Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File:                     3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier:          thUDwm2Tb6XV4pEWG210Wti/Gha992Y0U7RkaqZ7rHk=
Subject key identifier:   5D:44:EC:7B:64:32:9B:4D:B1:B6:4E:D8:B0:9E:EC:95:91:44:F9:AA
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer:       /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial:       01984708C82A3788341A0C000EE35B155A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number:          02F9
Signing time:             Sat 26 Jul 2025 14:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:14 +0000
Files and hashes:         1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: Hw7W8P66mQmJ4vMq3VtbL8N6fZYTsUZM3d8BgZX+RiA=)
                          2: hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa (hash: rpnDBu2YggoyGIw/C4Ub9AMkAXEhq0st1VH7UXhjugk=)
                          3: oyehTC9fC3RxVNTxQ-3Nace4xCo.roa (hash: 6amsBM8Jkzid3Hbf3NCrvWV5lgaxarQNmZ7omOl4H1Y=)
                          4: tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa (hash: dIS2lAatvIYTUHXvxYqBBEq9rurmrnQiuE0cglSeBdY=)
                          5: zdvIB-MX7mBXxPXY9Gvkyg4DaIA.roa (hash: JzeLYwYOJtUYF4eEhrs8y3e0iaiCpHB7RqKZXjFT6qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:08:c8:2a:37:88:34:1a:0c:00:0e:e3:5b:15:5a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
        Validity
            Not Before: Jul 26 14:00:14 2025 GMT
            Not After : Jul 27 14:00:14 2025 GMT
        Subject: CN=5d44ec7b64329b4db1b64ed8b09eec959144f9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:8a:4e:97:81:a4:b3:55:cc:aa:e1:02:0c:
                    38:7e:c1:48:a6:31:89:73:cc:81:52:1a:55:ce:12:
                    67:dd:e6:67:80:ae:3e:35:7a:32:aa:6f:24:1d:19:
                    3b:05:b7:63:1d:de:d3:b3:32:5a:f8:d0:bf:b9:8d:
                    1f:9b:d7:04:9f:8f:9d:c7:9f:9d:bb:ee:5c:1a:7d:
                    4d:f4:4b:34:ba:74:c5:cd:c6:32:35:b4:b3:2a:9c:
                    4b:d4:8b:c4:56:32:3c:e3:82:77:45:15:4c:73:aa:
                    e5:37:b9:1f:ef:35:ac:46:48:c5:e6:8b:85:cc:8e:
                    dd:a8:5b:d8:19:f9:d1:01:a8:ed:85:e9:37:d6:e9:
                    03:d5:31:ca:0e:a1:26:13:95:52:42:24:42:e2:df:
                    f4:64:5a:91:87:77:da:bc:37:42:a3:87:17:2f:af:
                    a4:53:9e:41:60:0c:fe:cb:05:4a:52:e3:20:f5:76:
                    34:6f:61:b3:ee:a2:83:96:43:34:8d:78:b6:02:c8:
                    e3:a0:e3:d1:bb:f6:49:d0:eb:3a:57:eb:57:29:a0:
                    1e:60:b4:8d:76:4b:6e:f8:61:b0:20:51:2c:b2:2e:
                    ad:61:2a:fb:4c:02:fd:ec:34:69:9f:4b:17:4c:93:
                    35:d5:0e:a8:a5:df:a7:ca:42:86:d1:be:eb:1e:5e:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:44:EC:7B:64:32:9B:4D:B1:B6:4E:D8:B0:9E:EC:95:91:44:F9:AA
            X509v3 Authority Key Identifier:
                keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:45:56:de:a1:ef:d0:7b:31:f9:7a:13:96:67:9a:c5:ca:
         57:62:68:bb:7c:5e:81:96:b6:09:ca:79:00:44:5c:16:22:25:
         19:34:43:87:a9:e2:e8:6e:94:10:4f:d7:41:96:c3:4f:5f:e3:
         17:0a:8a:c0:dc:c7:ec:22:11:c4:52:4b:7c:5c:76:6d:41:b6:
         6b:8b:9d:92:b9:88:f6:f6:0f:38:e9:c2:9e:8f:9a:a2:ea:de:
         ad:c3:ed:cc:70:d4:f5:0c:b5:c3:90:7e:f9:0b:f8:d4:16:6a:
         66:5a:df:f1:49:71:93:f4:b4:fb:11:b9:d5:dc:86:30:30:15:
         7b:82:46:d9:3e:ea:10:22:a1:d4:53:d8:27:09:fe:43:3b:1a:
         48:35:0c:ea:26:7c:ba:69:dc:c4:c7:16:41:2c:17:8c:e0:fa:
         8a:59:c0:2d:e7:74:19:98:e7:cb:62:20:cb:08:27:70:14:6e:
         49:8d:56:8a:65:fa:d0:99:9f:d1:83:66:70:4f:b7:1b:a6:95:
         f1:10:79:fd:0b:b5:08:59:37:0e:f1:a3:2e:61:16:af:26:1d:
         3b:b2:50:14:c2:46:c5:2b:22:4e:2f:c8:7c:c5:f6:95:4c:2d:
         36:95:cc:41:b1:a7:28:b8:57:49:6a:5d:db:8d:7b:39:a1:16:
         7b:62:f2:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCMgqN4g0GgwADuNbFVocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0
OTk4ZjcwHhcNMjUwNzI2MTQwMDE0WhcNMjUwNzI3MTQwMDE0WjAzMTEwLwYDVQQD
Eyg1ZDQ0ZWM3YjY0MzI5YjRkYjFiNjRlZDhiMDllZWM5NTkxNDRmOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmWKTpeBpLNVzKrhAgw4fsFIpjGJ
c8yBUhpVzhJn3eZngK4+NXoyqm8kHRk7BbdjHd7TszJa+NC/uY0fm9cEn4+dx5+d
u+5cGn1N9Es0unTFzcYyNbSzKpxL1IvEVjI844J3RRVMc6rlN7kf7zWsRkjF5ouF
zI7dqFvYGfnRAajthek31ukD1THKDqEmE5VSQiRC4t/0ZFqRh3favDdCo4cXL6+k
U55BYAz+ywVKUuMg9XY0b2Gz7qKDlkM0jXi2AsjjoOPRu/ZJ0Os6V+tXKaAeYLSN
dktu+GGwIFEssi6tYSr7TAL97DRpn0sXTJM11Q6opd+nykKG0b7rHl5dWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1E7HtkMptNsbZO2LCe7JWRRPmqMB8GA1UdIwQY
MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt
ZThmMjBhYWRkZTk5LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5
LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPt5FVt6h
79B7Mfl6E5ZnmsXKV2Jou3xegZa2Ccp5AERcFiIlGTRDh6ni6G6UEE/XQZbDT1/j
FwqKwNzH7CIRxFJLfFx2bUG2a4udkrmI9vYPOOnCno+aourercPtzHDU9Qy1w5B+
+Qv41BZqZlrf8Ulxk/S0+xG51dyGMDAVe4JG2T7qECKh1FPYJwn+QzsaSDUM6iZ8
umncxMcWQSwXjOD6ilnALed0GZjny2IgywgncBRuSY1WimX60Jmf0YNmcE+3G6aV
8RB5/Qu1CFk3DvGjLmEWryYdO7JQFMJGxSsiTi/IfMX2lUwtNpXMQbGnKLhXSWpd
2417OaEWe2Lyag==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:33:54 2025 by rpki-client