Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          eTb7/bdpGd2LsE+2JXMiwGcUyRG4jEahqJhG/ez++7g=
Subject key identifier:   2C:D9:E4:6C:22:6A:4C:B0:2A:25:5A:AF:0D:4C:6C:97:F8:31:43:D0
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       0196A27767316EE599768ACAFCB8745903E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          1527
Signing time:             Mon 05 May 2025 22:00:56 +0000
Manifest this update:     Mon 05 May 2025 22:00:56 +0000
Manifest next update:     Tue 06 May 2025 22:00:56 +0000
Files and hashes:         1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: fXW88a9Q8uX4/H4vRcuVDPLl3YvNyejK3Ood06h/Y8A=)
                          2: ya6fLqZqW9YiSMq0_70IzMeFSTc.roa (hash: xJjaUPhHWHICcif0SwgfpErfhFmKOtPZjx5JM2GQnhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:67:31:6e:e5:99:76:8a:ca:fc:b8:74:59:03:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: May  5 22:00:56 2025 GMT
            Not After : May  6 22:00:56 2025 GMT
        Subject: CN=2cd9e46c226a4cb02a255aaf0d4c6c97f83143d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0e:73:76:9f:61:6f:29:6d:0a:32:ca:2a:47:
                    18:92:4f:98:42:8e:09:ef:45:35:56:4e:c1:8e:50:
                    7c:b5:82:89:9f:9d:f0:4e:1d:df:d0:ce:b6:65:54:
                    3f:3e:b6:a8:c1:7c:5f:bb:a7:99:c5:69:33:ce:27:
                    4f:07:a8:25:af:64:43:7f:de:03:6f:68:61:e6:3d:
                    a6:5e:ac:20:ae:2b:0d:d7:c4:f2:bc:bc:82:f4:9a:
                    0b:95:55:1e:e2:e1:1f:0f:32:8b:c7:6b:da:0a:36:
                    5d:ad:f7:4f:b7:d2:73:54:e7:2c:b2:5d:d7:54:8f:
                    e9:6c:62:1e:1a:90:b6:17:36:6a:7e:62:2e:2d:c4:
                    83:4f:de:80:61:91:4f:b8:e8:0d:18:a8:93:54:80:
                    21:91:8a:55:4e:28:83:72:4f:d5:54:ed:a2:11:cb:
                    28:8e:93:9b:9d:fc:b7:92:b3:f5:c8:fc:59:2c:33:
                    12:16:fb:a9:03:aa:50:6d:06:f0:3c:9f:2d:2d:18:
                    b4:a5:d1:01:0c:ed:fb:c1:d8:4d:8d:14:10:e3:14:
                    75:b8:9d:a9:9d:f4:3e:6d:5d:fa:9c:76:03:07:5b:
                    a9:55:84:9d:1d:e4:ba:11:34:63:c1:08:66:d2:b3:
                    4d:f1:fa:33:a0:7f:da:40:fc:ec:45:6e:dc:36:05:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D9:E4:6C:22:6A:4C:B0:2A:25:5A:AF:0D:4C:6C:97:F8:31:43:D0
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:7f:03:7d:ae:c8:85:73:7c:8b:00:b1:0e:e3:fb:bb:2d:
         14:11:9f:71:44:0e:38:b7:41:d9:dc:83:f8:41:61:e6:39:38:
         83:ef:15:c1:b5:ea:64:39:5c:e9:1e:b5:c0:a7:70:f0:27:b8:
         0a:c0:a4:67:1e:ac:4c:ff:60:26:b5:dc:52:2f:07:bd:6c:fa:
         aa:d6:3f:1e:75:0c:f8:fc:3b:ba:c9:01:c9:cb:b0:7c:80:99:
         f7:42:b7:f1:27:c6:41:21:e7:84:9f:66:fb:08:f3:08:87:e5:
         60:70:b6:d6:67:98:c1:e5:52:b9:9e:09:8f:d6:aa:ce:e1:3f:
         ab:0f:4c:2b:bb:6b:c2:69:12:a6:c2:37:9c:7f:ec:a0:f1:77:
         f2:c6:f6:4f:a6:97:3b:cd:d6:71:70:57:67:f4:a6:00:11:30:
         e8:8e:f8:19:8b:a2:0d:fc:10:dc:d3:0a:36:7b:dc:f0:67:1e:
         50:9c:1a:22:5b:b1:fc:cf:1f:01:95:17:8a:fb:3e:52:9f:8d:
         fc:4b:90:79:2d:01:ba:07:e3:5d:bb:a8:1e:e6:96:08:b4:66:
         4e:61:e6:68:91:41:06:a9:28:43:1f:71:dd:d8:fe:c8:aa:41:
         f5:a7:76:7d:3f:d2:97:db:23:e5:3d:4e:78:90:e2:55:51:2f:
         0e:9f:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:07:17 2025 by rpki-client