Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File:                     3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier:          GMy8yUw9r2RaxPlbGsk4XjIVM8+5apoi8HxPl5lbBig=
Subject key identifier:   AF:F8:B2:06:24:11:72:F5:0F:AE:79:F3:0E:E3:2E:42:E7:E7:C5:D2
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer:       /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial:       0198733DC4328D3FAA9941F2ABB85DAB11CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number:          0D4A
Signing time:             Mon 04 Aug 2025 04:01:24 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:24 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:24 +0000
Files and hashes:         1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: iMjQnTjw5R88fmUb4rrxPo4CtA1yxcghFkSQi6dRqgI=)
                          2: 9o3lcP-4u3MnLvx0kAlBujW4rP8.roa (hash: dshKKlZMjXCloMnE9oVR3HuOAnY6dIKys+Z7e0GPVnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:c4:32:8d:3f:aa:99:41:f2:ab:b8:5d:ab:11:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
        Validity
            Not Before: Aug  4 04:01:24 2025 GMT
            Not After : Aug  5 04:01:24 2025 GMT
        Subject: CN=aff8b206241172f50fae79f30ee32e42e7e7c5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:58:44:5a:9a:69:1c:ea:f0:8f:fd:64:1e:35:
                    82:67:4d:bb:05:85:c9:fa:d8:b6:4c:b7:ae:e8:4b:
                    98:b8:cc:7f:56:86:c2:8b:14:47:5a:6c:69:65:f4:
                    d4:ca:34:fb:5c:86:b5:96:24:88:40:e5:d1:6f:a0:
                    bc:26:33:e9:fd:ca:e2:89:e8:c9:19:4d:4f:aa:5f:
                    fb:00:16:46:53:48:1a:37:0c:ae:16:0f:90:3b:93:
                    dd:6b:1c:d8:64:72:c5:18:87:5d:9b:86:d0:9d:4b:
                    f9:ea:ae:15:d4:28:db:c9:3b:45:c3:6c:02:dc:1d:
                    1d:79:55:5b:fa:b0:e6:ef:04:73:dd:24:35:df:f2:
                    ec:c5:8d:1e:be:6c:7f:f4:69:19:18:df:11:1c:7b:
                    7f:40:aa:18:68:39:48:7a:19:50:18:1e:cf:10:aa:
                    88:d5:5d:1a:f0:1b:03:82:43:cb:9f:d1:83:71:f5:
                    fe:9f:18:0f:88:6a:3e:e5:2f:5b:26:78:27:b0:bf:
                    57:db:0a:da:d6:78:9a:af:a1:19:f7:aa:3a:52:ad:
                    03:92:db:01:dc:d7:f5:4e:58:29:12:e0:30:5a:ef:
                    ae:ae:27:86:01:ba:52:3e:74:7b:4f:78:42:eb:0a:
                    f2:4a:80:9a:d5:6f:7b:15:ec:cf:11:cb:de:27:57:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F8:B2:06:24:11:72:F5:0F:AE:79:F3:0E:E3:2E:42:E7:E7:C5:D2
            X509v3 Authority Key Identifier:
                keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0b:2e:c1:8f:63:ea:01:4d:04:90:29:45:30:d5:9b:c4:36:
         57:4c:b1:85:e0:41:8f:2d:9b:91:0a:39:25:0c:8f:46:08:a7:
         e8:6b:8c:ec:f8:90:65:4f:c2:b0:2c:a3:ea:f0:92:3e:d5:67:
         f3:25:3d:88:60:6f:38:d5:8e:99:9c:a6:98:32:ef:d7:7c:d2:
         8a:ff:f2:83:5f:30:6a:af:ee:ca:59:d3:8d:78:3e:db:5f:5b:
         7a:2e:41:25:f9:1c:72:4b:b3:d4:2e:22:c1:1d:a6:f7:03:40:
         90:49:3c:aa:48:9e:81:27:36:cf:5a:b1:10:00:b8:4d:cb:a2:
         55:22:e6:20:6b:a6:0e:a5:f8:c5:c7:be:f9:48:90:27:2f:e6:
         61:41:00:34:6f:54:2f:58:d0:71:b3:31:d6:7c:14:e8:35:08:
         36:95:32:37:79:73:b1:44:46:a3:cd:24:48:93:ee:38:16:67:
         97:2d:0d:ab:18:ea:4c:52:27:5f:b2:8f:4a:b5:c1:f3:3e:2c:
         a7:bb:36:f3:dc:bd:cd:6f:a8:2d:89:1a:7e:92:77:c3:c9:48:
         1d:f4:90:39:ad:d1:6f:09:b7:8b:3a:0d:ad:ac:d4:9f:72:39:
         8b:ed:dd:e6:9d:68:c6:08:b3:fb:49:c6:08:59:27:fd:3e:3d:
         7f:17:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:22 2025 by rpki-client