Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File:                     3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier:          4JGhuMnYF6eJIY86eGWk7vE5GcsCNdXHTdbC+IwaJcU=
Subject key identifier:   16:85:24:30:4F:5F:F3:76:DE:E1:6E:94:8A:D6:EF:B2:89:6B:3E:82
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer:       /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial:       0196D2F5D955886FF22CDE44D40E072470C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number:          0231
Signing time:             Thu 15 May 2025 08:00:49 +0000
Manifest this update:     Thu 15 May 2025 08:00:49 +0000
Manifest next update:     Fri 16 May 2025 08:00:49 +0000
Files and hashes:         1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: JZqKYadeNhHKRT1ADBNFzG3SpKN0+FVnX+X0Dg58utc=)
                          2: SHvoKKIBU3wgrybj6zWAE812zjc.roa (hash: yK7W9vbdAmqtnEpvGmawrHGyq/oUYACQgVTYc+60SM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:f5:d9:55:88:6f:f2:2c:de:44:d4:0e:07:24:70:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
        Validity
            Not Before: May 15 08:00:49 2025 GMT
            Not After : May 16 08:00:49 2025 GMT
        Subject: CN=168524304f5ff376dee16e948ad6efb2896b3e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:4d:9d:30:5d:00:f5:14:8d:a6:93:a7:6b:
                    22:9d:6e:05:15:07:db:1c:3d:8e:35:be:fa:42:f6:
                    8b:77:a0:bb:e6:c3:0c:b4:24:a0:27:fa:59:fe:a2:
                    f9:05:f5:60:e8:bb:50:88:b5:92:02:47:82:95:40:
                    49:68:b4:f0:40:04:b6:92:84:45:53:9d:87:a3:ec:
                    e5:16:79:38:50:ff:c6:04:84:55:ed:cb:0f:26:5e:
                    83:22:e6:f9:a4:95:9a:e5:44:44:ce:4a:5f:c2:3a:
                    c0:87:84:5b:66:20:5c:6f:84:64:20:64:a9:81:35:
                    6d:7e:6f:2a:31:23:70:01:24:42:2b:fd:5d:70:88:
                    03:fa:8e:68:24:cd:d8:de:3f:8d:48:90:92:fa:1a:
                    47:ef:7a:6b:6f:c3:08:b6:76:ab:5a:bb:b2:8b:89:
                    e6:27:3d:93:4a:8c:95:57:6d:00:c1:59:74:85:94:
                    f0:66:0b:fc:79:3e:71:a9:e3:52:ca:0f:45:1b:2b:
                    6c:80:69:d4:b4:0c:bc:ec:ec:35:f8:c0:81:29:16:
                    df:ee:d4:36:b5:0b:c5:18:69:cd:45:4d:51:61:c8:
                    66:4e:72:48:1a:5c:5d:89:1e:5b:cd:ec:4f:43:be:
                    0e:82:1a:14:6d:de:9f:af:9c:87:11:31:22:76:0c:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:85:24:30:4F:5F:F3:76:DE:E1:6E:94:8A:D6:EF:B2:89:6B:3E:82
            X509v3 Authority Key Identifier:
                keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:df:be:54:5f:59:3b:e9:de:5a:18:1b:0d:55:56:a1:6f:e5:
         bb:89:b9:61:90:22:be:ba:ab:5b:23:9f:ec:ed:88:f4:6f:c8:
         01:ca:d7:0b:89:53:64:45:2a:7d:4a:5c:e5:0d:c6:23:cf:30:
         05:f3:6f:90:6b:db:f1:ac:f8:9c:df:24:4e:43:6f:08:ea:75:
         f2:6c:c3:5b:e9:0f:9d:79:9b:17:64:5d:11:fc:88:4e:39:e0:
         c5:23:e6:e7:84:b1:08:56:0d:03:0b:4c:20:f3:8f:6c:18:6c:
         95:06:40:b9:de:e3:7c:46:81:37:06:5b:56:9f:34:27:85:ef:
         3b:23:d4:92:dd:6e:24:11:cd:87:e9:3e:3a:d4:a0:5f:89:5b:
         b5:b6:e7:08:0a:d5:89:7f:0a:c6:9d:39:97:2d:6c:ee:87:52:
         d0:5d:78:f0:cf:5e:67:bd:8c:dc:07:46:6c:bd:44:f0:3b:2c:
         21:09:a5:45:94:d1:5d:df:21:06:e2:85:9c:86:28:7f:80:78:
         ac:e2:35:2c:3f:27:80:4f:e2:61:78:43:5b:1d:13:e9:99:58:
         08:7e:5a:3c:3e:2f:89:ba:e5:09:ad:ff:50:df:37:7e:b5:84:
         58:d7:f9:5f:cb:48:d1:d8:d9:ba:9f:c1:9d:47:ed:c1:0f:99:
         7c:9b:3a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbS9dlViG/yLN5E1A4HJHDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmNmZmQxMDBkYzAwN2YxYTk2YTQ0MzBlYTg3MjM4OWM1
N2Q2Y2YwHhcNMjUwNTE1MDgwMDQ5WhcNMjUwNTE2MDgwMDQ5WjAzMTEwLwYDVQQD
EygxNjg1MjQzMDRmNWZmMzc2ZGVlMTZlOTQ4YWQ2ZWZiMjg5NmIzZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuVNnTBdAPUUjaaTp2sinW4FFQfb
HD2ONb76QvaLd6C75sMMtCSgJ/pZ/qL5BfVg6LtQiLWSAkeClUBJaLTwQAS2koRF
U52Ho+zlFnk4UP/GBIRV7csPJl6DIub5pJWa5UREzkpfwjrAh4RbZiBcb4RkIGSp
gTVtfm8qMSNwASRCK/1dcIgD+o5oJM3Y3j+NSJCS+hpH73prb8MItnarWruyi4nm
Jz2TSoyVV20AwVl0hZTwZgv8eT5xqeNSyg9FGytsgGnUtAy87Ow1+MCBKRbf7tQ2
tQvFGGnNRU1RYchmTnJIGlxdiR5bzexPQ74OghoUbd6fr5yHETEidgzs1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaFJDBPX/N23uFulIrW77KJaz6CMB8GA1UdIwQY
MBaAFN38/9EA3AB/GpakQw6ocjicV9bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUt
MTVhNmU3ZGY0NWM5LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUtMTVhNmU3ZGY0NWM5
LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALd++VF9Z
O+neWhgbDVVWoW/lu4m5YZAivrqrWyOf7O2I9G/IAcrXC4lTZEUqfUpc5Q3GI88w
BfNvkGvb8az4nN8kTkNvCOp18mzDW+kPnXmbF2RdEfyITjngxSPm54SxCFYNAwtM
IPOPbBhslQZAud7jfEaBNwZbVp80J4XvOyPUkt1uJBHNh+k+OtSgX4lbtbbnCArV
iX8Kxp05ly1s7odS0F148M9eZ72M3AdGbL1E8DssIQmlRZTRXd8hBuKFnIYof4B4
rOI1LD8ngE/iYXhDWx0T6ZlYCH5aPD4vibrlCa3/UN83frWEWNf5X8tI0djZup/B
nUftwQ+ZfJs6bw==
-----END CERTIFICATE-----
Generated at Thu May 15 17:16:26 2025 by rpki-client