Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File:                     3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier:          dcuX36jPKejGT+6Xp5MIGUQGtnJlVTafs2SH4/pagGs=
Subject key identifier:   C1:01:0E:50:A3:B1:AE:CA:C7:C3:AC:31:67:FA:1D:F4:7D:FA:79:A1
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer:       /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial:       0197B8C5BBC3BCB4824263FD2992BB56BBA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number:          1548
Signing time:             Sat 28 Jun 2025 23:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:55 +0000
Files and hashes:         1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: cTIkl3jREHFiBdL70QHDOcN+U7/xRtbHsoaFdhYpsLA=)
                          2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:bb:c3:bc:b4:82:42:63:fd:29:92:bb:56:bb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
        Validity
            Not Before: Jun 28 23:00:55 2025 GMT
            Not After : Jun 29 23:00:55 2025 GMT
        Subject: CN=c1010e50a3b1aecac7c3ac3167fa1df47dfa79a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:7c:5c:ab:45:2f:5e:ee:6e:05:98:b3:7c:
                    2b:fd:db:4c:01:75:51:f2:cf:93:60:fb:e1:4d:39:
                    36:c1:8a:c7:6c:ea:92:2e:22:ca:9a:d8:2d:25:49:
                    5c:c6:f7:f3:e4:73:c5:3a:dc:d8:ea:0e:2c:8f:f1:
                    94:e3:13:0b:4b:72:4b:5d:94:08:7e:ec:46:79:db:
                    9c:92:be:34:68:3d:d4:17:96:c8:68:ec:f8:8d:e7:
                    06:e7:18:96:47:e2:55:7c:d2:72:f8:aa:a2:a9:f3:
                    c1:47:22:91:8f:3d:7f:ca:1d:35:fa:75:9b:61:36:
                    84:1e:02:c9:d8:5d:04:9c:ae:6e:b5:4e:ec:6a:f6:
                    16:11:45:63:85:2d:76:c5:c4:0b:a0:a2:bc:3e:87:
                    9c:d4:9a:33:10:e6:f7:ab:10:e7:73:1b:db:59:38:
                    3d:16:2b:b5:f5:e7:45:29:71:e6:ac:78:74:99:27:
                    08:f9:01:f7:e5:82:b4:71:24:b2:92:a3:ef:aa:12:
                    34:22:55:3c:2f:23:0f:9d:0f:80:a0:14:5b:cd:ad:
                    29:91:b6:43:29:81:3d:51:5e:04:2c:a0:08:c0:7b:
                    1e:8a:93:0c:c6:ee:19:92:7c:1b:f9:81:49:87:84:
                    14:92:5a:22:83:2b:c3:46:aa:32:7b:83:51:48:33:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:01:0E:50:A3:B1:AE:CA:C7:C3:AC:31:67:FA:1D:F4:7D:FA:79:A1
            X509v3 Authority Key Identifier:
                keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:59:cd:d8:9d:74:8d:a5:f8:6a:57:cd:06:89:1f:f3:ff:
         f0:11:2f:3a:64:46:2e:a9:14:26:c7:09:7f:23:be:55:29:ea:
         35:72:d1:12:cd:b4:dd:5f:72:e2:38:f0:e8:3b:f4:c5:aa:6f:
         68:14:76:c6:80:c3:eb:e0:e2:98:68:78:15:4c:35:fc:1b:b7:
         3c:8b:31:83:c3:b8:65:ee:c7:2e:a7:f8:91:c8:b6:59:63:94:
         3c:46:6c:fd:04:db:27:7f:47:5c:d1:a4:3e:85:c8:f4:38:43:
         54:f2:c2:f6:d8:74:24:c9:7a:5e:3a:c2:1e:fe:72:5e:5d:80:
         7f:b8:c5:e2:c2:81:d4:8e:4c:76:1d:bd:84:58:7c:e1:41:98:
         d5:d8:2c:48:31:f6:6f:06:48:07:08:cb:8f:00:00:91:ec:f7:
         26:78:10:56:3f:d1:8d:ea:02:72:3c:5d:6a:04:69:20:14:e2:
         07:be:71:41:c7:44:a1:17:87:ce:5f:da:c7:13:fe:da:25:5f:
         1f:6d:23:30:dc:08:01:b0:ab:90:45:ca:8e:ef:b3:26:77:64:
         88:60:54:31:e7:3a:42:1e:56:61:28:6b:d4:e9:bf:3e:5a:13:
         47:cb:8c:54:5b:01:4a:93:f7:81:19:10:f9:51:a9:f9:68:34:
         9a:a8:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:32:19 2025 by rpki-client