Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File:                     3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier:          iPZhujdeGoNvrGGJVF/bc53D8VEuYRlkUvfYxAafkgE=
Subject key identifier:   0D:BF:5E:27:E3:11:BE:AA:B5:76:51:39:7E:F9:AF:63:24:A3:D5:39
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer:       /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial:       01987F79C8F5B2225D9879AC7C0ABF9E2BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number:          09A1
Signing time:             Wed 06 Aug 2025 13:02:24 +0000
Manifest this update:     Wed 06 Aug 2025 13:02:24 +0000
Manifest next update:     Thu 07 Aug 2025 13:02:24 +0000
Files and hashes:         1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: +CDP43yae4QMzabV3x9Ndip8jy6295C+lZ+CEgQVslk=)
                          2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=)
                          3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:79:c8:f5:b2:22:5d:98:79:ac:7c:0a:bf:9e:2b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
        Validity
            Not Before: Aug  6 13:02:24 2025 GMT
            Not After : Aug  7 13:02:24 2025 GMT
        Subject: CN=0dbf5e27e311beaab57651397ef9af6324a3d539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:29:cb:0e:91:a3:59:fd:20:ce:6c:42:20:
                    65:5b:60:d1:6d:c1:62:57:7a:da:91:10:91:41:3b:
                    d5:d0:0d:8e:f1:c1:55:46:8a:10:85:43:8f:58:01:
                    89:12:66:bd:36:95:a5:94:9c:51:3a:03:a7:4c:f3:
                    19:e9:39:81:85:0f:04:e1:26:1a:a5:ac:f6:44:b5:
                    8f:f2:60:fe:3f:6b:10:87:cc:7f:b6:fe:3f:5b:09:
                    d5:42:08:b1:b7:e2:db:d7:99:54:8f:11:b9:36:4e:
                    67:7e:40:94:13:d6:f3:c0:94:7b:d9:22:4f:03:b9:
                    f7:de:19:2e:dd:ca:db:88:eb:e7:c2:48:58:7e:66:
                    c6:4b:3e:6d:92:6d:55:07:19:15:ef:7c:1e:ad:95:
                    8d:1d:5e:60:fc:77:fe:bf:05:eb:7f:82:69:15:b4:
                    b3:64:40:21:d5:dd:bf:04:68:3b:ff:58:40:86:4d:
                    a1:5c:c3:c2:64:6a:c7:19:53:00:c8:90:cf:e4:37:
                    da:fe:bf:ad:ed:1c:31:65:b0:17:8c:c9:7f:3e:0a:
                    a5:cb:b3:45:a9:78:3d:2f:ea:77:a7:cf:6a:6d:fd:
                    37:64:b4:90:cb:86:05:1a:37:e9:99:67:de:9d:69:
                    5b:ec:64:9f:f0:8e:b1:93:be:11:73:8d:7f:1e:c8:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BF:5E:27:E3:11:BE:AA:B5:76:51:39:7E:F9:AF:63:24:A3:D5:39
            X509v3 Authority Key Identifier:
                keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:44:0c:1e:2a:44:84:33:ea:c0:f9:13:aa:9e:29:76:df:9f:
         e7:83:2d:d9:05:f4:f1:ce:56:35:ae:9d:65:5c:9d:e0:0d:b3:
         97:18:21:ce:56:51:31:3e:1e:a1:cd:74:dd:34:22:00:6d:93:
         61:e4:a7:d3:2a:56:d4:ab:88:45:0d:01:77:2f:ab:f8:5b:74:
         c8:24:c4:47:e4:4e:43:0c:20:c3:b0:1a:51:25:8b:b1:84:9f:
         80:b6:a4:8b:16:c9:b0:6c:b4:7d:1b:1f:22:10:0c:56:99:00:
         8b:99:c1:c4:3a:67:09:bc:08:0e:70:6b:12:ce:d9:f1:86:2b:
         38:4a:9f:6b:62:63:fb:e3:a7:39:a8:77:b8:dd:45:af:82:68:
         6c:a1:ea:69:17:2c:38:a9:7d:0e:d3:07:ef:fc:3d:64:6e:bb:
         9d:1e:d5:b5:e7:3c:1e:f3:35:9c:e8:b5:7b:fd:f4:09:28:ed:
         25:0f:cb:d2:e5:d0:16:4f:93:62:a2:0b:0f:34:92:cb:e4:ba:
         03:4d:14:07:82:95:77:e4:d2:9e:8e:ed:eb:f0:45:d3:bd:c7:
         02:3c:b4:cc:f6:4d:74:a9:f0:93:f8:c8:ff:0c:c3:df:bd:60:
         19:3e:2b:fe:9e:86:ae:41:c1:bd:c8:ae:da:0d:21:4f:dd:be:
         b2:7a:0d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:31 2025 by rpki-client