Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          01bJ/JGZao6uQmVFOmpFNQ3gMryUtPo7fpGelmTY7zM=
Subject key identifier:   91:A2:92:F5:93:22:E9:04:AA:C8:4A:73:31:63:15:4A:9E:72:AD:B5
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       01984BC130751E12F76A537F30DC6E834E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          13CB
Signing time:             Sun 27 Jul 2025 12:00:08 +0000
Manifest this update:     Sun 27 Jul 2025 12:00:08 +0000
Manifest next update:     Mon 28 Jul 2025 12:00:08 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: 4ZMOFFf4u6oWW8abtET/3YeZmOf8ucGPSmLAuEkAJv0=)
                          2: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=)
                          3: NS5b0PGbWotAIYMckbCTZQBj8Lw.roa (hash: MgQ66zaWbIbQhYagmVb0WjGZYhV+fCIGw9jelQ16jzo=)
                          4: _-2pl3YfyYv4YOJC1j11iYk1zBM.roa (hash: xD0l6qy0cCOD5gO7cQ9uWtSBRbsrlRlUqKqxixamYKI=)
                          5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=)
                          6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c1:30:75:1e:12:f7:6a:53:7f:30:dc:6e:83:4e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Jul 27 12:00:08 2025 GMT
            Not After : Jul 28 12:00:08 2025 GMT
        Subject: CN=91a292f59322e904aac84a733163154a9e72adb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:28:34:30:8a:05:76:56:5c:14:c5:76:78:27:
                    6b:75:e3:df:07:e2:d1:88:34:79:96:f0:87:c5:54:
                    0f:b3:04:c0:6a:33:3b:5a:31:ec:4c:b8:5a:2c:c4:
                    44:73:c1:e6:cf:0e:76:b3:05:0b:ed:d2:3b:da:d5:
                    12:42:30:4e:62:c3:a6:06:6c:9a:71:4a:52:ee:c9:
                    ab:a7:1a:b2:a2:47:14:ac:a0:4a:dd:ac:75:ac:c8:
                    64:4e:be:6d:62:24:da:38:09:86:77:41:6d:9a:d1:
                    42:26:80:f8:90:cf:6e:22:5c:47:52:ea:5d:53:49:
                    78:bc:e2:03:13:ae:8b:bd:35:8c:53:66:8c:3d:11:
                    4c:d5:18:90:ff:03:07:e6:3e:8b:3e:02:c7:84:9f:
                    62:ea:94:45:84:5d:0f:66:71:c8:01:aa:46:34:da:
                    8c:df:e8:99:cd:39:98:20:1d:f1:27:85:dd:56:db:
                    34:be:50:92:d7:18:a8:4c:c8:18:fc:33:eb:bc:10:
                    b4:d7:fc:05:ef:fa:7d:65:cb:af:f9:c8:73:c6:af:
                    6f:3c:fd:d1:c7:f2:d2:5c:f5:31:2c:44:45:4d:43:
                    08:5a:a6:e2:c7:ed:d4:73:27:52:23:c4:06:05:19:
                    ea:e5:0f:40:b5:a4:be:fc:0c:49:9e:45:cc:9a:45:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:92:F5:93:22:E9:04:AA:C8:4A:73:31:63:15:4A:9E:72:AD:B5
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:82:7d:b4:24:07:c8:da:98:c3:05:b8:a5:48:27:88:a6:5d:
         f1:a0:c3:6e:9d:b0:09:42:9b:32:fd:95:d6:e5:28:26:83:ad:
         6c:e4:8f:cb:4d:34:72:bb:b6:73:19:0c:20:2c:d9:cd:25:1b:
         cd:33:f9:50:ed:15:47:c6:b9:e8:a5:1c:4d:22:9a:c6:ec:b8:
         3d:aa:cb:28:d4:13:6d:12:3f:73:bf:41:34:d7:18:f6:a3:45:
         96:75:8e:63:77:43:6e:a9:d6:47:25:28:0b:d4:64:8e:54:67:
         dc:19:f6:b6:41:17:75:a8:65:f6:0f:96:b5:e8:82:44:52:f6:
         41:ba:7f:b2:8a:2a:26:f4:d0:ca:e4:4d:24:d8:8d:5a:b5:c8:
         cb:34:31:f1:72:4a:31:69:aa:19:76:d4:29:91:ce:c5:d4:2b:
         9f:e8:40:91:91:2a:73:1c:bd:74:b5:45:97:62:ce:65:a0:af:
         80:13:d2:f0:7c:76:76:6d:a4:51:d4:e4:a9:fd:41:96:60:ae:
         9e:e9:b1:88:bb:9b:2c:c8:12:ef:a4:e5:a8:0c:21:6d:9a:06:
         38:8e:57:15:a8:5a:c8:72:42:86:5b:07:26:e0:b2:f8:14:32:
         02:38:f0:fa:e6:07:06:1b:c5:c4:45:f4:f7:d7:cd:a9:15:59:
         86:00:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:08:54 2025 by rpki-client