Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File:                     3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier:          lrFG/YKzVBDDviE+eZDZVDsvXSZkUQMb3uuPhmkOotM=
Subject key identifier:   61:6D:51:A9:40:F4:28:5F:ED:66:7D:80:9D:7F:00:10:81:F7:15:5F
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       019873E23423E5DB6A4537A90C3D330154A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number:          1622
Signing time:             Mon 04 Aug 2025 07:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:00 +0000
Files and hashes:         1: 27nlRHwxg0E9Q8sg08KsIM7uurM.roa (hash: S/euVGTNqJg3LcazblgCESHTj7tHb3XsTieuaVZKJ7c=)
                          2: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: MzTeLnDEkDEE8W9q/yWCdjAWa2XvtpxArfJ/Sc8z1cA=)
                          3: cb_zDnKlQ9maV_mcPiyN2HwpRxo.roa (hash: rr7OeDKsSm5RUPgVy2VLBciOmsBRvc5YKTQcvs96n0U=)
                          4: ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa (hash: dL+5O6eKdQJWgkq0JqtkXhyJzAf/MU7XQ0/GDtElRTc=)
                          5: qGOQ_yXUb9fqfdc0pjv8GkkFrgA.roa (hash: 833QRTQTY31+HWX8nRUFCr/VNiol8C4z2kqd75zyrgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:34:23:e5:db:6a:45:37:a9:0c:3d:33:01:54:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Aug  4 07:01:00 2025 GMT
            Not After : Aug  5 07:01:00 2025 GMT
        Subject: CN=616d51a940f4285fed667d809d7f001081f7155f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:fb:c3:67:d1:ce:27:7b:aa:34:0e:1e:e6:
                    79:f5:f6:b2:68:fd:e5:6d:67:74:fb:48:09:53:c0:
                    29:3c:49:3e:23:19:4c:e4:64:11:4e:94:a4:84:2c:
                    74:74:0b:72:23:c1:16:bf:ab:09:a8:4a:54:35:5e:
                    58:56:23:a8:2e:ee:8a:fa:d1:4b:ec:05:36:de:40:
                    60:2d:73:a3:65:45:ea:74:0a:51:2a:ce:3c:16:75:
                    b8:ce:16:98:8c:e8:65:92:bb:01:eb:aa:17:f9:07:
                    ba:8e:c7:1c:0b:5b:26:f3:aa:dd:b1:32:56:94:c9:
                    2b:f8:28:92:51:32:a8:be:34:eb:e8:72:79:b5:bc:
                    cb:14:11:2d:4e:c1:6c:d9:31:9b:c4:ca:2f:31:58:
                    20:bb:11:ee:d8:50:56:02:67:5a:96:84:9e:fd:9f:
                    b8:2a:4b:73:5e:70:9e:2e:82:ab:78:e6:53:c3:d1:
                    21:27:aa:25:2f:80:38:22:cb:20:2c:e3:96:36:0c:
                    0a:d5:4d:96:80:41:61:61:e8:1a:89:25:2a:80:3c:
                    e1:6c:4c:7b:36:8f:3b:a7:7d:f4:48:56:a5:32:0f:
                    21:ac:7d:31:c8:e0:43:e8:a2:21:53:e4:93:9b:ad:
                    bd:7d:d4:40:a9:a0:21:a1:28:9a:a5:3f:ee:23:a0:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6D:51:A9:40:F4:28:5F:ED:66:7D:80:9D:7F:00:10:81:F7:15:5F
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:cd:c1:6d:b5:69:85:4d:d8:c9:c2:33:6c:03:21:86:12:94:
         2f:85:1e:78:36:d1:ba:99:6a:3a:8d:44:70:ca:50:37:27:e7:
         44:4b:13:b6:9b:ea:44:33:bb:74:d3:2d:d8:05:9a:cf:11:12:
         a8:3e:82:60:c3:ec:f2:92:8a:b1:6c:48:77:ba:30:25:0f:d7:
         08:09:68:7e:30:d4:14:24:8e:f3:cb:59:c4:c9:9d:37:ab:18:
         13:e1:23:50:a0:07:3f:5a:de:2e:7b:a7:3b:30:ad:d1:22:cb:
         e0:c7:43:e1:a5:ff:18:b3:b3:a4:5e:80:e4:25:55:43:06:d7:
         dd:96:cb:95:2c:ec:64:dc:e5:cb:59:c9:03:47:90:4f:9e:a2:
         70:65:be:5f:d4:b0:f1:39:37:f9:be:f9:f2:a2:1a:ea:b5:17:
         e9:bc:59:fd:c5:c0:b3:ac:a6:95:32:60:03:f0:a8:4e:c7:1c:
         3f:b5:ac:7c:52:dc:7a:87:26:2d:e9:75:61:c0:54:c1:28:18:
         1f:fd:28:2e:c6:48:57:6a:d7:26:03:dc:e7:a2:d9:54:08:00:
         13:41:d9:ca:38:56:f7:e0:d8:b2:96:16:5c:73:94:01:f0:00:
         a6:a5:7a:9c:e6:bb:64:76:ed:67:4a:61:b0:26:4d:62:98:29:
         3e:6b:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:21 2025 by rpki-client