Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File:                     3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier:          xl78w/BGawOSnsO0or3VOHwmwVpPkO3M7mPl3vzDeNU=
Subject key identifier:   58:16:88:6C:BF:82:E1:8C:EE:75:F8:A9:28:13:25:96:EF:3B:5E:62
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       01984AAF11C71E4B8D2912FEEC41FBBC2A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number:          04B3
Signing time:             Sun 27 Jul 2025 07:00:43 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:43 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:43 +0000
Files and hashes:         1: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (hash: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=)
                          2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: QUYds1Svk9aJxDVy5x4qHB9WyPjR1XfbooniUWe4kUQ=)
                          3: 9KJRnqV0A1nt4ipJSZK-VubthM8.roa (hash: VhM4+M1JVaTvUKIcNP3pBnzsvI5WN8+zi9aZZZ7ijWQ=)
                          4: LW11wESbT2hocwdKYSbs6P71AKA.roa (hash: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=)
                          5: wGmLy9fCHGSdb1IR1hi3jtBm_nU.roa (hash: EtrSnLCCgz0LzD/1buNZsptNBEqMbZQGIw+M8iextIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:11:c7:1e:4b:8d:29:12:fe:ec:41:fb:bc:2a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Jul 27 07:00:43 2025 GMT
            Not After : Jul 28 07:00:43 2025 GMT
        Subject: CN=5816886cbf82e18cee75f8a928132596ef3b5e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:a0:b8:1d:0c:dd:ac:8f:f6:e5:e0:3a:15:
                    c3:06:14:e0:60:9f:0f:0b:ce:b3:17:cc:b8:7a:96:
                    f1:94:87:20:6e:60:de:73:fb:0b:60:f3:08:63:4f:
                    65:54:5a:ad:1d:89:0a:7e:34:12:f7:ab:6c:82:b6:
                    12:d9:31:b2:fa:03:b7:23:4e:60:f1:2d:38:5c:f4:
                    5b:e7:6e:ae:fa:85:cc:61:a9:61:c5:45:b0:2d:3b:
                    08:f9:3d:6e:2a:af:69:ea:90:71:ef:8a:7f:03:11:
                    bb:17:a8:4d:34:89:3c:c7:ee:20:5c:2b:35:9c:b8:
                    68:a6:a0:45:23:e0:d3:8c:79:75:f9:ef:64:05:32:
                    09:e2:96:3b:83:41:f3:44:a0:96:fb:a4:0f:fb:ac:
                    3e:8b:79:0e:2b:66:9c:89:08:ad:ed:6f:a2:77:65:
                    90:a0:1a:4d:7b:c5:90:2f:98:b1:51:13:fd:c8:38:
                    2b:9f:1c:8d:2a:6e:74:84:6f:71:08:3b:08:02:82:
                    f8:4f:77:15:8f:3a:4a:28:a2:1c:db:52:98:6f:04:
                    ac:5b:81:64:86:f4:3c:91:3a:bd:ae:71:38:2c:9e:
                    8a:a6:80:a4:a7:88:ac:50:7d:9b:e6:35:15:8b:74:
                    e5:d6:e8:79:60:69:1c:43:04:a9:fb:a6:6c:eb:c6:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:88:6C:BF:82:E1:8C:EE:75:F8:A9:28:13:25:96:EF:3B:5E:62
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:37:8b:ce:bb:a6:9f:b2:79:cb:63:bb:b0:4c:d6:e3:2a:02:
         72:9d:ce:c9:35:70:55:5f:d6:74:42:32:05:91:37:cf:f9:af:
         27:5c:8f:d1:ad:1b:7b:17:41:dc:7d:82:3d:18:be:9f:22:ac:
         9f:a4:27:e3:3a:26:33:65:c1:9d:34:cb:be:90:6d:17:34:6e:
         b5:11:cc:e1:68:dc:fe:79:3c:f3:0a:26:46:cd:09:fe:5f:1e:
         be:59:dd:5a:1e:29:b0:96:d9:7f:18:0b:dc:d6:6b:2a:d0:cb:
         a4:65:d8:02:03:6c:5b:2a:5e:fb:6f:36:42:c7:77:ef:ad:38:
         77:c2:cc:fc:98:7d:c0:80:5c:be:37:50:42:ee:1f:94:a5:a7:
         e7:80:47:76:69:7f:41:b6:93:d9:26:d3:99:d4:8b:23:8f:e2:
         8f:47:b3:d6:de:12:c6:6a:c1:d0:2c:ac:56:5a:47:ed:34:ef:
         bb:61:f4:0b:c1:5f:64:80:92:2f:32:98:24:ce:f7:cc:72:35:
         51:a9:c3:50:81:18:1a:bf:29:7f:30:74:86:84:e3:2b:9a:63:
         99:cf:eb:8b:0b:7a:64:ed:15:51:2a:f4:3b:d7:41:0a:75:55:
         5f:cc:d6:ec:a7:37:15:e7:9e:18:a7:05:a2:93:e9:6a:89:c5:
         8f:cf:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:48:24 2025 by rpki-client