Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File:                     3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier:          /dF39+PycDSCdZbEm5XcaHtAmITw6exiMR+tLC3x1bo=
Subject key identifier:   62:5D:30:65:E7:A3:64:15:AC:8D:A7:59:50:D3:95:8E:61:70:A8:DC
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer:       /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial:       019880C221933379AC10596107580C4C219E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number:          10B9
Signing time:             Wed 06 Aug 2025 19:01:02 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:02 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:02 +0000
Files and hashes:         1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: ssIlder3VyMuqZBC3B5hLaMLaK/4AuK1P3AbBrE1gQQ=)
                          2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:21:93:33:79:ac:10:59:61:07:58:0c:4c:21:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
        Validity
            Not Before: Aug  6 19:01:02 2025 GMT
            Not After : Aug  7 19:01:02 2025 GMT
        Subject: CN=625d3065e7a36415ac8da75950d3958e6170a8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:ec:54:fb:39:62:40:13:ad:c3:3e:21:ae:
                    24:93:69:3f:0d:3a:73:6d:81:0f:8b:d5:a5:d7:48:
                    ed:54:a6:cb:bc:07:be:54:5f:58:88:d8:9a:89:20:
                    0d:9b:8e:c6:23:bf:62:a6:fd:41:b1:25:58:58:e1:
                    25:0d:37:8c:e6:62:6c:59:03:ae:69:d5:95:f2:c9:
                    a5:d6:14:e2:b7:22:9a:10:b8:00:e4:e1:12:d6:fa:
                    31:0f:12:84:bd:6c:a7:f8:7d:2d:dc:b2:46:ec:11:
                    e5:ec:20:d9:b8:a3:30:5f:dc:58:96:ac:75:69:68:
                    81:bb:a5:45:54:ff:3d:64:10:25:d0:c4:bd:fe:db:
                    a0:d2:0b:1e:f6:b3:5d:f3:fa:e0:e0:d3:e4:e0:10:
                    2b:e5:e4:68:aa:f0:d9:ac:d1:15:ed:ad:d3:c0:37:
                    24:f0:2b:a6:de:0f:9b:aa:19:37:af:bc:5d:80:3f:
                    2b:6f:0e:ba:0d:a2:b8:17:6a:31:31:99:48:48:b4:
                    40:b1:27:4e:71:13:44:af:44:4e:58:8e:27:cb:bc:
                    7c:91:a3:92:ad:14:ab:6f:33:74:b4:d5:6f:b3:25:
                    19:8b:b4:64:6a:d4:c4:76:64:1a:69:41:91:8c:0c:
                    69:bd:af:f6:61:f7:a5:0d:f9:6b:4a:87:89:1c:6d:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:30:65:E7:A3:64:15:AC:8D:A7:59:50:D3:95:8E:61:70:A8:DC
            X509v3 Authority Key Identifier:
                keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:23:f3:a1:14:7d:88:69:23:90:ab:6e:bf:49:50:b2:b6:
         08:6b:a2:d1:23:29:b6:d6:1b:3b:0d:96:72:bf:07:99:e3:70:
         e5:86:25:f4:bc:73:88:ac:9c:66:e9:61:48:a6:ec:f5:43:71:
         48:e7:47:b0:0d:aa:77:06:5e:77:ed:81:2e:f3:e4:fe:d0:71:
         82:19:1d:19:2f:ed:49:73:ce:2c:8c:f5:0e:40:80:ef:f4:cb:
         af:97:e1:9f:9b:61:c3:c0:6b:e2:ac:f2:56:24:60:94:aa:82:
         4a:27:ae:c4:0a:05:a7:9d:a1:9a:50:79:7f:7c:da:8c:26:9e:
         cb:04:bc:02:a5:39:a8:05:75:6b:ce:73:bc:bf:4b:5b:eb:37:
         94:c3:5d:e3:fe:bb:68:f8:bb:e2:7f:12:95:a2:4c:11:7b:f5:
         4a:04:e6:b7:b5:25:a5:59:65:48:fa:7e:96:c8:f3:05:a7:4a:
         b9:4d:b3:2c:fd:3e:84:8e:2c:a8:ac:a3:49:8a:af:11:0b:6e:
         6f:2a:a2:b5:00:c1:01:c2:5f:72:70:9c:12:21:e4:ce:a2:a9:
         74:0f:32:0f:2e:3c:63:a4:40:6d:73:3f:9b:2e:b7:1b:96:d6:
         ec:d6:f4:eb:43:b6:e4:91:69:bf:34:0b:5f:9b:ba:70:f3:b9:
         41:22:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:34 2025 by rpki-client