Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File:                     II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier:          INmwDK/z6cCc1uh01h+h6/5G3C7a2zHaCUng1JMuPpY=
Subject key identifier:   CC:0E:8E:14:02:70:3E:F6:09:9C:23:F2:A0:B3:3B:78:C5:CD:AA:CD
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer:       /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial:       0198820BF1397F4443B7993B7F0959C3495E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number:          1620
Signing time:             Thu 07 Aug 2025 01:01:17 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:17 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:17 +0000
Files and hashes:         1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: d7BvqHXf8uwfsnZloixLtpxroQBi/gFqjWAMF5o/ukU=)
                          2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
                          3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
                          4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:f1:39:7f:44:43:b7:99:3b:7f:09:59:c3:49:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
        Validity
            Not Before: Aug  7 01:01:17 2025 GMT
            Not After : Aug  8 01:01:17 2025 GMT
        Subject: CN=cc0e8e1402703ef6099c23f2a0b33b78c5cdaacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:9e:92:c9:72:8b:23:d2:c2:e3:a6:6b:1e:
                    41:b8:af:29:f3:35:13:45:e2:bd:94:1b:ca:e4:42:
                    66:91:b8:ce:54:4b:cb:87:16:fb:6e:8b:f9:0c:98:
                    14:db:aa:6e:a5:87:a1:67:fe:f4:d3:fd:0c:69:75:
                    b5:e5:1d:fa:8e:0e:fd:ca:26:35:23:b6:3b:78:f2:
                    6b:fc:13:bd:d0:a2:07:aa:13:30:97:eb:80:82:65:
                    0f:ef:9a:26:e5:f9:87:5d:77:36:00:85:60:8c:a3:
                    e9:ec:46:69:14:b7:8c:db:9c:72:9a:15:a3:3c:d1:
                    e5:7d:80:c4:e7:39:fa:74:a2:17:2b:2a:93:60:b8:
                    f0:f2:77:4c:7b:3c:52:74:b4:c6:53:f7:02:96:30:
                    8a:b0:bc:90:54:bb:b7:0f:eb:7b:b7:dd:77:ab:40:
                    3f:6d:ee:5b:60:2e:45:01:3d:6f:1a:bb:f4:73:5e:
                    44:ee:23:4a:c2:30:fd:16:2f:6b:5b:2b:75:ee:eb:
                    39:da:fd:df:ff:55:a2:48:f2:b1:0f:24:46:69:a5:
                    59:64:90:8f:e4:95:1a:d2:00:f8:77:26:4f:07:1e:
                    62:32:65:14:1b:2a:32:fa:88:04:a9:44:41:cf:2d:
                    2b:cf:80:71:c5:1f:8b:d5:ee:92:ca:b6:b6:24:68:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0E:8E:14:02:70:3E:F6:09:9C:23:F2:A0:B3:3B:78:C5:CD:AA:CD
            X509v3 Authority Key Identifier:
                keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:53:cf:dc:59:19:90:5a:e2:97:f2:62:b2:2a:24:0d:f2:7a:
         72:61:81:2c:e9:db:48:6c:7a:5b:21:2b:8a:89:3c:a4:28:eb:
         d9:4b:94:e8:2a:2d:5a:f5:9d:90:9b:92:f4:ef:54:4f:80:58:
         45:b2:80:53:8b:2f:b2:f1:bf:ca:f3:5b:5a:b9:37:80:bd:ad:
         91:af:62:ca:bf:f8:f1:f3:42:86:62:f7:22:ca:9b:df:65:25:
         cd:0e:6a:d0:67:19:a8:53:fe:ed:dd:64:3a:4e:ec:7e:93:d5:
         2e:77:47:32:0d:65:23:93:e3:13:eb:36:00:1c:dc:53:c2:76:
         74:de:1e:9e:9c:37:59:f6:66:81:40:b5:08:8e:e9:97:4e:ee:
         10:2d:35:ed:2a:f1:fc:ac:12:f0:85:8d:bd:b5:1c:c6:27:bc:
         80:29:b9:c5:80:c9:14:9e:39:60:be:43:fe:63:b0:05:12:b4:
         de:6e:0d:f9:34:1e:d7:90:2a:5c:a5:04:6a:a3:5e:e9:66:a1:
         72:65:ec:ef:a0:13:70:bf:2a:dd:b9:4b:af:64:56:52:e8:65:
         ca:07:6c:e3:9f:8d:0e:eb:67:10:0e:aa:b2:47:c9:f5:e1:f1:
         1b:b5:ca:fa:ac:11:0c:4b:f4:6b:88:a7:06:25:86:a7:48:e3:
         e9:20:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:56 2025 by rpki-client