Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
File:                     3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json)
Hash identifier:          cKZxbdeovJznVJYEbA9EoPw0kj5RqWjwsh1AsgMkHFo=
Subject key identifier:   45:B6:65:1B:84:19:9A:3F:35:77:BD:CC:90:65:45:6F:B8:50:9A:CB
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Certificate issuer:       /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial:       0197B88F48EEEC7DF7FFA3F1BA3682484841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
Manifest number:          0D02
Signing time:             Sat 28 Jun 2025 22:01:27 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:27 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:27 +0000
Files and hashes:         1: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: UNqM3hmT7CnsdUUa1V2kjcnyfBtIunmAjv6YNv0dPZ4=)
                          2: 6QLt8gn6308YVRHTv77skONgyv0.roa (hash: WOVtEt3WWdPmMOLnSpBdtQecprDqkDjMDowLpoTrLSs=)
                          3: BlrozZPONvKYEp2UEAlnW_YzHI4.roa (hash: L9GHrxzoIcunUF/HHDD1IUg78PGRjvbme0vJn+zzCvE=)
                          4: CyRu--zwDhYd5zhamEbAkFcQBvQ.roa (hash: sO2VoYkxgTRufknOOSGAsTFVUrBvzkN0qo3ZnwDHlpE=)
                          5: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:48:ee:ec:7d:f7:ff:a3:f1:ba:36:82:48:48:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
        Validity
            Not Before: Jun 28 22:01:27 2025 GMT
            Not After : Jun 29 22:01:27 2025 GMT
        Subject: CN=45b6651b84199a3f3577bdcc9065456fb8509acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:8a:91:5b:11:58:f1:8b:af:dc:ea:87:c2:
                    0e:f8:ed:12:cb:5d:e4:13:1b:4a:06:1b:3a:c0:8d:
                    51:8c:18:35:d4:dc:88:e0:06:a6:76:98:0d:bd:23:
                    4b:66:bf:f4:a2:20:d3:e0:37:48:8f:86:32:68:eb:
                    2c:5d:cb:b8:12:94:d4:6e:4b:59:c9:e4:53:80:ef:
                    4a:20:f0:cd:a4:e3:21:5a:b1:d0:05:4f:13:46:8f:
                    d8:df:fc:26:a3:ca:90:15:38:94:e1:4e:a5:6d:a0:
                    19:1e:7a:4e:83:4a:46:8c:c4:20:24:87:46:70:0d:
                    ac:1e:d3:75:4c:46:7a:71:36:7c:20:f4:33:34:75:
                    79:43:bd:75:f0:13:6c:f7:86:db:a4:5e:78:a5:eb:
                    a7:7b:12:b8:21:fb:0e:fa:99:e7:7d:bd:6c:19:20:
                    bc:ed:c2:fa:1c:30:ab:98:5f:f6:d6:d0:14:91:da:
                    87:9d:fe:b9:11:e6:fe:60:23:8c:25:21:1d:d3:92:
                    8e:fb:1d:fd:f1:4c:74:47:53:f9:a2:26:60:2e:12:
                    4f:4a:98:d9:c5:8a:76:5e:1c:cf:60:48:1e:df:c6:
                    88:4f:1e:42:28:28:20:bf:83:f4:99:e2:d1:94:78:
