Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File:                     3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier:          eLUwvJFntypWhg1VuuKQSOHrF7TdZRhUXRQy59wBfXw=
Subject key identifier:   18:C1:84:BA:F4:BA:78:74:4D:08:41:22:A6:F1:0D:A8:F0:37:B8:9E
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer:       /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial:       01988DD9428A85CCF2413A9D3780CA9C563A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 08:01:22 +0000
Manifest this update:     Sat 09 Aug 2025 08:01:22 +0000
Manifest next update:     Sun 10 Aug 2025 08:01:22 +0000
Files and hashes:         1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: O4d435CJOCNtJIKRJB2CbTp+pyKFgpCw+oZxCo80lNI=)
                          2: E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa (hash: SlY4rIEahH8X3kEcUUwCddcbIz7/S16cK2GTdrw1N+Y=)
                          3: EpMLaYChUvPW43eW66M41o2KSpc.roa (hash: PU2MBAWGAP6VAtPvAGor5W80iPyTDbgTBn9WAJahQLs=)
                          4: w0PKwUFljbRq5uVzYVthjHLkXQY.roa (hash: 6g4grLiYtJiUu1m03msVb0si+AZ8cTE6ZMD8wFTtcLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:d9:42:8a:85:cc:f2:41:3a:9d:37:80:ca:9c:56:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
        Validity
            Not Before: Aug  9 08:01:22 2025 GMT
            Not After : Aug 10 08:01:22 2025 GMT
        Subject: CN=18c184baf4ba78744d084122a6f10da8f037b89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:9b:72:99:48:7d:88:c7:14:90:12:38:3c:
                    05:aa:4e:2e:80:90:b9:c2:4f:3e:64:34:f1:b3:38:
                    8b:5b:1f:05:47:90:b6:cf:42:21:7a:3d:da:3a:6b:
                    6e:08:91:5e:b2:47:a4:a6:44:39:22:18:ed:a6:18:
                    a0:60:b3:42:d1:09:a9:c2:3f:7a:89:ed:fc:83:fc:
                    c6:6b:ae:35:98:c8:1b:00:cd:70:48:51:18:f8:bd:
                    6d:64:34:90:82:83:02:6d:50:3a:3b:8d:40:d9:1d:
                    2f:20:f9:f5:a8:e4:ae:05:9c:65:99:a6:89:4c:d8:
                    86:35:9c:0b:46:14:b5:67:c0:e4:1b:69:c7:cd:3d:
                    ee:1b:8f:7c:41:60:d5:97:f6:9a:e3:01:be:15:80:
                    f5:2d:30:29:72:a2:74:3b:13:fe:17:4b:8b:86:7b:
                    16:bc:1e:00:c1:4c:e9:0c:56:1a:5c:58:c3:12:ca:
                    dc:83:3c:6a:7a:d3:7f:26:fd:fc:bb:7e:e5:86:ae:
                    cc:d2:77:1d:14:39:ea:6c:d2:ac:db:bc:c9:01:f5:
                    13:1d:21:4b:07:45:18:30:45:c9:cf:05:2a:30:a2:
                    41:c5:02:f4:33:03:fd:f9:60:41:4d:af:af:2c:e2:
                    d0:f0:fd:cc:94:20:fe:3b:24:eb:d6:38:2a:49:f3:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:84:BA:F4:BA:78:74:4D:08:41:22:A6:F1:0D:A8:F0:37:B8:9E
            X509v3 Authority Key Identifier:
                keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:37:65:ce:89:6c:fc:b4:8a:35:f6:84:66:e6:93:18:47:1f:
         68:9e:88:ec:97:b1:f3:57:24:2c:21:5b:c0:55:28:8a:3b:c0:
         f2:69:ef:f1:87:02:5d:f5:3f:2d:82:17:5e:dc:88:30:90:48:
         7a:e1:cb:c3:21:2d:f2:f7:42:2c:b9:c5:2a:2a:4f:3f:bf:2e:
         5c:83:e0:4b:1d:b7:cc:df:89:ee:53:30:47:7b:d6:69:24:b5:
         1c:a5:4b:23:f6:c8:49:cd:9b:55:e3:75:46:60:bb:62:5f:0d:
         85:66:02:ce:01:51:23:60:08:16:6e:0b:02:bb:8c:73:ed:2e:
         02:d6:c9:0b:c3:af:ea:32:11:bf:bd:dd:94:af:a7:ff:96:80:
         4d:24:a0:bb:be:03:f8:9c:3e:1c:69:77:0b:b3:9b:e2:49:08:
         f3:47:67:27:ac:79:63:ba:d8:0b:80:86:07:fc:4b:fd:a6:03:
         c2:66:5b:8e:bc:be:34:76:f3:fd:c6:df:3b:e5:f4:f3:c7:8d:
         fc:9d:67:ce:18:02:24:f1:99:58:05:4e:13:ec:f4:23:0c:41:
         a5:24:92:cf:77:de:b5:50:1a:2f:2d:0e:9f:3f:ef:2e:c7:a6:
         0d:5e:9b:7a:c9:2c:c3:bc:7a:f9:a0:7e:e9:04:71:36:5c:db:
         8d:a6:d2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:37 2025 by rpki-client