Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
File:                     3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json)
Hash identifier:          GzrnRwAsdVSVwUkddl25+gNwBdVa+QFyOqZTKonU9yg=
Subject key identifier:   5D:69:77:B5:82:93:74:BA:92:1D:00:55:7B:A5:04:89:70:37:80:70
Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
Certificate issuer:       /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Certificate serial:       0196C2DDDEC0A1E31F3F279A7D97A56A7541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
Manifest number:          14CA
Signing time:             Mon 12 May 2025 05:00:42 +0000
Manifest this update:     Mon 12 May 2025 05:00:42 +0000
Manifest next update:     Tue 13 May 2025 05:00:42 +0000
Files and hashes:         1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: BqvlinrvCAnm5zpUVMN9mY2V44EXbyPdcwSSDtPJQak=)
                          2: WK3H-x4lvtSz5PAYVzf83jx6Xhg.roa (hash: IHyV2nIBoBadJ+LZrUqe4zccqPuVek6+/UVCrBQ/9jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:dd:de:c0:a1:e3:1f:3f:27:9a:7d:97:a5:6a:75:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
        Validity
            Not Before: May 12 05:00:42 2025 GMT
            Not After : May 13 05:00:42 2025 GMT
        Subject: CN=5d6977b5829374ba921d00557ba5048970378070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:cc:e0:ea:ac:17:d7:6b:eb:4a:9c:aa:da:
                    c4:22:0f:45:5e:d7:dd:44:c6:d9:97:e9:cb:24:ce:
                    06:e4:8c:f1:12:5d:87:e0:4c:9b:d5:96:cb:e0:6a:
                    40:87:a0:e1:0f:f9:a6:36:05:57:a4:f6:88:fb:56:
                    22:29:fb:c8:41:a1:2f:bb:0e:ab:9f:72:51:ee:17:
                    ef:c8:b7:77:66:d4:c6:ba:d1:1a:2d:b7:0b:6b:f7:
                    66:9c:2d:cd:45:22:12:de:5e:88:b8:e2:42:37:3c:
                    18:9f:29:15:c1:a4:c7:75:2f:f4:ba:b3:5d:a3:ca:
                    d9:52:a8:e3:0d:bf:48:60:38:6b:51:8d:32:be:88:
                    d0:8a:3d:44:4c:99:db:3e:e8:ee:52:94:ff:b4:4f:
                    e3:b7:54:7c:89:3c:f2:7d:ad:9d:f4:94:9d:7d:a3:
                    71:62:7c:18:5d:61:73:59:cd:35:8f:5f:0f:c6:dc:
                    90:9c:52:ea:58:13:c0:ae:d9:bb:a9:85:0b:81:bf:
                    80:47:5f:16:a7:67:47:40:c7:16:a6:94:7b:91:a3:
                    d1:b4:70:8d:56:5e:99:67:3a:0e:6b:d3:7a:05:82:
                    f2:b7:3c:0d:69:84:06:df:86:6d:6f:7d:25:76:ea:
                    01:12:cf:3f:93:dc:4d:7b:27:61:bf:e7:ee:de:d7:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:77:B5:82:93:74:BA:92:1D:00:55:7B:A5:04:89:70:37:80:70
            X509v3 Authority Key Identifier:
                keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:98:36:7c:86:dd:4e:99:28:c4:cc:79:76:cc:b2:a8:45:b0:
         bc:8a:64:5e:e1:0f:0b:93:f0:b2:d3:eb:cf:1e:ed:9f:8b:cc:
         7a:5c:84:83:e9:18:cd:77:f9:ca:a7:60:e2:68:4b:e6:98:f6:
         4d:07:3d:63:b8:96:88:d3:d9:b1:90:7d:91:ee:fb:3c:f5:70:
         e7:3e:36:05:09:4b:6d:60:73:1e:39:63:7b:d7:1f:66:db:67:
         ef:32:52:36:d0:f5:8e:b6:cf:48:97:3a:cf:65:21:fa:8e:1f:
         79:97:fa:61:1b:e2:9e:ec:be:7b:72:14:18:ed:ae:f1:4a:5d:
         36:45:54:94:4a:78:04:ab:3b:9a:82:9b:5c:e7:25:cc:1c:48:
         c0:76:95:25:65:5c:05:70:32:30:46:0d:b2:86:ba:4e:ec:a8:
         fd:cf:6d:7c:ed:2a:9b:ea:44:1b:04:dc:0c:a3:b3:b9:11:7c:
         a4:73:b3:9a:bf:82:ed:40:b8:9a:f0:b2:8a:cd:e3:9e:a4:c3:
         9a:25:91:dd:29:34:c1:c5:53:6f:00:53:83:52:90:e2:b2:9d:
         2d:a2:4f:60:14:77:ab:ed:29:73:ac:95:fc:a9:4d:b8:1d:3f:
         d0:41:0a:e6:e9:c5:fa:ff:37:bc:38:d2:be:fa:52:a7:48:50:
         1f:41:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:05:01 2025 by rpki-client