Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File:                     3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier:          UeTH5S+A5EvvJGQ1lE8OypU2/JnGLLPad95sABofq3w=
Subject key identifier:   42:1A:63:BA:D3:D4:F5:53:98:28:65:55:AC:19:49:87:98:3D:2D:0F
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer:       /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial:       019893368F56601A4D4E1F88E3F73D36638A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number:          1335
Signing time:             Sun 10 Aug 2025 09:01:23 +0000
Manifest this update:     Sun 10 Aug 2025 09:01:23 +0000
Manifest next update:     Mon 11 Aug 2025 09:01:23 +0000
Files and hashes:         1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: Tv1gU/u8Z0/j/ixHuH/VPImoySbm/MM1w4X8nH1u9O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:8f:56:60:1a:4d:4e:1f:88:e3:f7:3d:36:63:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
        Validity
            Not Before: Aug 10 09:01:23 2025 GMT
            Not After : Aug 11 09:01:23 2025 GMT
        Subject: CN=421a63bad3d4f55398286555ac194987983d2d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:2d:ca:b3:a8:7e:33:fc:fc:f8:a1:51:07:
                    2b:ec:27:71:8f:da:8f:b7:2b:44:0a:73:e4:c6:41:
                    14:fe:70:76:e1:6f:c1:91:d5:48:a2:cb:8d:6a:07:
                    58:b6:29:f3:64:c8:36:fe:25:6d:f3:df:cc:86:d9:
                    dc:69:39:b2:c4:2d:a6:62:ac:5a:e5:b7:17:48:11:
                    57:2e:51:33:a3:38:62:1c:02:62:6a:3f:ee:8d:cb:
                    76:21:c8:2f:ea:32:51:d5:70:9f:23:db:c9:9d:a7:
                    85:96:90:a7:ac:10:e2:45:4f:cf:72:b2:a2:5e:2d:
                    5c:67:88:5c:4b:d3:c2:7c:9b:7b:f8:26:90:ac:8f:
                    5c:70:0d:4d:fa:f6:d0:69:83:21:5c:16:bf:a6:d6:
                    a1:f8:dc:70:a7:2b:f6:f8:1d:32:1c:76:86:2d:a3:
                    5f:33:ca:e4:28:f9:8b:2b:66:5c:04:25:04:b8:fe:
                    0c:39:93:46:62:33:1b:e0:d2:9a:1c:4e:a4:07:61:
                    f3:28:3e:a4:c9:97:e1:3f:1f:53:5d:78:5a:99:a5:
                    6c:04:2b:2a:29:65:b9:ca:ba:bc:2a:a8:7d:3d:54:
                    d6:b9:6a:2a:97:4b:fd:c9:69:fc:54:51:d1:3b:0f:
                    a7:c0:eb:55:00:93:1a:f6:d3:1b:6c:9e:ec:76:3c:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1A:63:BA:D3:D4:F5:53:98:28:65:55:AC:19:49:87:98:3D:2D:0F
            X509v3 Authority Key Identifier:
                keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:de:19:f1:f8:9e:9c:2d:c0:76:a0:e9:45:71:06:fa:16:
         22:7b:09:4e:bd:4f:0d:7b:fc:35:5d:39:a7:e1:80:b4:7d:ce:
         aa:32:58:82:34:d3:23:44:57:cd:b5:ee:54:08:71:53:26:73:
         e2:6e:df:aa:39:88:ca:de:22:b4:38:7c:8a:5e:2b:f3:9a:77:
         cf:5a:1b:95:87:9e:19:f6:30:66:da:4a:de:8e:b1:e4:22:ea:
         61:9b:38:0b:47:29:68:84:e4:ad:ff:ae:ab:54:12:92:e1:19:
         63:ba:ac:69:2a:df:6d:ad:e7:1d:cc:d0:28:3a:78:10:80:df:
         07:f9:c0:16:2f:5a:59:18:71:f1:56:5d:c2:f1:49:7c:cf:0a:
         b4:f5:ca:fa:1a:e9:a7:27:11:43:92:62:71:2d:ed:07:8a:f5:
         b9:03:67:0e:ee:0d:8b:1c:03:53:0f:2b:ea:6f:17:1e:3e:39:
         e7:3d:cb:eb:56:71:6b:57:43:8b:ef:ec:dc:d0:d7:50:20:f8:
         9f:56:68:34:a8:c4:29:49:2e:97:e2:8e:c8:81:b7:8a:e5:fd:
         f2:95:98:fc:e5:ae:2c:9a:95:99:af:e7:8c:45:ec:97:68:bd:
         6f:94:f8:9f:da:86:70:24:35:26:8c:7b:3c:d3:84:c5:db:53:
         f6:30:3e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNo9WYBpNTh+I4/c9NmOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMmYwODc1NmY1NGVjZDcyODBkMWVhY2NmODc4YWViM2Yy
OGFjNGYwHhcNMjUwODEwMDkwMTIzWhcNMjUwODExMDkwMTIzWjAzMTEwLwYDVQQD
Eyg0MjFhNjNiYWQzZDRmNTUzOTgyODY1NTVhYzE5NDk4Nzk4M2QyZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzQtyrOofjP8/PihUQcr7Cdxj9qP
tytECnPkxkEU/nB24W/BkdVIosuNagdYtinzZMg2/iVt89/MhtncaTmyxC2mYqxa
5bcXSBFXLlEzozhiHAJiaj/ujct2Icgv6jJR1XCfI9vJnaeFlpCnrBDiRU/PcrKi
Xi1cZ4hcS9PCfJt7+CaQrI9ccA1N+vbQaYMhXBa/ptah+Nxwpyv2+B0yHHaGLaNf
M8rkKPmLK2ZcBCUEuP4MOZNGYjMb4NKaHE6kB2HzKD6kyZfhPx9TXXhamaVsBCsq
KWW5yrq8Kqh9PVTWuWoql0v9yWn8VFHROw+nwOtVAJMa9tMbbJ7sdjzvAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIaY7rT1PVTmChlVawZSYeYPS0PMB8GA1UdIwQY
MBaAFNwvCHVvVOzXKA0erM+Hius/KKxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODct
Y2M2YmM5NDUzOGZhLzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODctY2M2YmM5NDUzOGZh
LzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmjeGfH4
npwtwHag6UVxBvoWInsJTr1PDXv8NV05p+GAtH3OqjJYgjTTI0RXzbXuVAhxUyZz
4m7fqjmIyt4itDh8il4r85p3z1oblYeeGfYwZtpK3o6x5CLqYZs4C0cpaITkrf+u
q1QSkuEZY7qsaSrfba3nHczQKDp4EIDfB/nAFi9aWRhx8VZdwvFJfM8KtPXK+hrp
pycRQ5JicS3tB4r1uQNnDu4NixwDUw8r6m8XHj455z3L61Zxa1dDi+/s3NDXUCD4
n1ZoNKjEKUkul+KOyIG3iuX98pWY/OWuLJqVma/njEXsl2i9b5T4n9qGcCQ1Jox7
PNOExdtT9jA+gg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:06:21 2025 by rpki-client