Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File:                     b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier:          oQ/nPCdsM3BYIYAxxBCEzQ1+5qscI0VjTiceNzRxd94=
Subject key identifier:   17:AD:0C:71:AB:7F:B9:68:29:87:8C:B3:51:E2:BD:BE:90:FA:EA:44
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer:       /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial:       01987CADFD6C1A57F096D7D33D23123D3AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number:          0D11
Signing time:             Wed 06 Aug 2025 00:00:33 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:33 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:33 +0000
Files and hashes:         1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
                          2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: wJZPWXDE+UZBiMMQQGzgyf+hFpuwooFDWYxrFfWaZdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ad:fd:6c:1a:57:f0:96:d7:d3:3d:23:12:3d:3a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
        Validity
            Not Before: Aug  6 00:00:33 2025 GMT
            Not After : Aug  7 00:00:33 2025 GMT
        Subject: CN=17ad0c71ab7fb96829878cb351e2bdbe90faea44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:6d:44:06:97:bb:95:8b:27:7a:75:d6:08:
                    2d:f7:0b:84:c1:72:89:42:8a:fe:b9:2d:07:0d:f4:
                    c9:8d:2e:60:61:4c:35:62:c2:1a:28:18:2b:2c:76:
                    b5:cb:c0:a3:c1:3c:fd:4a:66:5e:5a:96:49:f1:ac:
                    24:b7:bb:0e:cf:24:b6:39:e9:b6:bc:56:05:3a:3b:
                    3e:17:7b:d4:02:94:d6:d4:e7:ea:58:e9:04:57:f0:
                    01:ec:30:72:7d:c2:70:fc:6d:42:40:7e:a3:a1:e3:
                    3e:db:9c:f4:79:97:0c:68:e0:c4:06:43:4e:17:ea:
                    21:9b:fa:87:14:c6:f1:a3:a8:ea:c3:fd:ef:ba:c8:
                    d1:c4:57:b8:8c:65:f7:5a:ed:09:fc:73:53:b9:ba:
                    e3:90:1d:66:ab:8b:21:63:d7:94:b3:49:b3:11:82:
                    62:45:24:75:96:5d:ea:85:bb:ae:d8:23:e2:61:f6:
                    ba:72:e7:18:d2:44:dc:51:19:d7:a3:2f:f4:6d:ba:
                    50:41:02:b6:67:aa:a5:18:51:17:98:fb:60:0b:d4:
                    81:a6:a7:6c:a5:b9:e6:1c:b2:bc:d0:af:50:7b:03:
                    e8:0b:c1:69:34:d1:41:a8:3f:f5:bf:c6:7d:45:b9:
                    53:6f:ed:11:0c:9b:f6:22:20:20:9f:ef:3b:1d:66:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:0C:71:AB:7F:B9:68:29:87:8C:B3:51:E2:BD:BE:90:FA:EA:44
            X509v3 Authority Key Identifier:
                keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a5:c1:1e:29:f6:e4:04:79:56:38:cb:fb:b5:c0:5c:e9:21:
         9f:06:43:e2:af:24:8c:ac:45:82:f3:38:f1:26:4b:71:aa:0e:
         46:83:ed:ee:1a:24:60:72:e5:58:94:2e:6c:3d:3e:20:8b:92:
         4c:b8:7f:a8:68:6b:15:68:4d:09:3b:0d:de:45:85:30:10:e6:
         dc:4d:6b:41:6e:fa:c4:a7:06:de:fe:2e:d7:d4:c2:de:3e:41:
         ae:3b:44:ff:f1:3a:4d:2b:a6:c2:94:10:70:e6:e0:9b:e2:cf:
         4c:9c:94:35:88:9a:55:09:42:b7:44:b8:82:bc:41:eb:7f:ba:
         a7:71:dc:2f:59:f5:13:c9:d0:9d:ff:a1:3c:85:1e:33:40:21:
         28:75:80:50:87:05:3e:f4:fa:9a:5e:44:ea:0a:ba:ce:28:21:
         a7:65:0a:65:db:e9:b6:da:96:68:3e:82:64:96:23:0c:1e:d1:
         27:77:f4:9b:81:b2:df:20:ac:12:21:2b:e3:f4:29:0f:eb:d5:
         23:83:83:e9:55:0c:eb:87:cb:c1:13:f8:e1:57:3c:18:4d:93:
         d3:0b:db:e5:f2:c9:16:d3:c7:1e:f0:b1:17:ef:6a:5f:33:1b:
         95:9a:f4:91:24:19:89:02:62:83:ed:4d:4c:d5:b6:06:da:ea:
         a1:8f:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:52 2025 by rpki-client