Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File:                     3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier:          T5+Df3Yw5ZPMwUKT7BlxAucYtBN+CGkub/UP5Vk+2vQ=
Subject key identifier:   5A:F3:AA:9F:BB:20:71:64:ED:C8:33:74:11:B7:F4:C9:D0:8E:79:F6
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer:       /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial:       01987450C0805C565A15EDDC0AFD1D75972F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number:          0710
Signing time:             Mon 04 Aug 2025 09:01:45 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:45 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:45 +0000
Files and hashes:         1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: i1zLn1ew372TIKUN1GLq5mTVvsUwg7Y5tZgyL/bbKXM=)
                          2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:c0:80:5c:56:5a:15:ed:dc:0a:fd:1d:75:97:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
        Validity
            Not Before: Aug  4 09:01:45 2025 GMT
            Not After : Aug  5 09:01:45 2025 GMT
        Subject: CN=5af3aa9fbb207164edc8337411b7f4c9d08e79f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:af:89:88:e4:0a:e7:2b:89:a1:a8:81:8d:
                    f9:bc:3e:ef:94:9d:6a:6e:60:18:41:43:e1:4f:b6:
                    f9:27:7c:03:8a:89:d2:62:46:23:11:f7:ae:0e:7d:
                    c8:1d:38:ae:fc:71:97:97:68:0f:38:30:38:fb:27:
                    1e:a5:ce:28:e8:69:73:d0:3c:92:9c:ed:5e:84:ba:
                    91:39:58:25:3c:8f:47:97:5b:af:f3:1c:2b:73:ed:
                    ff:37:36:99:c9:e6:67:ff:0c:e2:b5:e6:25:1b:34:
                    f5:47:d0:4a:8e:ae:e6:dd:bb:26:32:e3:3c:9e:56:
                    de:47:d3:25:d7:1e:17:9e:c8:21:55:9e:b4:21:a0:
                    6d:cf:04:23:58:17:37:0c:bb:91:70:ce:47:e6:18:
                    bd:5f:09:26:f4:c6:ef:b5:0a:07:74:a4:30:9d:bc:
                    0a:64:5a:93:13:08:62:da:47:b1:f2:f1:61:31:ff:
                    d7:f1:cc:8e:13:49:d4:ce:f8:d4:47:16:c3:c5:10:
                    1e:b0:24:19:8c:ff:a4:9d:ec:c2:07:27:ed:53:b4:
                    0d:66:d1:d4:6f:ba:a1:5e:27:8d:b5:81:46:03:82:
                    1f:0b:83:cb:20:c9:5a:21:97:5d:56:d9:9f:99:f1:
                    45:5e:9a:75:59:81:37:a6:9f:04:47:8f:84:32:68:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F3:AA:9F:BB:20:71:64:ED:C8:33:74:11:B7:F4:C9:D0:8E:79:F6
            X509v3 Authority Key Identifier:
                keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:be:41:c5:39:62:2f:5b:5b:e2:4f:6d:fa:2a:36:e2:ba:2b:
         63:5f:4e:99:f2:22:e7:16:d9:bf:bb:e9:f0:60:12:ec:96:9c:
         d0:c7:e0:b6:a9:39:ab:75:4d:c8:4c:65:37:77:77:80:29:c0:
         54:1a:d4:b9:e6:de:f0:b3:18:e2:3a:fd:4b:2c:82:bb:9a:22:
         c8:c8:c7:08:ae:e5:bd:74:40:14:62:03:f7:f9:a3:eb:34:9b:
         88:f5:e0:8d:9a:d6:71:aa:d6:f6:39:b6:f7:ed:56:17:63:c1:
         1d:bf:45:a0:dc:2f:f0:57:8b:b0:45:15:49:33:fd:0f:e5:2e:
         29:9e:2f:aa:85:81:0a:77:8e:73:79:b8:df:51:0e:ff:46:0c:
         e8:bd:4c:4b:73:c9:74:0d:e9:f2:0b:7b:4f:5a:98:f6:a9:a3:
         33:48:92:df:12:d2:5f:7c:00:02:e8:26:6c:26:a9:cc:1d:ba:
         7e:9d:44:5c:7b:94:59:00:1a:7c:ff:dc:92:0e:81:0d:bc:89:
         65:27:76:8a:c1:4f:ea:00:58:cf:05:b0:9b:76:96:92:0d:aa:
         bc:39:97:8b:49:ea:b1:40:42:8b:58:cf:fb:d3:20:0a:6b:c0:
         64:9b:d2:22:e7:52:35:a7:21:47:80:29:84:90:c8:22:62:24:
         58:21:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:24 2025 by rpki-client