Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File:                     3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier:          IkxCJQZr1uEvmpX2gweYveF8CHY7aJqFVhmaL2INk78=
Subject key identifier:   DE:38:EC:6C:F2:67:E3:1D:6A:5D:20:94:08:AD:E8:CC:2C:B1:84:4A
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer:       /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial:       01987E9CBE7A6BFCC0F224CFDD0207D19FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number:          0F5D
Signing time:             Wed 06 Aug 2025 09:00:58 +0000
Manifest this update:     Wed 06 Aug 2025 09:00:58 +0000
Manifest next update:     Thu 07 Aug 2025 09:00:58 +0000
Files and hashes:         1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: 034dq4wS+NWPBICOoNAgX3GdWm2+NJHt6MhEcQT7z98=)
                          2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:be:7a:6b:fc:c0:f2:24:cf:dd:02:07:d1:9f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
        Validity
            Not Before: Aug  6 09:00:58 2025 GMT
            Not After : Aug  7 09:00:58 2025 GMT
        Subject: CN=de38ec6cf267e31d6a5d209408ade8cc2cb1844a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:19:21:6c:14:25:65:6e:b3:0e:32:70:f6:
                    84:28:1d:8b:77:33:26:47:7a:05:09:3e:70:2b:76:
                    29:d4:f2:cf:f4:05:fc:f7:95:4b:39:5f:48:06:84:
                    2e:2d:49:54:b5:e8:a8:0c:4c:b4:28:76:07:7b:c1:
                    f3:f0:e2:d8:74:7c:48:75:ea:1b:00:9c:8f:92:f4:
                    51:3f:f3:4c:5f:b0:f6:0c:4a:60:6d:78:e3:62:eb:
                    56:0e:4e:9e:16:67:99:41:6d:46:1d:d7:4e:7d:93:
                    26:b0:a2:d5:38:b9:d2:23:cf:46:a7:b4:a7:35:ef:
                    f8:d9:3e:d0:d4:ae:72:48:a3:2d:82:cb:8d:bd:7e:
                    02:e1:ed:08:1e:79:a7:a8:bd:da:b6:1a:84:51:89:
                    68:1c:a3:05:30:61:9e:47:8d:9c:83:6f:84:60:da:
                    f7:06:41:1b:be:02:dd:62:a6:fe:f5:b5:f8:11:84:
                    31:2f:de:06:73:f9:f6:a6:a8:0f:76:04:fd:6b:e4:
                    b4:2f:f8:d9:ba:f6:69:69:e3:ab:7c:c8:02:b9:c0:
                    47:b9:72:65:99:d5:e7:2a:c0:04:3b:15:2a:7f:52:
                    af:a9:36:62:cc:63:fc:fd:94:0e:74:5d:28:0d:b8:
                    a4:0a:34:ca:b1:09:59:3d:ff:77:ff:64:3f:26:e1:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:38:EC:6C:F2:67:E3:1D:6A:5D:20:94:08:AD:E8:CC:2C:B1:84:4A
            X509v3 Authority Key Identifier:
                keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5e:33:56:c8:24:44:fe:9d:b7:24:2e:21:97:b6:7f:e9:4b:
         9c:7e:57:a6:d8:81:34:5d:57:b9:de:4d:fd:9d:4f:91:39:de:
         84:5e:bb:03:15:06:97:d4:a3:ad:82:06:35:26:b0:bf:46:7e:
         27:75:ef:33:f2:37:03:ec:80:f7:f7:66:5b:03:11:c0:6c:5e:
         74:c3:63:ef:28:16:04:41:e6:08:f0:b2:ea:00:e2:03:7e:db:
         70:f2:72:ab:2f:ef:27:b5:d1:10:be:df:65:7c:e6:67:96:c2:
         bd:e1:4f:58:dc:60:e6:c5:30:06:d2:b1:54:ef:08:8c:b9:98:
         2a:31:26:2b:4b:d4:69:c1:5f:3e:cd:16:65:c2:df:51:ed:81:
         a9:7f:2c:db:0c:8f:f7:39:07:07:b8:27:e8:b3:ab:96:81:38:
         5e:75:c0:ae:d7:20:50:ee:36:82:31:42:80:4f:be:08:15:f2:
         e1:8b:eb:7e:04:15:5d:5b:06:97:a9:5e:08:90:d2:2b:1c:3e:
         1e:96:35:6e:ad:ed:ec:18:68:80:34:b1:d6:b1:d8:0e:ae:bf:
         71:d0:32:78:31:73:68:e2:9e:71:04:dd:18:35:22:cb:01:ba:
         9c:c8:1f:5c:b1:9d:b6:dc:ac:ef:89:5e:9e:96:9a:11:99:57:
         06:cd:cf:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nL56a/zA8iTP3QIH0Z+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj
NTczMmEwHhcNMjUwODA2MDkwMDU4WhcNMjUwODA3MDkwMDU4WjAzMTEwLwYDVQQD
EyhkZTM4ZWM2Y2YyNjdlMzFkNmE1ZDIwOTQwOGFkZThjYzJjYjE4NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMYZIWwUJWVusw4ycPaEKB2LdzMm
R3oFCT5wK3Yp1PLP9AX895VLOV9IBoQuLUlUteioDEy0KHYHe8Hz8OLYdHxIdeob
AJyPkvRRP/NMX7D2DEpgbXjjYutWDk6eFmeZQW1GHddOfZMmsKLVOLnSI89Gp7Sn
Ne/42T7Q1K5ySKMtgsuNvX4C4e0IHnmnqL3athqEUYloHKMFMGGeR42cg2+EYNr3
BkEbvgLdYqb+9bX4EYQxL94Gc/n2pqgPdgT9a+S0L/jZuvZpaeOrfMgCucBHuXJl
mdXnKsAEOxUqf1KvqTZizGP8/ZQOdF0oDbikCjTKsQlZPf93/2Q/JuF+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN447GzyZ+Mdal0glAit6MwssYRKMB8GA1UdIwQY
MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt
M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5
LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZl4zVsgk
RP6dtyQuIZe2f+lLnH5XptiBNF1Xud5N/Z1PkTnehF67AxUGl9SjrYIGNSawv0Z+
J3XvM/I3A+yA9/dmWwMRwGxedMNj7ygWBEHmCPCy6gDiA37bcPJyqy/vJ7XREL7f
ZXzmZ5bCveFPWNxg5sUwBtKxVO8IjLmYKjEmK0vUacFfPs0WZcLfUe2BqX8s2wyP
9zkHB7gn6LOrloE4XnXArtcgUO42gjFCgE++CBXy4YvrfgQVXVsGl6leCJDSKxw+
HpY1bq3t7BhogDSx1rHYDq6/cdAyeDFzaOKecQTdGDUiywG6nMgfXLGdttys74le
npaaEZlXBs3PhA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 19:37:52 2025 by rpki-client