Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File:                     3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier:          fdatDGLIt8CW7H8ggzAoXOHqBKTaO0BuK0f8MOOK6o4=
Subject key identifier:   BE:FF:2C:2E:4F:9E:83:9C:56:82:17:5F:44:0B:05:37:36:82:07:8D
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer:       /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial:       01988A32F9C4CE597B7DB321006426C511BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number:          1621
Signing time:             Fri 08 Aug 2025 15:00:53 +0000
Manifest this update:     Fri 08 Aug 2025 15:00:53 +0000
Manifest next update:     Sat 09 Aug 2025 15:00:53 +0000
Files and hashes:         1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: XR1ez2q2SgQTsYqzidvti7kKhxwJlDDcTFzuhoG3ots=)
                          2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:32:f9:c4:ce:59:7b:7d:b3:21:00:64:26:c5:11:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
        Validity
            Not Before: Aug  8 15:00:53 2025 GMT
            Not After : Aug  9 15:00:53 2025 GMT
        Subject: CN=beff2c2e4f9e839c5682175f440b05373682078d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:22:42:9f:10:0b:d1:45:b1:81:36:c7:f6:
                    31:8d:5e:13:93:a3:ec:7c:ac:c7:87:b2:bd:e1:6b:
                    86:1a:11:23:4e:9d:16:5f:e1:d0:ac:35:51:75:f5:
                    64:fa:37:0d:17:3a:56:39:7d:19:bb:e2:00:5c:85:
                    35:4a:c0:d2:96:8d:e3:2b:14:81:c0:d9:f4:d7:00:
                    ac:31:fc:d1:67:7b:39:b5:bb:20:77:8f:e4:19:48:
                    51:71:62:63:f3:d1:2e:5a:80:62:8e:83:bb:17:46:
                    09:bf:f4:b2:f0:d2:a3:bd:8f:8f:87:bc:89:a9:7e:
                    db:a9:d1:bd:00:cf:93:16:47:a1:2a:e8:e2:2b:eb:
                    96:71:10:e9:8a:9a:89:de:dc:57:cb:1f:8d:65:b5:
                    c3:84:ba:ba:88:42:83:a8:25:68:ed:e6:4b:45:e9:
                    bb:40:64:36:b4:1b:7c:98:29:87:40:ac:1f:38:16:
                    e7:18:1f:c2:3e:16:94:ed:91:c5:8e:48:ff:32:d2:
                    39:16:b1:ac:18:25:dd:86:5f:bb:00:19:9a:96:60:
                    4f:58:f8:67:e6:c1:46:9b:76:26:f0:71:58:6e:73:
                    bc:06:49:7f:c3:42:3a:28:01:48:eb:a9:f1:0f:1d:
                    94:71:68:5e:93:6a:95:c9:c8:1f:a6:6f:38:89:c7:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FF:2C:2E:4F:9E:83:9C:56:82:17:5F:44:0B:05:37:36:82:07:8D
            X509v3 Authority Key Identifier:
                keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c4:e4:f5:1e:25:f0:7d:4f:db:23:42:84:5f:18:54:2f:b7:
         7f:0d:e6:b2:14:48:a8:cd:f7:bd:b8:bc:c1:17:b0:fe:00:a8:
         ab:d3:7d:99:82:cd:6a:90:41:c0:09:ab:1a:87:ef:9e:67:26:
         35:16:64:fb:df:dc:8d:74:b4:9f:04:09:03:67:76:55:e6:2f:
         96:a4:97:2f:40:ba:96:1d:4e:22:34:e6:63:2c:8c:8b:10:27:
         fb:a6:ce:db:f0:85:9c:ef:77:ee:6d:99:ae:ec:f1:12:2c:01:
         62:ff:a6:50:9f:ae:5b:d7:9e:3b:84:7b:ea:8d:bd:ad:0e:e6:
         f2:0a:ce:99:e1:de:48:14:f5:0d:16:1f:ba:18:82:51:af:4f:
         16:f8:fc:de:45:ab:6f:09:3b:cf:0b:6d:d8:18:75:0e:4d:2e:
         fc:03:ca:5f:20:eb:3c:51:c2:40:6f:a3:8c:16:57:87:d8:b2:
         bc:f2:87:e1:c3:ef:fe:e6:63:12:e4:9a:29:dc:a1:53:c4:4e:
         32:b9:f6:9d:b0:c2:ca:f2:12:04:ea:d6:a9:a0:1e:ab:d0:d7:
         ce:0c:51:5a:9e:b1:55:c2:96:98:25:52:c2:4d:07:cc:0f:a0:
         65:6d:4c:79:49:4b:22:c9:9b:45:2e:03:96:d7:09:e0:c8:97:
         cd:95:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:07 2025 by rpki-client