Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File:                     3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier:          GvBZw/L3FmA3K88bCsuecTQ48f5vSdJob6G95FFVYyY=
Subject key identifier:   A1:5E:2B:99:D3:A2:EB:DD:82:FD:1D:3F:58:CE:BF:F5:F1:D2:D8:54
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer:       /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial:       0198816849A6600FB31D7C0C5C92F8FAABA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number:          0B2B
Signing time:             Wed 06 Aug 2025 22:02:32 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:32 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:32 +0000
Files and hashes:         1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: nt2xlLcD/G2JNo5yNW83FyjggrAKIOT4LklQ8Z0hp9Q=)
                          2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:49:a6:60:0f:b3:1d:7c:0c:5c:92:f8:fa:ab:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
        Validity
            Not Before: Aug  6 22:02:32 2025 GMT
            Not After : Aug  7 22:02:32 2025 GMT
        Subject: CN=a15e2b99d3a2ebdd82fd1d3f58cebff5f1d2d854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:85:c6:6b:72:4d:e6:66:08:84:eb:de:ab:
                    79:1a:47:a1:f2:41:b2:3b:c1:c5:b3:ca:0a:79:85:
                    24:91:00:9f:87:82:31:5e:0e:e3:87:ba:42:51:4d:
                    aa:0e:63:17:f5:b1:d0:56:f0:3f:c0:62:1f:26:ef:
                    ae:64:15:9a:47:f9:0a:f7:a9:1d:d1:a8:38:49:c3:
                    62:bf:2e:d1:de:32:6d:87:d0:0d:3a:c7:b7:a9:bf:
                    55:6f:d1:23:26:aa:82:7b:db:5e:5d:d3:4a:6c:ac:
                    fb:f0:1a:95:f9:57:9e:c0:1c:d7:db:2e:5e:23:27:
                    12:53:e7:1d:33:72:98:ca:e0:89:22:1d:22:f0:35:
                    47:17:6d:4c:04:22:ce:92:5c:19:e7:f8:01:ec:11:
                    13:92:39:43:ba:a9:b5:c0:ed:78:c7:30:82:63:46:
                    2d:83:f4:e0:f1:71:a4:ee:8d:b0:9e:ae:56:8b:75:
                    94:c2:97:ce:d7:7a:10:ae:65:8b:98:e5:fe:98:d1:
                    1b:ef:87:19:ab:27:44:b6:22:24:93:67:08:77:79:
                    fa:cf:94:af:02:70:94:da:f9:de:62:17:0e:75:f6:
                    eb:52:a8:5e:58:a3:11:de:28:ef:18:d7:ab:59:31:
                    36:33:26:ca:d7:ae:59:2a:08:86:12:51:e6:29:89:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5E:2B:99:D3:A2:EB:DD:82:FD:1D:3F:58:CE:BF:F5:F1:D2:D8:54
            X509v3 Authority Key Identifier:
                keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:02:07:b5:1d:99:f6:08:9e:2a:d4:a6:c8:a7:c4:5b:9b:
         0c:0e:35:f4:87:eb:15:06:89:f6:c4:4a:4a:b7:7e:1b:5b:9f:
         39:e6:76:4a:1b:bc:f1:1c:97:95:8e:a4:4b:c2:35:85:fe:5f:
         d3:bc:6f:4e:3b:bd:d0:84:98:50:b7:f9:39:a8:88:97:52:36:
         bc:09:73:12:52:1e:23:2f:a1:e1:c0:f1:d5:5a:4b:0d:cc:ef:
         7f:6b:c4:29:84:81:10:5e:bf:a8:2c:b7:25:db:3e:db:dc:c9:
         61:11:b1:a9:af:a8:5a:07:df:4f:0a:a2:12:89:fe:4c:1d:45:
         06:14:b3:77:d7:cc:e3:45:f9:b2:fc:e2:0b:b9:b4:74:69:09:
         d0:77:ab:81:3d:83:a5:b5:23:cd:a7:1b:9d:69:d8:aa:85:30:
         6b:06:41:cc:ce:23:73:3a:21:02:24:7e:fe:0c:56:1c:cd:d5:
         e3:55:1f:f8:7c:45:62:30:89:24:8a:e4:2d:5b:4f:aa:d8:e0:
         be:87:d8:35:22:5c:05:fa:85:75:43:7e:00:15:20:ee:af:b6:
         86:63:a0:37:2a:18:58:df:50:57:1e:1e:21:79:96:16:9b:26:
         4d:fc:95:fb:8c:9f:ca:26:4c:52:d5:72:36:81:fb:f3:3c:be:
         bd:82:e0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:22 2025 by rpki-client