Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          gC8LmfeR+8ybg4Q1jZ03qeNW5ZB+dRmbHqcYUdwAkq8=
Subject key identifier:   3B:AC:09:B6:97:6F:EE:50:C9:BA:E5:AB:4E:DF:42:D2:8E:2A:70:2C
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       01984A77E5C48404CFD5CE22A8E5C018D874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          0A82
Signing time:             Sun 27 Jul 2025 06:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:28 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: qzZ652e5M/S7jN4QgQTawguSR2EHCPD73AUmWWkFZKw=)
                          2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:e5:c4:84:04:cf:d5:ce:22:a8:e5:c0:18:d8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Jul 27 06:00:28 2025 GMT
            Not After : Jul 28 06:00:28 2025 GMT
        Subject: CN=3bac09b6976fee50c9bae5ab4edf42d28e2a702c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:6c:fb:7f:04:b1:9f:78:5d:42:5e:5f:82:
                    79:62:30:e3:ef:6c:be:a6:ef:18:65:17:43:f8:79:
                    52:6e:11:e6:35:f4:b8:54:c4:eb:92:1e:be:9e:40:
                    c6:f5:f2:e9:19:43:00:b3:82:c8:64:93:a1:dc:77:
                    e0:28:4d:53:b5:43:3f:35:3f:84:66:aa:66:55:c3:
                    38:79:c7:bc:e0:17:85:dc:37:b9:2d:9a:22:9e:46:
                    d4:c0:b4:27:21:ea:35:99:68:fe:a7:2e:3d:f6:07:
                    bb:3f:f3:b9:38:ff:0c:da:2d:7e:e0:fd:ee:ef:aa:
                    5f:78:c6:f4:36:a4:16:50:6f:97:80:d5:37:c8:e0:
                    8f:17:ea:f2:3c:a4:f0:3c:19:a8:ef:7c:ec:fb:5b:
                    cb:55:8e:3e:36:e0:59:3f:71:10:ad:82:3a:36:52:
                    a2:c8:80:8a:a0:3f:84:56:87:a0:54:2a:f3:50:ae:
                    a2:c2:a9:a8:ca:eb:51:f6:db:aa:c0:e4:c7:3c:02:
                    6e:da:cd:9a:93:fb:77:82:e5:26:6b:ee:49:14:e5:
                    0c:9e:fb:37:0e:78:23:66:d7:34:4a:45:0a:3c:30:
                    75:03:76:04:06:bd:ac:d8:49:88:f7:42:80:a5:81:
                    2e:f4:de:0a:31:44:9c:a3:4e:cd:59:04:a0:0b:a6:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AC:09:B6:97:6F:EE:50:C9:BA:E5:AB:4E:DF:42:D2:8E:2A:70:2C
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:21:0f:7a:8a:40:79:f2:9b:b1:1f:63:19:b0:6e:f0:75:dc:
         29:0f:3f:b6:bf:cc:a5:f9:02:3f:35:79:09:4d:ea:c8:53:ca:
         c4:cb:2c:23:fb:fc:6e:bb:56:d4:95:11:23:e9:95:37:4c:3c:
         b6:65:ff:eb:0a:70:bc:36:9a:4f:0e:39:39:9b:6d:f7:9d:97:
         21:8f:ea:95:2d:59:38:ba:ad:1e:81:2f:1e:c4:ca:06:39:be:
         53:c4:99:01:7e:2c:ab:c1:fb:6f:cd:c6:01:09:03:9d:9a:86:
         b1:bd:d9:cb:8a:f9:c3:ad:06:2f:f1:76:cd:a3:43:7e:9c:48:
         69:bf:b5:3a:55:3d:b9:fc:39:76:02:87:bb:d1:07:8e:24:e3:
         77:b8:69:73:7f:bc:15:ad:0d:cb:34:02:c2:83:2a:9b:ff:1f:
         0a:10:25:0f:f1:5b:a6:7b:3e:af:57:ea:de:7c:88:20:c3:1a:
         f4:ad:92:29:13:7a:f5:31:13:7d:b2:44:89:89:1c:5c:1a:fd:
         48:c6:aa:f9:5d:db:b4:0c:f9:f0:dc:94:1a:66:20:f3:27:b5:
         39:1c:94:9d:7d:35:ee:25:91:1e:c1:87:8e:bb:6e:28:ee:24:
         af:59:35:80:e4:22:bd:3d:32:01:e4:8e:d6:cb:ff:97:25:0d:
         b0:f7:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:14:55 2025 by rpki-client