Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File:                     3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier:          vapgXjQYTZx1gI7i/MydIfS5Ibjd8K2PXs7S2BcAchY=
Subject key identifier:   6C:DE:D5:04:77:82:32:53:3A:93:18:78:F4:D5:B5:06:C1:60:85:D1
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer:       /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial:       0196CBA9FBD3768C1D41763AD2D9214F8786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number:          10EF
Signing time:             Tue 13 May 2025 22:00:36 +0000
Manifest this update:     Tue 13 May 2025 22:00:36 +0000
Manifest next update:     Wed 14 May 2025 22:00:36 +0000
Files and hashes:         1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: 8JjikaLdclew13v9IUB8JJZRvoNYhYQz0Xdo5xtADG4=)
                          2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:a9:fb:d3:76:8c:1d:41:76:3a:d2:d9:21:4f:87:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
        Validity
            Not Before: May 13 22:00:36 2025 GMT
            Not After : May 14 22:00:36 2025 GMT
        Subject: CN=6cded504778232533a931878f4d5b506c16085d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:1f:30:7c:90:31:95:f0:06:bf:ec:d2:35:
                    15:df:87:ec:2a:76:ed:88:18:69:1c:84:5f:28:b5:
                    c5:84:73:47:fe:78:c4:5f:2e:37:64:15:e3:d8:b0:
                    96:b3:6f:91:bb:0d:8c:69:38:16:c1:2a:0e:b6:48:
                    2d:1a:da:c2:da:88:ca:b8:cf:66:a0:65:8b:c8:18:
                    12:4b:99:60:1b:58:fd:66:23:c0:39:ef:f6:90:83:
                    da:80:d7:33:08:52:81:62:cf:71:f9:f5:1f:ec:f7:
                    ef:b4:98:0c:cc:20:06:10:d1:1f:ca:a5:48:6d:98:
                    2b:33:da:b7:37:26:6a:06:ba:0d:18:bd:20:a4:a5:
                    f3:11:0c:4d:e5:8f:f2:61:67:a9:79:5d:d0:46:aa:
                    55:67:dd:cd:17:30:b0:6a:5b:75:e1:a4:29:8f:95:
                    45:c0:00:ee:db:d1:99:2d:a5:75:c4:15:fe:46:81:
                    8e:61:47:bf:c0:08:d7:71:cc:21:8d:e3:16:0f:35:
                    4c:fd:52:be:d7:ee:df:0b:27:38:96:98:c2:8e:37:
                    90:e9:91:69:fc:70:45:ca:30:d9:b3:9d:95:66:90:
                    ea:e4:45:db:09:98:a8:f6:13:d3:b8:49:c1:94:a3:
                    8b:f0:c0:7e:1c:2b:3b:8b:84:e2:1c:27:97:69:79:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DE:D5:04:77:82:32:53:3A:93:18:78:F4:D5:B5:06:C1:60:85:D1
            X509v3 Authority Key Identifier:
                keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:44:d4:75:5c:e6:7d:2c:f5:43:96:89:93:16:11:65:32:1a:
         29:18:a4:5d:3b:f8:39:63:86:60:8e:8a:7a:b3:dd:77:da:bc:
         86:8a:85:e1:fd:01:86:0e:6e:fe:80:06:44:8b:9b:82:62:79:
         e4:63:cf:17:e6:fa:0d:d3:bd:93:18:20:9a:97:a0:2f:c4:30:
         19:8c:9b:53:56:5d:3c:a8:13:c9:f2:60:20:b5:60:52:c1:b0:
         da:db:2b:d7:37:7d:fe:b1:b9:9f:76:06:64:03:92:16:44:d2:
         2c:a1:e4:f8:40:b7:27:af:5e:b7:94:4c:51:ea:90:26:77:0c:
         af:8b:00:09:00:39:0b:53:9a:81:74:3d:67:12:d5:29:a5:99:
         8c:26:f6:e8:73:07:42:f0:91:57:dd:16:0e:c3:4c:45:6f:78:
         3c:52:eb:d2:fe:bb:d0:da:98:12:bb:a6:b9:da:c1:63:ef:df:
         ef:3d:25:9a:c0:6f:c0:d4:46:5b:3c:f8:4b:ba:60:2a:11:2e:
         6f:df:8e:a6:e9:dd:ca:d9:b1:d5:be:aa:82:f8:a5:58:9c:1b:
         ed:d7:cb:8a:70:fb:62:7c:07:49:3e:d4:01:9a:eb:29:08:9e:
         b1:0e:46:27:7c:79:38:b0:e9:29:22:ff:a2:27:9e:2c:35:7f:
         0a:06:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:20:29 2025 by rpki-client