Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
File:                     3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json)
Hash identifier:          /ZETBLC482S57zbhhX2Nr9k83NzShjVHuSQryvc3HTg=
Subject key identifier:   ED:92:1D:CD:B9:43:04:5C:B9:8D:B7:E7:A8:46:71:54:16:BD:22:CF
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Certificate issuer:       /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial:       0198D65FB24145047F648D3A08F768973413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
Manifest number:          0D96
Signing time:             Sat 23 Aug 2025 10:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:52 +0000
Files and hashes:         1: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: S6MAWQCKF7Fzb/D8mBoTCy886MjpRBov5qqsB4CwZ0k=)
                          2: 6QLt8gn6308YVRHTv77skONgyv0.roa (hash: WOVtEt3WWdPmMOLnSpBdtQecprDqkDjMDowLpoTrLSs=)
                          3: BlrozZPONvKYEp2UEAlnW_YzHI4.roa (hash: L9GHrxzoIcunUF/HHDD1IUg78PGRjvbme0vJn+zzCvE=)
                          4: CyRu--zwDhYd5zhamEbAkFcQBvQ.roa (hash: sO2VoYkxgTRufknOOSGAsTFVUrBvzkN0qo3ZnwDHlpE=)
                          5: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:b2:41:45:04:7f:64:8d:3a:08:f7:68:97:34:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
        Validity
            Not Before: Aug 23 10:00:52 2025 GMT
            Not After : Aug 24 10:00:52 2025 GMT
        Subject: CN=ed921dcdb943045cb98db7e7a846715416bd22cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:f9:70:42:1c:cc:bd:9e:41:7a:0e:b8:14:
                    a3:0d:b4:99:a6:04:f8:3a:74:9d:a8:dc:44:46:bd:
                    df:93:ae:13:d7:13:5c:db:00:c7:2b:5e:f1:94:42:
                    d0:97:b2:9a:7d:3b:32:b5:3b:a2:03:ea:c0:97:6e:
                    02:4d:2c:99:bd:61:f0:1a:0d:b9:2e:f1:4c:b0:78:
                    88:c8:c1:06:42:2f:de:d0:6d:f1:63:8c:49:15:ac:
                    65:52:41:df:86:81:27:5c:f3:63:21:00:cc:41:9f:
                    dc:44:79:4f:21:98:f3:de:ee:a6:ac:b1:be:3e:3a:
                    2b:a6:c8:f8:88:59:85:59:18:5f:52:e8:aa:67:a6:
                    17:de:e3:ad:62:5a:6d:7e:16:84:41:df:a3:19:05:
                    ef:1c:e4:2b:5a:50:c4:f0:9e:f5:b3:d8:76:88:28:
                    54:c6:f2:be:59:3b:37:5a:e2:ec:fb:fc:e8:d9:d9:
                    6c:23:1f:ab:f7:8f:c2:d6:89:15:c4:4d:5f:9e:3d:
                    79:a7:c6:f1:35:14:4d:f6:1a:01:d5:ea:f8:0e:75:
                    05:90:0b:ca:ee:68:2f:87:56:2a:1c:53:2d:bc:39:
                    69:1a:22:27:ea:9e:18:9e:54:11:31:1e:85:bb:ff:
                    de:77:1e:55:d6:67:6e:73:15:df:cc:79:02:a1:43:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:92:1D:CD:B9:43:04:5C:B9:8D:B7:E7:A8:46:71:54:16:BD:22:CF
            X509v3 Authority Key Identifier:
                keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:cb:b1:21:9b:f6:68:67:4f:b5:dd:67:3f:37:09:05:63:7a:
         5a:e7:42:95:92:7e:29:3f:84:09:2b:b0:a8:9d:76:38:57:13:
         da:75:65:dc:25:67:ac:99:09:47:c3:cf:fe:b9:39:b9:15:d8:
         3a:39:0f:3a:32:f4:fb:3e:a4:ee:12:14:e3:57:51:b9:ba:33:
         0e:f2:10:bb:bc:14:a0:96:50:86:28:63:df:40:ae:2c:e2:46:
         ce:0f:7a:69:eb:57:f9:f9:e1:0d:2d:f0:70:7f:7b:5a:ae:da:
         80:a0:6d:83:a2:5c:ef:21:bd:13:a5:34:21:47:11:9c:b9:86:
         87:36:f2:a6:f3:f9:e6:74:78:e6:33:26:20:04:ff:60:14:26:
         70:9e:e8:ff:e1:b9:33:94:82:bd:29:f1:73:ce:9f:1c:ca:03:
         f8:9f:3c:0f:e3:a6:de:f7:a8:96:f9:4a:07:45:db:59:d4:6b:
         75:78:a8:c7:d6:c1:88:78:a4:6e:af:10:a7:64:2e:72:94:c2:
         63:5f:76:58:c6:c8:1c:26:68:f6:b5:eb:9e:79:ea:b9:6e:85:
         4d:39:9e:e0:9a:d7:83:6a:33:63:9d:11:76:ec:a0:7d:12:21:
         43:45:5c:db:e5:84:39:cb:52:35:b6:c9:02:5c:24:b1:1d:15:
         8e:d8:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:59:57 2025 by rpki-client