Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File:                     3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier:          UxgvEg1Q+A0ilEI04dgieB5RpY9YAohr2O5AfpnnYu8=
Subject key identifier:   E9:10:22:5C:D7:5C:AF:8F:53:CA:F2:D7:09:82:CB:A1:31:7B:5A:ED
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer:       /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial:       0196A12D3AE10D4D5EB3F7F6CA520D891CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number:          13DC
Signing time:             Mon 05 May 2025 16:00:17 +0000
Manifest this update:     Mon 05 May 2025 16:00:17 +0000
Manifest next update:     Tue 06 May 2025 16:00:17 +0000
Files and hashes:         1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: REDT7mCcSZL2D+O3OcXH/N5uF4y7zBYz/fNoW8u4To0=)
                          2: Wh1jH5vANwZcwldoZxeJx9Ms8Tw.roa (hash: /m2D3y0N+aO5CYT+TsC7FYKiJpOsP+DSU+ozinhXmV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:2d:3a:e1:0d:4d:5e:b3:f7:f6:ca:52:0d:89:1c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
        Validity
            Not Before: May  5 16:00:17 2025 GMT
            Not After : May  6 16:00:17 2025 GMT
        Subject: CN=e910225cd75caf8f53caf2d70982cba1317b5aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:38:c7:1c:5f:fd:cc:c8:81:46:ff:fe:ff:
                    27:8f:03:29:a5:b8:57:7c:55:e1:51:b5:7a:70:da:
                    92:3a:71:6d:17:86:ad:58:f0:57:c5:f3:cf:d9:89:
                    ff:70:90:7e:bc:d0:aa:6b:46:37:e8:c8:c5:df:e8:
                    11:41:51:5f:ed:70:ef:4a:93:8b:b4:31:77:ad:48:
                    66:92:6b:57:2b:78:f6:19:5c:ab:9c:07:ef:1e:0c:
                    7f:51:4d:1c:4e:8b:da:89:da:fb:1f:db:c4:50:e8:
                    3d:c1:d1:be:0e:ad:7f:d8:85:b0:28:53:e3:b8:d3:
                    a5:70:5d:da:28:45:28:ee:2c:52:e8:ae:30:fb:4d:
                    ad:5a:e8:7c:41:df:b9:53:f2:b5:06:5d:56:48:71:
                    18:e4:8d:39:13:1e:bd:b4:46:70:cf:6f:62:e7:ff:
                    43:c9:41:19:e6:57:6b:5f:55:07:5b:1e:cb:65:29:
                    6d:15:ae:c2:5a:fc:88:f4:1d:ac:5b:88:09:15:68:
                    c8:e1:ea:f2:37:a9:0e:32:7d:8d:bf:b7:a7:ac:b5:
                    e0:09:3b:0e:44:e4:6b:74:74:08:53:98:c6:e7:77:
                    2c:50:51:3a:64:51:3e:63:93:e5:76:f4:5f:fe:b6:
                    48:3f:aa:48:ad:9c:27:19:33:c3:04:84:b0:81:f9:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:10:22:5C:D7:5C:AF:8F:53:CA:F2:D7:09:82:CB:A1:31:7B:5A:ED
            X509v3 Authority Key Identifier:
                keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:23:58:87:96:9f:82:85:d6:8e:4a:ef:50:0e:45:4f:c3:96:
         88:d4:d9:41:c5:cd:ee:29:6d:6e:c9:ad:68:e0:8d:8a:78:7e:
         d0:15:b4:b6:6e:b2:be:2d:56:08:20:e4:0f:d5:25:79:ee:07:
         77:42:f6:2e:8b:48:2f:40:74:9d:62:30:ec:07:d2:ff:92:3e:
         18:6a:1e:b4:77:20:bd:d3:78:81:bc:54:70:c9:c3:61:0a:63:
         88:79:bc:95:b7:81:12:8c:94:59:5c:24:bc:e7:61:f4:5c:89:
         da:b8:6a:02:e7:e4:b0:cc:f8:82:29:4c:dc:72:99:ff:57:5a:
         94:9d:c6:ed:29:9f:54:47:0e:b7:c3:f0:43:6f:68:03:14:d9:
         1f:91:09:fa:2a:a1:45:8a:4f:ee:f9:0d:12:92:93:ef:68:5e:
         2e:d6:62:8a:5a:a3:ce:61:e4:a6:21:77:f9:0e:0c:b1:47:2f:
         06:54:a5:c7:90:5e:79:1a:31:d8:74:9b:5d:3d:fa:a2:65:95:
         c8:fb:39:ad:28:8c:de:b1:69:4d:cf:9f:be:39:b3:1b:18:70:
         c6:ef:57:00:4f:03:2b:53:be:65:52:1b:b8:61:52:1e:4a:c1:
         ed:00:0d:ce:be:36:c0:3c:c1:fb:19:fe:ce:9c:26:96:bf:7b:
         e3:1d:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:23:47 2025 by rpki-client