Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          d47zhMT47qG3c/rW7YkKA9CC+GBbIwGY2LBat94Zr4s=
Subject key identifier:   A9:36:5A:79:CC:44:94:F1:30:92:4B:71:2D:DC:11:CD:D9:80:AC:5B
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       0198808B629517C7CA2D5105EF437914EC9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          0A9E
Signing time:             Wed 06 Aug 2025 18:01:15 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:15 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:15 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: 2usGNsp0w2O98NsoQcuYPABWnmrx+8lF6IPo41in9DU=)
                          2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:62:95:17:c7:ca:2d:51:05:ef:43:79:14:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Aug  6 18:01:15 2025 GMT
            Not After : Aug  7 18:01:15 2025 GMT
        Subject: CN=a9365a79cc4494f130924b712ddc11cdd980ac5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:16:d3:e2:3e:51:db:b4:f7:28:33:d3:37:
                    ea:11:7b:b7:8e:01:6d:47:a8:86:bb:a3:4a:c1:72:
                    78:74:4b:05:a7:8a:08:39:dd:b2:9d:cd:51:53:d5:
                    fb:d6:8c:91:ec:77:66:ac:1d:54:56:26:d1:3e:a5:
                    ea:7d:8e:83:07:a8:1b:f3:5c:93:6e:15:ba:9f:1c:
                    70:ca:36:01:72:34:61:b4:c0:35:db:8d:af:4b:32:
                    5c:b5:a3:76:86:67:a1:d5:7e:c0:d5:12:90:e7:a1:
                    45:2f:c0:b3:a7:c8:d7:fb:97:1a:83:fd:15:04:29:
                    80:14:23:d6:2c:4d:e9:4f:cf:ae:c4:3d:35:45:0d:
                    9c:49:b0:86:05:47:0d:ad:18:db:28:15:57:ad:58:
                    b8:8f:9d:ec:cc:b0:95:78:4d:22:8d:74:e5:9c:70:
                    ee:5c:b4:3e:cc:c5:71:6d:f1:d6:7d:68:4b:d6:eb:
                    c2:05:e9:58:4e:11:62:65:0a:78:dd:80:f2:c5:ed:
                    63:ee:97:70:23:0c:58:15:b4:07:42:61:a3:9b:39:
                    76:52:08:33:16:e9:e1:1d:0e:2a:37:49:dc:f1:ee:
                    ab:0a:43:b8:a4:8c:48:d5:e2:b8:67:3b:08:10:21:
                    3b:f7:b2:ed:36:68:ac:c9:f1:16:34:e1:b9:82:30:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:36:5A:79:CC:44:94:F1:30:92:4B:71:2D:DC:11:CD:D9:80:AC:5B
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:52:41:7b:34:c6:79:84:4e:f8:60:9d:a2:46:6e:cb:c7:
         f6:a8:4a:68:74:62:dc:41:69:37:f0:47:5d:fc:d2:0c:7c:ed:
         91:0a:a9:54:4c:43:b3:0b:53:94:df:01:46:3f:af:92:fc:43:
         86:f7:fe:cf:c9:bc:ce:4b:ee:24:34:bb:49:e5:d3:ce:58:32:
         b2:25:03:9e:13:3d:cf:8c:96:df:e1:7b:d4:d8:58:73:f4:f0:
         22:13:70:3a:fe:2f:3e:fc:90:e9:63:82:65:cb:b5:b7:2b:e9:
         fc:9c:4e:2f:83:21:34:b3:7c:a9:92:45:68:51:29:e2:a4:91:
         c2:ef:70:4a:e6:07:93:74:ea:ef:6f:f5:d8:ef:86:1e:20:91:
         2f:2a:cb:08:fc:23:d2:8d:eb:1f:3d:c6:5e:0f:ea:44:29:d0:
         8a:90:c4:32:18:af:2f:f5:17:86:be:39:85:ed:5f:38:08:43:
         d3:2f:66:87:05:ac:47:d8:05:0b:ca:b0:74:89:8c:36:91:2d:
         8e:8e:b2:95:78:c5:2d:63:e1:a1:36:0a:57:05:24:cf:74:f5:
         45:ed:1f:06:ca:22:50:3b:fb:f5:b5:35:b8:63:90:a6:0c:9b:
         9a:e3:c5:99:4b:b0:0b:df:79:7c:cd:dd:be:c1:29:8b:37:96:
         10:76:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:25 2025 by rpki-client