Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File:                     3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier:          3F3y7eSA9nLaPeLEfNgijXNVLFtv1JQ000rWqdlRU1g=
Subject key identifier:   70:7E:D1:14:C2:E4:C7:64:4B:14:71:A4:8D:92:54:F7:1E:1B:CC:50
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer:       /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial:       01984A0A5D2171BC25C6F66A869AA0FF2559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number:          160B
Signing time:             Sun 27 Jul 2025 04:00:49 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:49 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:49 +0000
Files and hashes:         1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: G+C5LTqzxEEBpJW6konDhiWEFnZzBXlTzEqdpvfB8/U=)
                          2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:5d:21:71:bc:25:c6:f6:6a:86:9a:a0:ff:25:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
        Validity
            Not Before: Jul 27 04:00:49 2025 GMT
            Not After : Jul 28 04:00:49 2025 GMT
        Subject: CN=707ed114c2e4c7644b1471a48d9254f71e1bcc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:dd:f4:64:0b:6c:b1:f3:05:4d:c0:71:b3:
                    01:ca:53:5a:9a:e8:b5:58:ae:b8:76:71:19:98:8f:
                    88:17:40:62:cc:74:51:ce:f8:93:04:b9:0e:d1:6e:
                    10:62:02:4e:c4:ab:3e:d8:a1:00:45:47:98:62:12:
                    95:30:20:09:c9:3d:13:c7:a9:e3:a1:dd:a9:bb:72:
                    46:8e:29:4e:4c:98:8e:68:df:88:00:cf:1e:6b:6d:
                    3b:eb:82:28:22:25:b9:b0:e2:9c:39:3f:6c:cf:72:
                    6b:4e:c7:0f:83:42:05:37:34:84:44:48:81:fe:06:
                    30:32:bb:11:57:cf:b8:e8:51:d1:f1:b8:bd:ef:e8:
                    b4:fc:05:76:8d:13:2e:29:7d:22:97:40:74:a1:f9:
                    40:72:46:88:bd:56:c6:a3:b4:c8:4b:64:3b:e1:49:
                    86:43:99:6d:78:03:42:23:f3:9e:f0:3b:4d:6d:88:
                    d6:ab:2f:11:b5:40:d2:1e:7b:4f:38:ab:8f:2d:9c:
                    c8:be:bc:fd:c9:dd:61:c6:8c:12:75:fe:56:5c:3e:
                    d0:bf:15:6f:71:c8:ba:91:c8:35:bd:b4:af:c7:41:
                    20:53:d9:48:e8:c6:b1:86:4a:d5:41:e9:4f:d6:cf:
                    65:1c:72:a6:be:9b:58:fd:41:e1:cb:be:c9:c2:d7:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:D1:14:C2:E4:C7:64:4B:14:71:A4:8D:92:54:F7:1E:1B:CC:50
            X509v3 Authority Key Identifier:
                keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:aa:cf:47:44:d9:63:54:bf:cc:f7:c9:5c:4b:e7:22:28:71:
         35:3a:f2:62:63:be:cf:9f:2f:f0:09:ec:4d:20:da:cb:4e:c2:
         db:f0:5a:76:ce:50:d0:ee:1d:69:ca:f5:91:70:32:dc:aa:78:
         fa:59:f2:8d:83:90:be:b4:d9:7e:64:32:6c:03:0f:cd:27:38:
         c3:20:8b:dd:be:49:a6:e7:5f:c7:f9:97:47:34:e4:30:96:68:
         34:4d:78:12:96:06:e7:fa:8f:4e:b4:58:08:c1:1f:a3:64:71:
         df:a3:b1:52:23:b8:f6:a8:07:41:65:d4:4a:ab:76:9d:46:06:
         09:89:4c:ec:c5:d8:f5:69:85:17:9e:a7:54:f0:8b:fd:97:3f:
         e6:ee:a9:cf:f1:1f:73:87:9b:5f:f8:77:cb:ef:3a:6a:8d:52:
         f5:17:50:46:77:59:8c:a8:3d:9a:2c:6b:1d:c9:f2:da:71:c6:
         f9:67:f3:e5:b9:5b:da:7a:e4:0e:35:6d:2f:1c:da:2d:13:9c:
         9d:b8:b3:3e:8a:c1:c8:25:10:fb:83:d7:2e:cb:68:2f:25:e2:
         47:7f:d8:c3:fb:13:a2:fa:9e:bd:6d:2c:b4:44:09:8a:de:d7:
         ad:fd:b3:6f:20:f2:00:8e:b0:d2:cb:9d:a8:41:b1:8f:e6:8e:
         94:fb:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:31 2025 by rpki-client