Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File:                     M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier:          0AO+W0qLQYcQIiLr9MlkisLd9B8aZVEfCc5O+Mc8NAo=
Subject key identifier:   80:66:D0:F7:2F:50:9C:4F:52:54:FE:AB:E0:82:17:F9:82:12:BE:EF
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer:       /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial:       0196BA7FA8F9C992608E4CB813032571EC53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number:          0B61
Signing time:             Sat 10 May 2025 14:00:50 +0000
Manifest this update:     Sat 10 May 2025 14:00:50 +0000
Manifest next update:     Sun 11 May 2025 14:00:50 +0000
Files and hashes:         1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: im7Tps7WplCPUXJ6aLwp1Ff+v3IKf34bRvHUMgKQ9ew=)
                          2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:a8:f9:c9:92:60:8e:4c:b8:13:03:25:71:ec:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
        Validity
            Not Before: May 10 14:00:50 2025 GMT
            Not After : May 11 14:00:50 2025 GMT
        Subject: CN=8066d0f72f509c4f5254feabe08217f98212beef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:36:a3:ed:ec:cb:b5:a9:d7:ce:56:e7:de:
                    99:00:d8:6b:d7:66:52:20:c9:f0:0c:d6:15:fe:b6:
                    1b:91:26:8d:52:c9:6e:b7:37:70:8c:ab:c4:05:e1:
                    97:4a:1b:c6:62:b3:d1:bb:18:42:ed:23:f7:f6:61:
                    78:a4:f8:58:49:8a:fb:00:ea:bb:3c:85:2f:97:27:
                    c9:25:4d:22:ae:e6:d4:41:3d:28:4b:0f:2b:e3:58:
                    0d:94:68:cc:e3:2f:c2:90:51:07:5e:6b:dc:cd:e1:
                    e6:75:95:e8:fd:ab:1a:0f:02:60:b8:c6:76:3e:e8:
                    55:a9:7d:97:40:97:d2:6f:ed:cc:a3:94:8c:8d:c3:
                    13:f1:aa:1b:01:a8:5c:14:84:df:0e:d0:24:49:68:
                    05:3a:3c:6b:84:7c:a7:b0:88:ae:37:59:a3:d4:53:
                    4b:7e:a4:8e:df:83:cd:f0:d1:40:f8:ec:52:af:23:
                    d1:00:3c:b4:46:71:23:93:73:67:ad:45:7a:a5:78:
                    00:ba:d0:99:b7:51:e9:0d:27:6d:e9:7d:5f:e6:16:
                    b1:e9:9b:83:fd:4a:1f:3b:04:a1:4b:6c:06:05:63:
                    25:aa:46:17:5c:62:b1:dd:ed:5c:81:5b:3c:bd:ba:
                    44:81:3a:34:e6:20:48:c5:8c:22:6e:8b:11:a3:e6:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:66:D0:F7:2F:50:9C:4F:52:54:FE:AB:E0:82:17:F9:82:12:BE:EF
            X509v3 Authority Key Identifier:
                keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7f:8b:8c:2a:2e:68:61:b2:9b:82:a3:2d:35:9e:f4:04:73:
         bd:fd:2d:9a:91:46:8a:91:be:e2:c1:57:5f:42:52:75:c2:64:
         29:9e:89:ae:68:ae:09:96:2d:96:0d:c4:7e:7e:d4:34:9c:78:
         60:7f:13:db:8c:37:46:11:55:35:4a:71:1d:07:91:35:5b:33:
         3c:18:00:7e:79:2e:a0:1c:97:9e:c9:1a:9d:f9:99:44:ad:33:
         1b:9a:ca:11:c0:df:58:27:54:e3:14:2c:e4:b8:7e:e4:45:b5:
         a4:7f:86:fc:8b:77:7b:4e:82:38:75:74:c7:86:74:59:af:93:
         e8:3a:8e:e7:e3:f1:72:b4:2f:85:f0:29:85:6c:fb:fc:03:23:
         26:92:76:dc:05:e7:f3:be:57:d9:6f:b1:64:b5:58:2d:96:c4:
         2d:15:7f:b4:0c:d3:5c:c1:9e:fd:52:bd:cb:d1:ee:71:6d:74:
         a6:da:19:76:3a:a0:9b:06:eb:3b:35:fc:e8:51:a8:98:39:d7:
         78:e5:1a:99:61:f8:d3:45:ec:76:6a:dc:22:83:2d:58:bb:2f:
         59:51:ed:78:d8:07:8d:c4:c2:f2:c3:d1:e4:c8:1e:12:ca:76:
         78:05:22:82:f2:af:19:cf:58:53:a7:2f:c7:b5:8d:33:55:7a:
         67:6f:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:19:40 2025 by rpki-client