Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File:                     3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier:          5dQLHpDSfiRCYIIoOMYk23fIFcuYsjGsMZLeueig1bo=
Subject key identifier:   F6:CF:0A:99:66:6B:BE:DF:17:97:DA:00:80:F1:49:2B:0E:E1:A1:60
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer:       /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial:       0198439B4A18BFFA24379603A864F85AA00B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number:          12D4
Signing time:             Fri 25 Jul 2025 22:01:47 +0000
Manifest this update:     Fri 25 Jul 2025 22:01:47 +0000
Manifest next update:     Sat 26 Jul 2025 22:01:47 +0000
Files and hashes:         1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: KWubPd6vj/wdwT1ZdFEXsuIkKxtRLBXRsaAljr3O9VQ=)
                          2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:9b:4a:18:bf:fa:24:37:96:03:a8:64:f8:5a:a0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
        Validity
            Not Before: Jul 25 22:01:47 2025 GMT
            Not After : Jul 26 22:01:47 2025 GMT
        Subject: CN=f6cf0a99666bbedf1797da0080f1492b0ee1a160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:28:40:ad:53:5a:c4:eb:6b:01:8b:cf:7d:
                    25:b7:af:a2:5a:3c:bd:ca:a9:f9:09:1d:dd:de:a6:
                    30:a7:29:68:02:1f:00:ed:c3:fb:3a:72:49:a9:ca:
                    da:df:93:aa:65:70:4f:58:9a:b7:ee:b6:57:4f:87:
                    89:29:b2:68:48:2e:18:01:f6:ca:0f:02:83:fc:bc:
                    f3:20:af:f5:a1:7a:b7:c8:8c:75:03:60:e2:73:b8:
                    8e:dd:5c:20:5f:7f:dd:64:ee:83:2e:66:23:1a:9d:
                    92:bc:0e:6c:ce:96:e5:95:5f:04:d9:30:7a:a3:60:
                    c2:99:ef:26:22:e4:f9:a8:c6:c1:61:63:80:27:c9:
                    ee:49:e2:a7:42:69:71:a5:2d:71:ff:d1:ba:62:50:
                    a8:ee:2f:a7:fb:ee:34:43:d0:c0:13:33:b1:fa:f9:
                    10:c6:2f:05:b7:fa:3a:cc:28:44:a7:56:41:0e:80:
                    96:60:f1:e2:45:06:5d:09:6d:2e:8f:01:f6:2f:09:
                    2d:3d:3b:71:90:30:c1:f4:43:86:6f:a5:93:27:b4:
                    88:e4:f4:11:02:80:bc:79:b8:ce:8a:36:00:6d:11:
                    37:60:c1:f6:a5:66:8a:0d:09:f2:d4:b2:43:63:45:
                    42:d7:67:0d:4b:52:e4:f6:1d:2a:e1:b1:40:0e:d5:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CF:0A:99:66:6B:BE:DF:17:97:DA:00:80:F1:49:2B:0E:E1:A1:60
            X509v3 Authority Key Identifier:
                keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0a:e8:98:e8:26:62:48:2b:37:f8:3c:b7:b6:2c:7c:09:68:
         a8:75:79:ba:5c:32:74:a6:54:ae:16:c4:c5:2d:b2:22:23:b0:
         49:4e:fe:03:48:0c:f7:8c:8a:e5:48:f0:c9:de:27:1e:25:97:
         29:dc:26:e4:7d:cb:25:2f:46:d8:11:fe:c5:25:8b:12:57:d7:
         49:32:2e:a3:58:ce:f0:7f:e2:d5:fa:67:d6:90:89:d1:16:2a:
         9b:8e:34:24:25:60:ff:3c:3f:89:a5:1a:39:40:bb:88:a4:4c:
         57:6e:c8:e7:e2:0b:57:a7:2b:d5:27:48:ee:5c:bd:c9:2c:59:
         ea:68:9b:74:69:ea:c6:ea:cf:c8:87:2b:8e:52:09:7a:3a:9b:
         71:4f:61:8b:85:35:b6:45:5c:d6:37:b2:5d:04:2a:45:a0:dd:
         53:7f:de:e4:79:92:78:50:b9:5b:9d:fd:57:42:14:ef:80:ea:
         cf:fd:73:c8:0f:61:20:6c:19:92:eb:f4:e2:75:6d:df:bd:79:
         f7:cc:68:62:46:e8:f7:ed:db:cf:ce:47:07:5d:28:b9:dc:7e:
         19:59:a6:56:d6:6f:85:cc:2f:8b:ac:77:9b:1a:b8:16:d7:f9:
         ba:21:e9:22:0e:e5:bf:b0:99:2c:3a:62:22:d6:0f:fa:c0:68:
         39:97:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:05:39 2025 by rpki-client