Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          wV+yBh2k+ZKVpfgRyxmhjLMeKnbAg2IZmy3wnhpnkDs=
Subject key identifier:   AD:CE:9B:B7:E0:00:32:01:45:9F:32:10:91:39:FF:68:C3:1F:BA:67
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       0198530DAFFF46810B460DC61DD3091F8EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          1602
Signing time:             Mon 28 Jul 2025 22:01:02 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:02 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:02 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: z6FeXdSzhXwFXLODr8NMuj5VDPQBeJJvwdSsYL1GiQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:af:ff:46:81:0b:46:0d:c6:1d:d3:09:1f:8e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Jul 28 22:01:02 2025 GMT
            Not After : Jul 29 22:01:02 2025 GMT
        Subject: CN=adce9bb7e0003201459f32109139ff68c31fba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:75:77:17:35:fe:c7:0c:4a:c4:07:08:de:
                    c5:aa:fc:db:01:e3:27:31:09:41:b3:aa:8a:22:0f:
                    bc:26:35:7e:f6:ac:35:f4:e5:68:e4:1a:e9:97:60:
                    24:ce:fd:bb:31:f4:52:aa:1d:42:ae:ef:85:3c:56:
                    3f:97:13:14:e3:df:24:c0:f7:3b:bc:95:d6:e3:72:
                    f6:36:c0:2b:f1:38:ed:ac:15:f7:42:ee:2c:a1:b5:
                    55:c3:41:7e:2d:40:81:c1:e1:5d:5e:38:ff:8a:56:
                    b2:a3:a5:15:1e:56:58:07:2b:57:f3:94:e6:5e:8b:
                    d2:0e:3c:61:ba:a3:12:4f:9b:d7:08:f5:37:db:f2:
                    64:ce:34:d5:9b:f9:0a:3c:33:63:fa:8a:b0:9a:cd:
                    4c:12:f8:90:81:63:99:b9:2f:83:96:5a:63:0e:01:
                    2b:9e:e6:a6:c8:51:8d:3a:7f:34:70:31:15:14:12:
                    82:0a:1b:24:1f:ee:e1:a1:cd:45:32:fb:d8:1a:a8:
                    22:de:50:ab:0f:30:6f:57:8a:dc:96:51:26:ec:2f:
                    09:d6:8c:9a:64:31:3a:f6:78:92:3a:08:54:b2:3a:
                    42:18:28:b1:2c:a2:30:de:6f:ae:27:8a:2b:bf:62:
                    e7:ab:90:9f:f7:06:11:f2:3a:85:33:04:ee:cd:57:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:9B:B7:E0:00:32:01:45:9F:32:10:91:39:FF:68:C3:1F:BA:67
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ce:d3:69:3f:e8:eb:78:d1:64:a9:33:77:c3:94:a6:7c:d0:
         d9:dd:52:ab:09:33:94:47:b6:d6:b1:ff:fb:6f:ce:58:2f:55:
         f1:0d:23:a1:80:27:7a:6c:79:af:5c:dc:63:37:04:70:b2:a4:
         a6:ff:95:c7:50:0f:b7:58:ac:de:7f:43:3d:00:40:9d:ac:f6:
         4f:d8:b2:c7:5d:46:32:27:53:2c:b1:4e:a9:3f:92:08:f5:40:
         a9:ca:7d:78:c7:25:7f:86:14:6d:d3:d8:f9:a6:77:80:79:b5:
         34:d1:7b:4d:49:c9:a6:5d:ca:29:f0:40:f6:b7:3c:b6:95:5e:
         40:b1:17:2f:68:1d:c4:59:22:10:11:02:82:16:79:00:89:ad:
         05:ab:4a:af:09:b2:64:cf:69:23:59:0e:c8:2d:e8:b3:49:67:
         db:17:17:0d:b0:f7:a9:bd:1c:56:79:66:84:5c:76:c3:84:c4:
         5d:ff:fe:93:5c:75:de:53:68:52:7d:53:c6:a5:fe:ee:4c:7e:
         11:f0:58:fb:7d:16:78:35:d3:8b:ad:9b:60:e0:ca:d3:e6:70:
         c2:dd:ca:56:95:5a:47:b0:08:4a:bc:ec:b7:c7:08:36:68:ad:
         16:ea:f7:65:d3:1a:73:66:94:27:77:8c:a4:ed:06:f7:b1:87:
         1e:12:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:55 2025 by rpki-client