88:80:d0:90:6d:ca:44:28:0d:f2:
                    69:fb:1d:3f:93:59:36:e1:9c:5f:db:f4:5e:0f:8d:
                    78:33:97:e1:bd:eb:6c:80:55:b5:4b:fb:a9:8e:53:
                    3f:a0:d4:05:93:05:9e:86:18:16:34:bf:18:cd:3d:
                    16:e7:a2:5e:8d:49:bc:36:87:a4:47:4a:b3:ed:53:
                    e9:c4:ca:03:50:bb:bc:d2:cb:72:36:17:6c:13:8c:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:4F:0B:1D:15:AB:62:BC:91:59:33:8D:9F:E4:F0:63:59:B5:BC
            X509v3 Authority Key Identifier:
                keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:c0:46:81:6e:5c:78:5f:01:65:11:a7:10:e7:3b:bb:a0:
         ff:91:1b:27:82:46:c8:33:8e:72:97:c6:a9:ee:58:83:d1:75:
         db:64:1e:9c:f4:f7:f9:36:a2:c5:b5:a0:b5:73:88:55:ed:f4:
         32:42:d7:f4:3b:8d:12:74:d3:e2:38:3e:af:16:75:66:43:04:
         c0:bd:5b:9b:39:ae:84:18:ae:30:f6:5a:18:29:04:19:1d:57:
         88:e1:a6:6a:e7:99:9c:73:e1:40:2c:aa:78:18:34:64:bb:07:
         66:fe:06:ba:03:88:11:17:1c:e1:37:47:dc:07:d4:d5:ab:4d:
         71:11:ee:22:7b:ff:0c:ae:f4:3f:d1:c8:b6:b1:a2:6c:8f:9e:
         c3:3a:68:55:61:ba:a3:bf:5e:09:d5:fe:af:79:98:c9:46:c9:
         ed:17:17:69:73:f7:ed:9f:35:3b:15:07:10:42:78:03:1d:63:
         c1:ce:41:fe:35:5c:d7:7c:ff:44:7b:56:5e:8d:36:cc:3f:01:
         7c:44:e5:12:ad:06:7f:69:d5:af:da:bb:d3:3e:c2:87:4b:49:
         18:b6:d1:53:67:6f:88:c3:b3:cb:93:1d:9e:09:0a:01:a9:41:
         2b:95:9b:d4:43:f1:57:1a:20:c1:12:7e:cc:dc:b2:ab:a3:9c:
         36:3c:31:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayIL+o9x/qxhZAXFm4qudFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0
ZDZiN2MwHhcNMjUwNTA4MjMwMDEyWhcNMjUwNTA5MjMwMDEyWjAzMTEwLwYDVQQD
EyhkMjFhNGYwYjFkMTVhYjYyYmM5MTU5MzM4ZDlmZTRmMDYzNTliNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzhB2DUnjed+XMYgUX1QsAjlysNO
wbLpAVBQ5Tvr91BABEeFJ20FZ+gYAUaM6+HOjHx7VomgIk+f4Q9LjvqRF4wOTYDf
zUCo51vTTJV9YOG67z7FhX04cwRi5egnV7Vq0xHPng1b4f+S6yjaqhvrBiPDdVPj
PFvPmpm0ozZUC7DYQA1+lOpjzNhL02yfToq+btS455fksMtmnID1BfpZBk+UfU85
/opfFoiA0JBtykQoDfJp+x0/k1k24Zxf2/ReD414M5fhvetsgFW1S/upjlM/oNQF
kwWehhgWNL8YzT0W56JejUm8NoekR0qz7VPpxMoDULu80styNhdsE4zF8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIaTwsdFativJFZM42f5PBjWbW8MB8GA1UdIwQY
MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt
NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj
LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8jARoFu
XHhfAWURpxDnO7ug/5EbJ4JGyDOOcpfGqe5Yg9F122QenPT3+TaixbWgtXOIVe30
MkLX9DuNEnTT4jg+rxZ1ZkMEwL1bmzmuhBiuMPZaGCkEGR1XiOGmaueZnHPhQCyq
eBg0ZLsHZv4GugOIERcc4TdH3AfU1atNcRHuInv/DK70P9HItrGibI+ewzpoVWG6
o79eCdX+r3mYyUbJ7RcXaXP37Z81OxUHEEJ4Ax1jwc5B/jVc13z/RHtWXo02zD8B
fETlEq0Gf2nVr9q70z7Ch0tJGLbRU2dviMOzy5MdngkKAalBK5Wb1EPxVxogwRJ+
zNyyq6OcNjwxHQ==
-----END CERTIFICATE-----
Generated at Fri May 9 08:25:36 2025 by rpki-client