Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File:                     3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier:          LKU+ynZRJY0wtmWSExBRf5dfsO3ig5t2Tmw1V9sJv0s=
Subject key identifier:   74:B9:5E:56:03:86:37:A5:4F:F8:0B:02:A5:34:83:11:95:DB:A1:8B
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer:       /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial:       019A4DAAE8D4A1F72B7C54AD91F40E6E645A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number:          0763
Signing time:             Tue 04 Nov 2025 07:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:37 +0000
Files and hashes:         1: 1tilC1_jin8srVsrV1j052DulGk.roa (hash: vyS0S5gewCJtoxpuN4POioePDrUuw5luS1kTn7wZwZE=)
                          2: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: yvDb/t5njYt9rEkVnuHyKBG/RXBS+NeXg+YF43qcER0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:e8:d4:a1:f7:2b:7c:54:ad:91:f4:0e:6e:64:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
        Validity
            Not Before: Nov  4 07:00:37 2025 GMT
            Not After : Nov  5 07:00:37 2025 GMT
        Subject: CN=74b95e56038637a54ff80b02a534831195dba18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f2:75:fc:42:77:18:3a:cf:3f:78:07:d3:95:
                    c3:43:45:13:d5:e8:70:da:79:9a:ce:82:4d:d4:b4:
                    7c:c1:f8:f5:bd:39:bb:79:2e:ea:f5:2a:a7:00:7e:
                    61:61:7e:a0:6b:9a:6f:3a:7e:3e:b2:04:de:0d:29:
                    1c:48:8c:22:d8:99:9e:27:b0:2d:2c:aa:21:ee:d7:
                    dc:15:bb:76:a0:24:c9:5f:4f:89:69:9d:87:f5:d8:
                    32:28:73:fe:94:ce:35:50:3c:a6:99:b3:36:84:06:
                    d0:05:0e:ee:b3:d7:de:98:d1:51:e6:73:61:ec:29:
                    cf:07:c7:22:2b:86:8e:01:82:5b:9d:99:ca:a5:fc:
                    49:2b:15:f2:68:8a:33:b1:03:56:fa:5f:7c:5b:a1:
                    72:f5:c0:6c:b7:d9:df:b6:12:d2:b6:99:32:ca:7c:
                    71:b8:a2:e6:c4:f5:3f:f2:69:2b:97:08:00:6c:5c:
                    e8:e9:ee:60:62:f9:1a:95:5e:8a:7d:e1:24:df:dd:
                    01:34:5d:4d:92:0a:92:ef:91:88:af:7a:14:b4:75:
                    a7:e6:9c:da:82:b5:af:c0:cb:4f:45:c0:22:a7:c2:
                    6d:6d:e5:42:a6:0a:5c:1f:cc:2e:11:fb:79:4d:72:
                    4f:7e:4e:93:2d:5d:32:11:5d:32:bc:8d:17:91:3f:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:5E:56:03:86:37:A5:4F:F8:0B:02:A5:34:83:11:95:DB:A1:8B
            X509v3 Authority Key Identifier:
                keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c1:b5:d9:12:75:71:f9:e0:ff:51:14:c4:af:55:03:e6:0a:
         7a:6e:1e:df:19:89:30:9e:f8:5d:76:b6:b6:07:a1:11:4e:c9:
         4c:0b:78:6c:54:fb:e1:74:7e:de:2b:ad:f2:d4:ac:66:2e:1f:
         e3:5e:9f:4f:85:cb:dd:9b:5a:b4:cc:54:be:ea:96:8a:ca:c5:
         bc:c8:05:06:ab:e0:77:db:33:a9:a8:a8:40:b5:97:e0:c3:d8:
         0e:ec:a4:b9:49:c6:f1:c6:e3:11:8e:06:ce:39:91:02:76:ce:
         00:5f:f0:e4:1f:16:26:f9:a6:59:19:2d:07:be:9e:95:d4:8f:
         81:43:7b:90:cb:8e:b2:b7:8f:a5:5d:80:d4:c2:3b:5e:35:d8:
         de:0b:3f:85:2a:e2:a6:da:19:a7:c4:35:30:e2:12:3c:79:98:
         63:58:d2:f5:89:6a:e3:8d:75:41:0e:14:99:16:bd:5b:40:1d:
         bc:86:9f:0c:20:f2:b5:9a:8f:14:87:02:0a:08:22:a1:50:03:
         db:dc:b4:9c:92:b4:c1:12:8f:83:06:b9:4e:95:09:4c:1f:ef:
         24:8b:d7:ff:e9:b4:a3:58:cb:17:0e:9b:b2:b2:1b:e3:1f:0c:
         2d:ba:0e:df:4a:01:ea:c5:f5:b0:36:11:6a:66:c6:f9:76:ef:
         79:85:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:26 2025 by rpki-client