Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File:                     3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier:          3UEEDxxHe8caeX0EWs7eyaem/1aMRslIUgLFlEFA7Ig=
Subject key identifier:   97:27:D8:7A:AF:5D:E7:69:AA:79:38:7B:1A:3D:61:73:98:82:DA:40
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer:       /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial:       0198748745C10819090B56564F35A1760920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number:          14CE
Signing time:             Mon 04 Aug 2025 10:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 10:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 10:01:18 +0000
Files and hashes:         1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: whGqYPFohrEUSI8yaSq2AXcN9ci/t4yOSkM5wdvr0gg=)
                          2: Wh1jH5vANwZcwldoZxeJx9Ms8Tw.roa (hash: /m2D3y0N+aO5CYT+TsC7FYKiJpOsP+DSU+ozinhXmV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:87:45:c1:08:19:09:0b:56:56:4f:35:a1:76:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
        Validity
            Not Before: Aug  4 10:01:18 2025 GMT
            Not After : Aug  5 10:01:18 2025 GMT
        Subject: CN=9727d87aaf5de769aa79387b1a3d61739882da40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:91:9d:8e:2c:84:93:2b:6f:a6:44:69:0c:
                    6e:fd:cc:47:74:5d:f6:6c:32:c0:72:81:9f:6c:a9:
                    15:18:49:1b:df:af:a3:9d:b7:92:78:88:d3:cb:fc:
                    6c:5e:fd:38:16:4c:6d:01:aa:c6:06:97:e3:56:75:
                    ce:26:e0:af:11:f9:b9:e5:fa:88:a7:cf:b0:49:d6:
                    01:34:9f:49:4f:41:53:e4:50:d9:8e:c0:db:2b:fe:
                    12:73:14:be:49:13:94:cd:92:01:2e:65:cb:aa:9e:
                    ea:48:a7:d5:5f:59:c9:0e:94:b4:78:95:b7:ba:f6:
                    80:ac:d8:8b:d0:e1:cf:30:19:77:ff:df:3d:6e:40:
                    39:d8:5f:2b:b0:1e:68:7f:ef:b3:e5:ce:ea:15:13:
                    ec:a6:04:32:60:e3:3e:25:2a:9b:8f:bf:16:c5:ea:
                    f6:ed:1a:3f:32:ae:a9:b4:f6:39:56:bf:db:48:41:
                    04:bb:42:6f:04:59:5d:59:24:77:2e:01:95:39:a5:
                    18:20:24:b1:77:f8:97:01:7e:a6:e3:9d:66:e2:71:
                    96:23:5b:36:3a:42:c9:60:0d:f2:04:74:e1:e9:b0:
                    35:4a:59:e9:24:00:65:05:7b:20:02:81:cb:1e:46:
                    60:bc:e7:1b:09:b2:56:df:eb:73:ab:b8:76:b0:d3:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:27:D8:7A:AF:5D:E7:69:AA:79:38:7B:1A:3D:61:73:98:82:DA:40
            X509v3 Authority Key Identifier:
                keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:bb:98:b5:2d:7d:41:04:b3:76:43:c7:5b:80:6d:eb:2a:c5:
         d0:51:27:2c:91:22:70:d1:55:d4:ab:30:fa:91:a3:fc:12:60:
         48:66:37:5a:4c:dc:6a:7b:f3:b3:18:7d:ed:9e:9a:90:ef:af:
         c5:ea:b2:79:a5:4e:57:f6:10:6f:76:ca:ad:3b:17:7c:10:7a:
         9c:22:d7:2f:1b:9f:9a:3d:50:c4:6d:af:a5:3c:44:c5:25:81:
         68:ca:e2:cd:b6:75:1d:47:5f:a6:eb:62:92:8a:79:49:63:53:
         0e:de:d7:14:77:50:d6:f6:3f:f5:86:fc:9d:ec:c0:a6:b3:5c:
         13:4e:de:da:3c:ed:cb:19:62:b6:76:5c:5a:a2:f4:f6:58:1c:
         a7:e3:1b:e9:21:50:5f:c8:25:41:31:b8:41:73:94:26:3c:b8:
         e5:75:f3:7a:fe:77:36:4c:69:f2:19:9a:0b:46:f1:aa:36:6b:
         ab:03:8a:c9:97:d9:c1:e7:1d:49:22:67:83:17:69:0e:22:d6:
         5a:55:b8:ed:14:92:e7:11:0c:24:65:c9:e2:05:0d:81:62:c4:
         bf:50:b2:14:76:4b:fa:4e:02:b1:6c:6d:e1:7f:97:75:64:96:
         3c:3c:c7:b8:3e:0b:38:61:76:44:a7:9f:c3:07:5c:d0:b4:e1:
         37:0f:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:01 2025 by rpki-client