Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          mhYIzhaybENW8C4qAfzFP6VRKuSwdovj4cN873mU3dk=
Subject key identifier:   9F:EE:E6:D4:5D:D1:3B:45:00:12:50:F3:C6:1C:B0:09:62:DC:8C:DC
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       0196B85A1B3B0CD324CE2F43BD32681BBBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          1541
Signing time:             Sat 10 May 2025 04:00:35 +0000
Manifest this update:     Sat 10 May 2025 04:00:35 +0000
Manifest next update:     Sun 11 May 2025 04:00:35 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: u8q4BXMzc7Et7ke4LXDxspyKIquueSnCiBWIyXS/u3E=)
                          2: JOdkDpvp0vkWhvJ9lV0dWUTL_74.roa (hash: Yn5hV+sSL6Zg2EJjKD6GZsY1cY5bsq3d8VKm7ARDueo=)
                          3: Mx0tomllVsmkxbnh1iU8_2PCyj0.roa (hash: 7kB7d7CTYtow392lbDCXYANcYe1E5mU3cWH2302D1Ck=)
                          4: TiEyxKmyiS65-0wzRPZF8VUxgEI.roa (hash: O61YlumzohkeBoQeKX9n1/69jzfPg7pNTilEHThyZVQ=)
                          5: UZGcM2ffX81NtAhfATE7LMKcmU0.roa (hash: IHojeJZnyEKNZzsFj36mgVJwIZkRWe7Nk65gWxDYXn0=)
                          6: gWauuati_t4mDyHK5P6-vGRw5tI.roa (hash: 8Gg051rcVEVxLbKS4zWCYakDmEwjk+i+o+ush3e3CSQ=)
                          7: rtkk5gT-jAJhBoaE_BQPXocOEfU.roa (hash: v/MP7pEa6ZGIvq0Wu6Fpus/nOHl8IEXjbt8QwhltqFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:1b:3b:0c:d3:24:ce:2f:43:bd:32:68:1b:bb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: May 10 04:00:35 2025 GMT
            Not After : May 11 04:00:35 2025 GMT
        Subject: CN=9feee6d45dd13b45001250f3c61cb00962dc8cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:aa:ba:4c:2f:cf:5b:e0:8e:1c:b4:08:aa:
                    12:fd:a5:58:09:e0:af:d3:78:b9:d6:2e:0d:41:03:
                    8c:2a:3b:c5:81:08:ab:db:54:91:b7:2e:b6:a9:ef:
                    ff:08:08:5e:5a:aa:5e:f6:7e:16:3a:ec:31:6e:28:
                    84:39:63:a9:be:bd:a0:4e:54:e9:aa:dc:cf:e0:71:
                    df:bd:d0:f1:b2:23:d6:41:5b:51:f9:85:b5:8f:da:
                    cf:fe:be:dc:ba:e6:2c:86:6d:80:0d:2e:63:95:2c:
                    7b:60:70:ff:12:96:af:ea:06:01:f9:50:eb:4e:10:
                    2b:85:e4:00:cf:a9:af:62:f2:83:ed:6f:af:82:b1:
                    ac:ee:32:43:95:63:35:f1:25:6c:0e:02:89:3a:31:
                    5f:49:8d:c0:33:43:5f:c4:29:15:a8:ed:fa:49:d5:
                    00:68:7d:a1:ba:c5:ea:61:24:0b:f0:bb:d6:8c:fb:
                    41:e0:d7:b5:ec:bd:f7:87:aa:10:d7:eb:76:4c:a0:
                    1f:b5:ec:d7:e1:83:75:49:f7:11:22:eb:c5:8f:1f:
                    7b:a1:37:93:82:a5:21:d2:5a:41:3b:ed:d8:8e:04:
                    db:f6:b4:b6:1f:c2:ca:e9:17:e6:54:ce:73:cc:a4:
                    bd:b7:25:3c:b5:ae:6a:b9:bd:64:9f:22:6c:fe:b8:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EE:E6:D4:5D:D1:3B:45:00:12:50:F3:C6:1C:B0:09:62:DC:8C:DC
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:65:96:ee:95:24:79:e8:2f:a1:f7:42:00:5e:6c:b2:1a:21:
         8f:8d:7a:e3:ad:96:4d:17:07:32:dc:27:71:cd:22:70:69:33:
         5d:ac:b7:11:72:a4:d4:ba:ab:00:0f:b3:25:3e:ea:6a:c7:b5:
         3f:f8:35:59:9e:a4:34:87:aa:42:ca:b8:28:bb:7c:2c:6d:61:
         01:50:ad:c9:2d:a9:37:31:c1:84:78:e6:55:44:79:cc:91:9a:
         8e:44:e7:ce:50:a4:b2:a6:2d:67:3f:53:41:21:a6:d2:57:56:
         d6:30:a3:78:25:2a:ab:c7:5a:c3:53:e2:b2:49:cb:f7:b5:e0:
         a4:45:e1:06:e1:73:14:f9:c1:3b:56:02:1d:c8:56:bb:0a:62:
         f6:1c:e5:02:59:51:cc:d3:ce:e1:65:e2:43:a2:38:0d:40:5c:
         53:7b:10:73:64:4d:a4:b5:3f:0d:40:a2:c7:83:8e:d3:eb:6e:
         f6:31:99:4c:8c:85:c7:5b:65:9e:29:04:70:6e:6d:bf:ff:54:
         46:fb:07:51:15:d1:1c:bd:8d:d5:0a:3e:5f:39:d3:c4:ee:b4:
         cf:2b:6d:9d:37:c0:c6:4b:29:23:5d:a4:d1:50:3b:12:18:de:
         f5:38:f6:19:8d:98:14:8b:4d:5b:dd:5a:48:47:85:b4:83:61:
         24:ec:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:41:42 2025 by rpki-client