Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File:                     3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier:          CVgrtVtLz3ScYMQjEUiTxMc3ZX15gNhGQoarZe4wEbA=
Subject key identifier:   93:9B:FC:C3:FC:46:DB:76:D8:06:62:93:D2:AB:3D:68:75:DD:2B:DF
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer:       /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial:       019769299D3617109D9A604B65EA30744C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number:          07FF
Signing time:             Fri 13 Jun 2025 12:00:24 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:24 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:24 +0000
Files and hashes:         1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: fQOO39hKSZpnDI7vMiIJNVESnl0i7fBbt/u4SLxcoO0=)
                          2: pDLly0sn53PLZlgmqVTYD5L2Et0.roa (hash: MLKk0AIXSDvV1SnhwkIbUGP+qcSM6FHopsKcU6yMV74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:9d:36:17:10:9d:9a:60:4b:65:ea:30:74:4c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
        Validity
            Not Before: Jun 13 12:00:24 2025 GMT
            Not After : Jun 14 12:00:24 2025 GMT
        Subject: CN=939bfcc3fc46db76d8066293d2ab3d6875dd2bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:11:0c:eb:54:43:29:d5:9a:b0:e3:cb:fd:
                    23:44:17:9d:9a:99:30:65:29:8e:56:1a:79:d5:2c:
                    f0:5c:bc:e5:48:5f:39:09:f6:91:4c:bc:3a:9d:a1:
                    0c:a9:d9:7e:e6:ac:04:01:3d:20:8a:ee:89:e8:1b:
                    37:2c:89:9a:be:2b:6e:c6:5e:00:4b:94:55:50:f4:
                    19:03:f0:51:29:71:6b:c8:11:bb:80:29:03:27:26:
                    3f:5e:ed:05:aa:3c:94:6a:b9:69:0c:37:49:be:e6:
                    14:33:86:0e:59:21:43:19:e2:9f:3e:c3:15:04:b4:
                    d0:23:3f:e8:92:cb:2f:18:b0:66:90:d0:b7:d6:0a:
                    8f:33:05:f1:9c:42:de:b0:16:e1:82:b9:bc:6f:30:
                    5b:74:15:55:6e:f9:02:48:2f:56:c9:73:aa:4c:6f:
                    b9:20:72:30:76:80:2f:b6:67:dc:9b:36:ad:e8:b7:
                    e6:79:53:a5:99:38:be:45:15:94:d1:bc:d4:88:a4:
                    78:85:c9:76:19:08:1e:33:16:fd:5d:61:10:84:a8:
                    1d:f8:1c:9b:ca:3b:f7:3c:04:7c:a9:a8:0c:5f:28:
                    ed:a8:f9:e0:68:18:d4:91:74:ac:9c:b5:20:60:f6:
                    1b:03:e5:da:50:6e:6e:7e:81:7a:cb:ca:96:8c:e1:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:FC:C3:FC:46:DB:76:D8:06:62:93:D2:AB:3D:68:75:DD:2B:DF
            X509v3 Authority Key Identifier:
                keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:66:f0:b1:75:96:70:85:0d:43:45:e2:07:97:d8:c5:97:
         c5:9a:b8:02:79:f5:ca:2d:b9:70:a7:8b:a7:ed:fb:c1:89:5c:
         2d:84:3f:a6:07:b9:26:fc:d5:fa:22:cc:6d:3f:21:d3:af:69:
         91:ea:60:f6:c4:b8:ea:01:76:01:97:a8:34:a9:5e:20:c1:d9:
         ce:7a:0c:a2:cc:fe:2f:36:da:b8:73:4f:a1:4e:c5:95:28:72:
         61:9e:ad:7f:09:15:46:8b:fa:b9:a0:d6:c2:ca:a0:62:cc:fd:
         b1:1e:de:1a:75:e5:4d:51:5f:18:e5:35:69:00:6f:3d:ae:41:
         23:c6:e0:01:a4:48:7b:bd:29:0e:c6:8a:c6:bc:ca:88:84:0c:
         3c:55:1f:85:89:4b:44:5f:eb:1b:53:e1:c2:39:50:4b:0b:2a:
         4b:1e:08:54:2e:1c:5e:78:21:98:1a:c2:67:53:88:ec:c7:28:
         14:32:7c:90:ef:99:e3:d0:1d:fc:eb:17:e5:73:4c:00:12:bf:
         20:ac:19:7e:e9:81:a4:5a:fb:8d:36:2f:e8:06:db:90:9a:6d:
         e8:24:89:01:d2:33:d7:8e:9c:6a:ad:f3:23:a5:c3:c7:04:36:
         ae:59:3e:d1:2b:cb:ca:9c:25:ce:64:1c:29:15:b4:6a:b5:e4:
         a3:7d:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:13 2025 by rpki-client