Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File:                     3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier:          Dy3WoXJn/X6O7ce4WW+PJbcOUheq41gHyu4wKq6Vhp0=
Subject key identifier:   86:ED:FD:53:3F:64:51:52:AE:5B:F2:98:18:E8:1D:C7:CA:71:A9:6C
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer:       /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial:       019880C1DE42450DFE227C2B00B9D6AAFB3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number:          072C
Signing time:             Wed 06 Aug 2025 19:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:45 +0000
Files and hashes:         1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: eIlqcv45MfxTgW3hWaDShMZ+g9mYiGPscoXEjY/lnh4=)
                          2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:de:42:45:0d:fe:22:7c:2b:00:b9:d6:aa:fb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
        Validity
            Not Before: Aug  6 19:00:45 2025 GMT
            Not After : Aug  7 19:00:45 2025 GMT
        Subject: CN=86edfd533f645152ae5bf29818e81dc7ca71a96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:f4:0c:cc:4d:a2:69:ca:46:55:23:00:3f:
                    ab:d1:e4:49:47:89:8d:ad:88:06:51:f6:cb:47:67:
                    f0:e2:71:18:b3:e9:7c:66:53:07:3d:f3:05:0e:07:
                    ce:80:d6:08:16:0d:5f:1f:63:1c:34:61:9e:89:3e:
                    fe:27:ce:5a:25:aa:1b:ca:a9:28:c1:60:22:87:77:
                    04:3e:8e:f5:bd:17:46:c4:4d:d4:dd:86:db:d3:d7:
                    b5:37:81:ab:ed:e2:52:11:99:fc:d2:51:9e:84:ff:
                    11:ad:c0:ae:dc:23:db:f4:d8:9c:4b:03:ef:89:8a:
                    f0:20:b5:f0:d7:be:1b:5a:a8:e7:87:f3:2d:9e:6a:
                    a1:f0:01:7c:ae:cf:db:f2:15:bb:ae:00:26:e9:44:
                    b7:2a:70:fa:af:c3:a7:34:30:51:b6:f9:28:36:1e:
                    ee:78:c5:80:9d:ca:a8:23:5d:d2:62:a7:a8:0b:c7:
                    08:f3:ee:0f:e9:8a:a2:08:0f:6e:d0:f8:c2:a2:1a:
                    5d:7e:8e:6c:9e:80:be:61:a4:9a:3e:b2:b0:21:00:
                    ce:71:d4:15:30:84:f7:44:de:7a:89:90:b6:67:3f:
                    55:81:4e:fb:ce:1b:10:5d:fb:c0:94:e5:80:80:40:
                    b8:94:6f:b9:22:49:58:bf:d9:fe:51:80:58:e7:11:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:ED:FD:53:3F:64:51:52:AE:5B:F2:98:18:E8:1D:C7:CA:71:A9:6C
            X509v3 Authority Key Identifier:
                keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:06:ac:17:47:3b:5d:7f:87:3a:d0:36:c9:62:eb:2d:f6:86:
         b7:17:dc:85:c7:f1:48:6b:ab:ae:42:32:ec:8d:ea:43:39:8f:
         4f:f7:8e:86:ae:4f:75:96:f9:d2:d0:17:65:8c:12:fb:34:06:
         8f:f0:a4:68:9e:c1:41:24:a9:9d:34:51:23:2e:a6:c9:c2:ec:
         f6:86:4e:6a:a9:c3:7d:82:6f:a5:b2:18:35:d3:11:35:3a:70:
         3f:6f:5c:69:d1:c9:81:e4:6a:0a:ce:cd:b4:1f:0c:8d:11:f4:
         8a:67:50:62:3d:9e:7d:cf:c6:29:6f:dc:0b:d3:97:0e:9c:93:
         e9:1f:19:b7:48:5b:7b:77:e6:98:7f:3d:9e:1e:78:01:25:57:
         72:55:ad:08:e0:6f:7a:1e:d1:66:53:a4:c2:6d:eb:da:13:a2:
         09:44:4f:ae:51:ca:ee:9f:54:d8:0c:05:94:0e:ba:f8:77:93:
         84:0e:d9:0e:f6:e8:b1:e7:94:16:9c:9a:66:e0:9c:3f:f2:aa:
         84:06:0b:f4:e5:56:fe:d0:54:35:67:6b:7b:ed:ab:52:a4:e7:
         7a:71:7a:a0:c9:4c:1b:5a:5c:d4:22:bc:82:d1:91:4c:1c:5b:
         c6:ce:54:f1:b4:18:90:4a:98:ac:39:07:f8:7a:50:ce:48:fd:
         5b:d6:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:17 2025 by rpki-client