Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File:                     3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier:          gMoeKmyd/NzCFLJuzfS1TiX8C/0JrpWJlxCJID+XkGY=
Subject key identifier:   10:1A:72:67:32:0D:8F:37:37:2A:14:B8:39:E6:D9:9A:81:83:24:69
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer:       /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial:       019892C8661F7DEEA80FCD2E49C2D561172F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number:          0D42
Signing time:             Sun 10 Aug 2025 07:01:03 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:03 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:03 +0000
Files and hashes:         1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: yzR5042+C64ikjvAprDqeh4emhXMcW+W5IjSTcMuCI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:66:1f:7d:ee:a8:0f:cd:2e:49:c2:d5:61:17:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
        Validity
            Not Before: Aug 10 07:01:03 2025 GMT
            Not After : Aug 11 07:01:03 2025 GMT
        Subject: CN=101a7267320d8f37372a14b839e6d99a81832469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:ab:2b:ff:11:92:4b:3c:82:b2:b1:94:cf:
                    d4:fa:ef:b6:fa:89:be:fe:aa:ca:7b:4d:75:00:cb:
                    2c:71:ba:bd:31:8c:a3:5c:be:0e:61:2f:a2:c2:22:
                    10:ee:30:a4:88:3d:bc:9a:22:b8:e6:19:51:36:d3:
                    92:cb:61:77:ed:47:2d:47:d0:d7:27:6b:2b:fd:b5:
                    2c:05:42:0c:cc:69:0e:d7:49:fe:be:56:97:06:1a:
                    a5:e3:a1:34:51:d6:b5:ed:ca:50:7e:68:0b:4c:86:
                    fa:1c:8f:5d:97:91:95:0a:e1:5c:87:b0:a3:67:8d:
                    01:87:4b:5f:6a:2e:1c:a5:e8:a7:e3:27:f0:4a:b9:
                    94:2e:aa:e3:38:cb:d9:0f:2c:1e:dc:8c:99:15:d2:
                    41:02:2b:ff:90:fc:5b:b1:8f:43:05:f9:f9:9e:ae:
                    f6:70:e3:48:24:42:27:9e:47:ec:23:15:c5:e2:fa:
                    70:97:53:be:51:c3:dd:19:4b:75:d7:0c:5f:1d:d2:
                    c6:79:16:54:63:95:c1:31:f3:48:83:aa:ab:3c:e3:
                    8a:f8:8c:11:e4:ae:f7:1d:54:ca:89:ed:a5:46:ea:
                    8e:fa:68:ee:7f:d2:e8:c6:0d:3b:7f:37:20:0c:89:
                    7f:1c:61:49:c5:82:0e:c0:0e:9d:cc:9f:90:25:18:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1A:72:67:32:0D:8F:37:37:2A:14:B8:39:E6:D9:9A:81:83:24:69
            X509v3 Authority Key Identifier:
                keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e7:74:82:19:af:9a:b2:67:8d:69:ee:0d:7d:fb:f8:fa:8d:
         2a:7d:a5:44:9e:72:3a:67:b5:21:6a:5e:a0:4e:9f:b2:5b:68:
         9a:25:60:03:7f:26:13:b9:b2:83:7e:e8:0e:f6:cc:56:e8:34:
         5d:a2:f0:0e:ca:42:10:c7:86:38:4a:8f:d2:8f:63:46:4e:49:
         02:76:91:4a:d6:48:24:f7:f5:c3:98:b1:a6:18:82:62:e8:49:
         c9:0c:c8:93:f3:55:93:ee:da:72:68:c3:fb:7b:5a:8c:ec:65:
         a2:44:9c:e2:0e:4c:ac:c4:a1:27:f6:0c:84:b5:18:85:c8:11:
         56:af:df:d4:69:d9:90:f0:e1:84:0d:5a:6c:15:70:02:38:5c:
         07:b6:6a:04:aa:a1:bb:ae:0d:3c:68:8e:cc:e0:29:cc:63:39:
         c5:87:32:6c:eb:f0:d9:05:b0:6e:09:40:d9:ed:9e:3b:11:ce:
         36:50:13:a4:b5:ec:45:e4:97:1c:61:ab:bc:74:af:ee:5e:85:
         22:be:dc:73:47:ae:ab:84:4e:a6:b4:99:9b:b4:a3:c8:57:9b:
         cb:3d:7f:fd:85:f0:71:e8:fa:9f:99:e9:e4:9f:ed:89:10:d4:
         f4:d3:71:9d:0f:0b:03:35:7c:24:c8:9c:2d:d0:80:71:bc:74:
         8f:57:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:20 2025 by rpki-client