Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
File:                     3dya0lC4XNOZSUZbZoGy8d8U1qM.mft (raw, json)
Hash identifier:          vny2ScMy1Klj1Rhml6y/ojhxsDYod9t0wwL4I9WBo0w=
Subject key identifier:   EB:EC:67:F6:9D:34:8F:1D:93:19:5C:CA:2A:B3:EA:6A:6C:4A:00:ED
Authority key identifier: DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
Certificate issuer:       /CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Certificate serial:       019887D713A19BF0206974B3032EB622A28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
Manifest number:          0507
Signing time:             Fri 08 Aug 2025 04:01:15 +0000
Manifest this update:     Fri 08 Aug 2025 04:01:15 +0000
Manifest next update:     Sat 09 Aug 2025 04:01:15 +0000
Files and hashes:         1: 3dya0lC4XNOZSUZbZoGy8d8U1qM.crl (hash: lhoYWQFjytsgf3h3vdsQ0rlpg2MzEjE0FBnQABReKzw=)
                          2: dA9DZPAABtlejc0G0adjQxYBv5c.roa (hash: 3UVeFl3N3ODI+QVLphkmL5y9dyL4Gw+YagDr/4SW4gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:d7:13:a1:9b:f0:20:69:74:b3:03:2e:b6:22:a2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
        Validity
            Not Before: Aug  8 04:01:15 2025 GMT
            Not After : Aug  9 04:01:15 2025 GMT
        Subject: CN=ebec67f69d348f1d93195cca2ab3ea6a6c4a00ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:2b:59:11:eb:17:a8:87:b4:f8:db:9c:fa:
                    97:4a:77:21:64:01:d4:8c:dc:66:7c:95:5a:4d:77:
                    d6:1c:d7:c9:a9:e7:cd:f3:23:64:49:7b:85:e5:54:
                    c3:84:70:03:9a:a8:4d:72:ef:f6:d5:74:4e:24:3b:
                    e6:8d:df:50:a5:73:23:8c:94:aa:af:4f:37:54:97:
                    24:dd:ec:32:1f:68:92:a0:82:68:67:ce:df:08:3f:
                    d1:43:81:25:05:31:ab:bb:62:13:76:01:48:64:fe:
                    ed:b9:3b:ca:f9:6a:30:a0:e1:db:5f:cc:57:a1:11:
                    1d:0f:25:d5:b2:5e:b2:cf:6d:a4:55:ed:65:ef:1d:
                    90:1c:14:67:1f:a8:4a:86:b6:39:06:8e:c2:59:dd:
                    7b:62:a8:60:c0:9f:0a:2a:c6:d9:e9:52:0d:05:5e:
                    bb:b6:33:cb:fa:80:2a:3b:c7:53:10:99:84:6c:66:
                    83:1b:32:bc:83:fe:ad:e6:a0:c5:bb:cb:08:4c:88:
                    36:6f:c0:9d:4d:2c:67:b3:3f:b9:e0:c8:13:95:8d:
                    5d:94:44:a3:6a:c4:61:52:a7:03:58:77:af:e6:fb:
                    82:4c:1b:05:f4:ed:67:32:ff:34:90:a6:1c:c8:1b:
                    69:64:97:75:c7:ac:8c:0a:92:31:47:92:d0:d7:34:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EC:67:F6:9D:34:8F:1D:93:19:5C:CA:2A:B3:EA:6A:6C:4A:00:ED
            X509v3 Authority Key Identifier:
                keyid:DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:14:18:fb:7f:6e:d1:f0:f0:3d:08:95:fe:33:aa:d6:55:7e:
         9a:c2:4c:3e:43:bd:31:ac:fc:d7:e8:a6:b0:3d:69:7e:1a:6f:
         af:32:e0:1d:37:f3:bc:95:63:ae:af:17:b4:11:7d:3f:74:0a:
         88:dd:99:76:6b:f6:35:57:9d:99:a1:2a:a9:82:95:57:ab:cc:
         26:eb:d8:2c:2f:a2:6b:05:b1:38:c5:56:41:9e:c0:5b:ba:a2:
         82:f8:d3:6b:7d:b6:0c:8f:4a:05:3d:65:04:59:8d:ee:01:2e:
         36:8f:2a:f1:3e:1d:5b:c8:df:57:97:c3:37:01:c2:92:e4:05:
         0c:48:2d:32:40:59:3e:59:88:62:cb:d8:dd:4d:78:c4:ae:32:
         16:a5:4b:d0:01:c1:46:18:b8:4d:85:a6:af:ea:b5:b0:8c:65:
         26:d1:2c:9d:70:d6:1c:01:11:fb:7a:37:ff:a2:18:ee:f0:96:
         1b:35:a4:78:e5:5d:03:99:fb:fd:08:f0:a2:6d:59:3f:00:a9:
         eb:fb:68:cc:bc:65:16:9e:51:c6:52:b7:26:42:eb:8e:76:1e:
         75:c6:f6:7a:3c:84:8a:a5:b5:35:46:38:8d:49:8d:5f:e2:7c:
         5b:75:26:6f:a1:ca:59:01:83:05:fb:93:cb:14:e0:cd:11:70:
         02:ce:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:35 2025 by rpki-client