Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
File:                     ADn3QWhtoR55rnxeSGqikICMsbc.mft (raw, json)
Hash identifier:          6AEztLhLfnQsPfEBS+CjogNwCKB84ipQR22vyUJ52Cs=
Subject key identifier:   00:0A:40:B1:82:88:7D:31:A5:A3:3E:96:92:44:F7:13:9B:64:4D:3B
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Certificate issuer:       /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial:       0198499C726DB0458D175FBAEE8B02DB75A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
Manifest number:          12AD
Signing time:             Sun 27 Jul 2025 02:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:46 +0000
Files and hashes:         1: ADn3QWhtoR55rnxeSGqikICMsbc.crl (hash: axbBiqL8EIHl40zI7IDYSfPmPahjq6bdHB76YV0s96w=)
                          2: Y3i7R5k-pr2oJ6IrDbTR9kOWSc4.roa (hash: GTNPbNy0VtCzCDFPUyJZWkGeAio7wlfXOb9TWYRV6sE=)
                          3: e9a8ONYDtpKM0KoJ-RMqjCOdosE.roa (hash: tuQ0e/czULwl9GWCOBeKLYiHJIJXkYnYmwwjDNg8QOE=)
                          4: xewexu8qO3LGfnqqWqfVcH7b-hQ.roa (hash: foDGso9eJE+J/6Qu10A3sNz/jBAeKKZ8zvRJtBdUh9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:72:6d:b0:45:8d:17:5f:ba:ee:8b:02:db:75:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
        Validity
            Not Before: Jul 27 02:00:46 2025 GMT
            Not After : Jul 28 02:00:46 2025 GMT
        Subject: CN=000a40b182887d31a5a33e969244f7139b644d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:29:1a:86:38:fa:ea:cc:a0:b2:52:c6:af:
                    32:73:55:4d:76:c2:0b:11:fa:82:75:ee:cb:0e:10:
                    03:8c:d3:92:94:68:44:c8:d2:da:8b:28:25:fd:56:
                    fb:7b:84:26:bb:f3:bb:61:51:86:a2:b5:bd:b4:55:
                    c7:55:9b:54:5b:84:e3:79:83:5d:5a:ce:5c:6d:3d:
                    e9:81:4d:d3:af:36:f8:5b:0c:67:d5:a1:1c:8b:0e:
                    79:b0:3f:08:35:3f:e6:96:3d:7c:65:6f:bf:03:06:
                    08:50:2b:6c:0e:21:ce:8d:d2:75:bb:f1:9d:8e:1b:
                    62:61:0b:37:a0:39:a8:2c:cd:5d:4c:5e:43:1b:81:
                    1b:9b:29:59:f1:8e:dd:65:4c:f0:fb:48:91:2b:fc:
                    60:e4:b4:a1:f3:aa:21:d8:f5:2d:d7:c0:40:7f:ae:
                    6c:69:7b:b1:6b:69:de:f6:45:6f:f3:8b:eb:04:b8:
                    93:5a:06:13:dd:61:3b:d2:32:bd:32:ae:a0:77:3c:
                    db:f2:8b:58:a9:cf:84:0e:74:71:19:d1:8d:c5:ad:
                    6f:10:df:0f:cc:33:42:84:34:7f:66:3e:3e:3c:e9:
                    c1:e0:57:44:3c:28:67:05:29:d4:ae:c9:ba:b5:56:
                    e6:ae:e5:54:33:d3:ae:07:fb:07:da:8f:71:6a:81:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0A:40:B1:82:88:7D:31:A5:A3:3E:96:92:44:F7:13:9B:64:4D:3B
            X509v3 Authority Key Identifier:
                keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:c0:83:4c:35:d4:27:44:10:53:9f:8d:9f:22:4a:1a:2c:
         1d:13:cb:61:5b:81:18:0a:12:87:4c:9b:c7:2f:77:ff:1f:10:
         d5:2d:e3:cb:ad:d7:2d:88:e5:2b:2e:23:90:da:52:a1:cb:d5:
         04:3a:00:64:89:39:77:63:c6:5a:5c:39:5c:a6:a1:0d:15:54:
         67:bb:23:ac:3d:ce:b4:e1:38:5b:5a:49:d2:0b:7d:26:5a:78:
         df:67:49:94:22:2b:ca:bb:69:5e:2b:62:7d:24:61:61:cf:76:
         49:e6:cc:aa:b7:e5:10:66:7d:bf:41:e4:d8:c8:33:12:75:07:
         07:28:79:7a:b6:44:6b:90:5f:29:ce:29:60:5a:03:3b:12:a4:
         2a:9c:92:81:c3:f3:78:8b:2b:67:ac:69:6b:d2:81:fc:02:58:
         7d:f7:f6:3a:3c:e6:cf:62:5e:5e:1f:81:90:c0:62:36:70:be:
         c8:d7:fe:2c:3b:60:73:ea:3c:30:1c:a8:2d:ca:10:fc:7b:86:
         bb:0a:22:09:ad:7f:b7:e9:53:6a:19:40:c2:fc:53:a8:bc:24:
         2e:d2:f7:62:fa:9a:5a:db:93:9c:3d:6c:cd:98:eb:71:da:53:
         5f:0b:57:93:8f:cc:1d:55:98:c6:b5:99:ab:cf:2e:a5:82:f1:
         f1:98:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:35 2025 by rpki-client