Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File:                     3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier:          bry8qVrIMY9Fz6M5NmQB1xx6H43qFUJdeet6pOzH++4=
Subject key identifier:   37:E0:E7:7B:FF:65:CA:60:3E:73:10:CE:69:91:A3:0A:36:2D:EE:14
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer:       /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial:       019848F74FEC1CCA0A75E161A7AA8B76B8D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number:          1606
Signing time:             Sat 26 Jul 2025 23:00:23 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:23 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:23 +0000
Files and hashes:         1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: oFLjW0/xnZ2/vTr7CacPxWZMa4B5cmSXVW9S9/mpY4M=)
                          2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:4f:ec:1c:ca:0a:75:e1:61:a7:aa:8b:76:b8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
        Validity
            Not Before: Jul 26 23:00:23 2025 GMT
            Not After : Jul 27 23:00:23 2025 GMT
        Subject: CN=37e0e77bff65ca603e7310ce6991a30a362dee14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:55:60:bc:b9:61:27:d3:2e:41:97:f0:88:
                    77:8f:2e:83:8b:b8:a1:a8:da:b7:25:c1:f0:14:f5:
                    6f:36:6f:f6:2d:42:39:71:0a:75:48:be:e2:a7:ab:
                    e2:7c:84:9f:1b:89:68:d4:37:56:ae:b9:d6:62:5c:
                    40:3e:3b:10:77:01:1b:69:0f:4d:94:39:99:fc:11:
                    fa:7f:ed:2e:68:d8:cf:89:dd:ac:ae:fb:34:31:a6:
                    4d:08:97:3d:d5:2f:75:4f:3b:08:de:5d:48:de:e4:
                    84:fd:6d:78:a8:37:76:81:d3:b8:6e:46:82:4f:66:
                    a8:74:7a:f1:26:5c:1e:7b:bd:8b:58:b5:c0:03:1a:
                    53:49:58:95:82:ef:db:2d:76:20:3d:d3:6f:51:d0:
                    7b:b6:4e:31:c1:9e:86:1a:41:4d:00:ed:76:fe:e4:
                    51:c7:08:ab:da:dc:8d:16:d6:26:72:43:dd:4e:fe:
                    6b:ca:02:47:a0:7b:e8:19:0c:59:28:de:ac:0f:ba:
                    e7:fd:92:ab:6b:d1:e4:25:02:1c:b6:77:72:9a:ab:
                    27:38:10:7c:b6:8a:aa:d7:28:a9:5e:a4:59:6d:e0:
                    2b:ed:e5:99:8f:76:ab:21:18:e1:8f:9a:7a:81:01:
                    c4:43:82:84:43:1b:7a:f7:1c:c7:db:c0:49:76:bb:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:E7:7B:FF:65:CA:60:3E:73:10:CE:69:91:A3:0A:36:2D:EE:14
            X509v3 Authority Key Identifier:
                keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b3:f4:00:3f:d0:10:58:b9:95:c2:b8:4c:0a:15:b3:64:ff:
         c6:c7:63:16:62:8b:15:5e:e0:85:6a:3a:0b:37:e4:41:61:c4:
         f4:2b:b7:72:95:35:9f:ab:5e:3a:1f:15:b6:f5:b1:4a:a2:b6:
         b0:b2:63:da:35:52:c7:9a:13:79:b1:3b:b5:4d:68:06:20:36:
         7d:1a:1f:fe:22:90:31:06:87:8c:ea:da:12:a9:44:28:0d:54:
         61:2b:12:c1:0d:d8:7f:ad:40:be:88:22:23:b7:bc:04:fd:28:
         81:02:a1:58:bc:87:91:0d:6d:86:01:eb:a7:4d:02:ff:a6:b6:
         58:2c:dc:51:26:25:ef:8c:3c:89:22:12:8e:85:0f:4f:99:61:
         34:78:56:2d:59:46:83:9b:d2:3c:6a:b1:a8:7d:69:cc:c2:c0:
         df:8a:7b:da:0b:41:ca:59:18:57:5a:c7:01:51:85:e1:6d:b4:
         13:20:c0:f8:3a:54:e6:9b:7c:74:67:ed:2c:53:53:ec:11:b0:
         57:ca:ca:5e:45:a0:d4:07:fe:36:e4:93:4d:75:ce:db:90:2c:
         ad:e9:9e:db:e6:64:65:a9:38:12:e5:84:be:e6:47:9e:f9:23:
         24:22:8d:dd:da:78:1b:12:c4:6d:1f:cc:ed:b1:ac:8c:ee:de:
         de:36:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:55:55 2025 by rpki-client