                    4a:33:7e:00:d7:8b:17:51:5a:a2:52:76:01:5e:1a:
                    a9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B6:65:1B:84:19:9A:3F:35:77:BD:CC:90:65:45:6F:B8:50:9A:CB
            X509v3 Authority Key Identifier:
                keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fd:45:1f:5f:e1:7a:43:f3:71:41:ff:c3:f1:19:72:d0:3b:
         eb:59:03:6f:27:c1:87:9f:26:14:73:37:61:9a:1f:20:a9:7a:
         51:ac:2f:70:e2:7f:b7:df:aa:fe:8c:e4:f3:a4:ce:e9:a9:3c:
         30:32:27:fe:00:50:a6:b5:ea:5b:a5:c0:5a:5e:c3:d3:a8:2f:
         3d:df:57:e5:67:3d:94:21:46:c5:c6:fa:70:7a:8d:33:eb:68:
         be:9a:d8:65:73:56:a0:53:95:4b:73:87:14:d7:c8:76:d4:ab:
         42:f7:5d:6f:e1:d3:6d:d1:c7:81:57:2f:4b:4a:1b:a8:b2:0e:
         03:c6:1b:2a:41:40:72:17:f2:c8:88:e5:6a:11:3b:6c:5a:e3:
         5e:01:a7:ef:45:74:af:a8:58:39:aa:23:36:c5:ba:12:d5:98:
         23:f1:ad:3a:e4:33:ba:a3:e5:05:81:83:95:b8:e1:cb:7d:e0:
         31:54:03:a1:25:c8:10:9a:e7:a7:70:fd:49:7d:63:05:9c:ea:
         1c:a0:9f:73:48:ab:05:b8:6f:86:ae:6c:3e:d9:cb:80:bd:8f:
         db:8f:1e:f1:97:15:fd:cf:35:2b:47:40:9e:7c:a1:f9:86:be:
         7f:d0:60:2c:87:1d:d7:f5:d6:31:2e:67:e5:48:03:88:5f:af:
         9e:ac:90:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j0ju7H33/6PxujaCSEhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODdkMzViZGNhYjEyM2FmZmMxYTkxZDE3MzY4Njc5Njk3
MDlhMjMwHhcNMjUwNjI4MjIwMTI3WhcNMjUwNjI5MjIwMTI3WjAzMTEwLwYDVQQD
Eyg0NWI2NjUxYjg0MTk5YTNmMzU3N2JkY2M5MDY1NDU2ZmI4NTA5YWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXyKkVsRWPGLr9zqh8IO+O0Sy13k
ExtKBhs6wI1RjBg11NyI4AamdpgNvSNLZr/0oiDT4DdIj4YyaOssXcu4EpTUbktZ
yeRTgO9KIPDNpOMhWrHQBU8TRo/Y3/wmo8qQFTiU4U6lbaAZHnpOg0pGjMQgJIdG
cA2sHtN1TEZ6cTZ8IPQzNHV5Q7118BNs94bbpF54peunexK4IfsO+pnnfb1sGSC8
7cL6HDCrmF/21tAUkdqHnf65Eeb+YCOMJSEd05KO+x398Ux0R1P5oiZgLhJPSpjZ
xYp2XhzPYEge38aITx5CKCggv4P0meLRlHhKM34A14sXUVqiUnYBXhqpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW2ZRuEGZo/NXe9zJBlRW+4UJrLMB8GA1UdIwQY
MBaAFN6H01vcqxI6/8GpHRc2hnlpcJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQt
YzIyMzkwZThkOWE2LzEvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQtYzIyMzkwZThkOWE2
LzEvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/1FH1/h
ekPzcUH/w/EZctA761kDbyfBh58mFHM3YZofIKl6UawvcOJ/t9+q/ozk86TO6ak8
MDIn/gBQprXqW6XAWl7D06gvPd9X5Wc9lCFGxcb6cHqNM+tovprYZXNWoFOVS3OH
FNfIdtSrQvddb+HTbdHHgVcvS0obqLIOA8YbKkFAchfyyIjlahE7bFrjXgGn70V0
r6hYOaojNsW6EtWYI/GtOuQzuqPlBYGDlbjhy33gMVQDoSXIEJrnp3D9SX1jBZzq
HKCfc0irBbhvhq5sPtnLgL2P248e8ZcV/c81K0dAnnyh+Ya+f9BgLIcd1/XWMS5n
5UgDiF+vnqyQaQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:10 2025 by rpki-client