Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
File:                     b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json)
Hash identifier:          j+KOMs/fWEg6+QBEWR4sKn0v+lJCT/8IvJ/zi2Dmw2s=
Subject key identifier:   AB:56:3D:F8:B8:50:C0:8E:55:81:C4:8C:8A:76:19:46:C4:28:0B:FF
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Certificate issuer:       /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial:       019874BE72607C4C034F158EA092F6B73791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
Manifest number:          08A3
Signing time:             Mon 04 Aug 2025 11:01:34 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:34 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:34 +0000
Files and hashes:         1: 7oPgYuLkR8YeCeBAjdj-EV5NcO8.roa (hash: cfjdHkH+PZdGo+DIF9TmRoRCIzPJW7XiEbCIBO7MIlM=)
                          2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: ti6ijUhH+xAtAyL39ZxjEu5Z/iH0nqfQenEPA9kHMSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:72:60:7c:4c:03:4f:15:8e:a0:92:f6:b7:37:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
        Validity
            Not Before: Aug  4 11:01:34 2025 GMT
            Not After : Aug  5 11:01:34 2025 GMT
        Subject: CN=ab563df8b850c08e5581c48c8a761946c4280bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:46:df:78:13:2b:41:3a:1e:be:b3:01:d1:
                    f1:6d:5a:23:13:d8:51:d7:f1:30:3e:88:a6:d7:22:
                    a7:11:a7:10:7a:59:a5:84:8e:b0:9c:42:ff:4f:f3:
                    59:3e:ea:ec:3f:ba:42:fb:f4:d9:a7:e6:bf:04:c3:
                    b3:fa:e0:ee:e6:a5:00:65:ae:91:d4:2d:89:19:1e:
                    0c:4d:33:28:d5:d3:05:4b:44:f5:09:72:7a:15:d5:
                    a7:c6:28:43:22:07:36:e5:4b:50:fa:6d:8e:b5:53:
                    c6:4c:d3:db:68:89:76:40:6c:34:60:15:8e:3c:df:
                    c6:29:67:4e:55:b7:ec:67:e2:c8:56:bb:a6:00:7b:
                    c1:c6:28:f6:f6:3a:64:6e:54:64:a4:a8:8c:eb:97:
                    7f:19:85:1f:e3:57:92:96:ca:57:3c:37:0c:03:66:
                    2a:25:53:31:ab:12:38:85:cb:ec:7b:75:5d:3b:4a:
                    f3:d2:2b:ca:d1:0b:e0:68:79:d7:0b:32:c9:db:91:
                    1d:69:dd:69:55:3d:3c:64:62:a5:61:59:b1:e2:9f:
                    14:81:43:c6:18:c8:18:9b:0e:4a:d5:7d:b2:78:f1:
                    14:7b:1f:bd:f6:24:52:f3:9f:c0:88:48:ab:76:f2:
                    32:1b:90:36:31:5e:9d:78:e1:54:2b:f7:02:18:19:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:56:3D:F8:B8:50:C0:8E:55:81:C4:8C:8A:76:19:46:C4:28:0B:FF
            X509v3 Authority Key Identifier:
                keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2b:2c:b5:12:bc:53:f8:6f:02:86:42:ea:ad:8b:1e:97:97:
         b1:b2:c8:08:56:58:2a:86:84:e8:bf:ac:fa:6a:f4:5f:26:fc:
         56:94:dd:b5:51:b3:41:d4:0a:00:67:a7:c8:69:62:b1:44:c0:
         c5:d4:2e:5b:81:d7:12:70:04:1f:03:27:7f:23:b3:e0:b8:a2:
         04:b6:88:2c:ce:4a:af:94:8c:14:8e:f9:38:80:de:fe:89:49:
         e0:b9:c1:fe:16:95:f2:f6:6e:2c:f7:c4:7f:51:a1:15:52:b6:
         8e:e7:d7:01:66:9d:d0:19:ea:c1:b7:e3:9f:64:7c:6e:1b:8d:
         64:53:3f:57:05:d9:5b:54:4f:5e:b6:27:02:bd:f4:ca:d8:d1:
         a5:6e:f1:a4:e6:e1:22:21:ef:52:b9:38:d3:b2:db:b4:73:0d:
         a4:4d:c9:3a:8d:5e:54:0a:f4:45:e5:56:a8:33:4f:b7:78:34:
         3c:d5:2c:a7:33:c0:39:78:a9:8d:1f:95:c0:e5:7d:1b:f4:a2:
         3c:97:de:31:c9:21:9e:0d:a6:58:7c:01:a7:ba:18:fb:5a:7b:
         aa:06:a9:4a:92:4c:17:e5:cd:68:8a:3a:4a:8a:d1:f4:f0:61:
         73:1e:1e:6c:e3:ae:5e:0b:ed:9d:3e:0f:63:c7:06:b0:dc:1e:
         fb:a2:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:19:51 2025 by rpki-client