Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File:                     B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier:          Oj8JGNX1oP3GM9q24y4hCPSLd04OcowuVudOOBEln8M=
Subject key identifier:   9F:7D:B2:C6:FE:5F:78:0E:B8:BD:95:75:D5:4E:43:01:79:51:C8:2A
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer:       /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial:       01984A419EC7FF5DDD34A7319DBC64F5D415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 05:01:11 +0000
Manifest this update:     Sun 27 Jul 2025 05:01:11 +0000
Manifest next update:     Mon 28 Jul 2025 05:01:11 +0000
Files and hashes:         1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: Ou5KykPvVW04c6LcYFQkOiTsN1o9xfrv1G6301JSzS8=)
                          2: UuUtfUqV-KgwhgFjzhSy5k-b5wQ.roa (hash: N1q9DTLPcvQy64VHKRJdfX47laqGR6sY8ENSz3JjEqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:9e:c7:ff:5d:dd:34:a7:31:9d:bc:64:f5:d4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
        Validity
            Not Before: Jul 27 05:01:11 2025 GMT
            Not After : Jul 28 05:01:11 2025 GMT
        Subject: CN=9f7db2c6fe5f780eb8bd9575d54e43017951c82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:1d:5d:81:25:06:65:b9:67:d7:1c:0e:da:
                    26:a0:79:8e:93:80:72:d8:5f:cb:a7:23:cc:a0:9b:
                    ff:60:61:e9:ea:d4:65:df:65:4a:39:bd:8a:39:3c:
                    fb:82:29:80:c9:e1:1b:5b:6f:cd:52:fc:5c:60:8c:
                    18:71:6e:26:25:41:2d:5c:dc:ac:0e:4a:00:78:2d:
                    f6:39:16:f4:01:b8:3a:ce:82:94:f1:5f:6d:6e:fc:
                    7e:e3:99:29:e4:8a:51:7d:df:1d:0b:21:1f:62:fe:
                    ad:7e:70:1a:b7:9f:19:6c:e1:14:da:91:93:6d:95:
                    89:a8:eb:75:a8:f7:0e:40:0b:00:03:58:d9:43:24:
                    98:70:4a:2a:22:a3:63:45:bc:b8:7a:8e:33:7d:78:
                    4a:96:0f:00:a3:12:6a:cf:c3:96:e5:71:fc:c0:2f:
                    8e:cb:89:31:b1:b6:9a:30:42:d7:33:4c:b0:1d:64:
                    13:92:d8:6e:5a:77:bd:66:44:cc:9e:5e:fb:ea:17:
                    4c:13:f5:3f:44:ef:5e:10:12:fa:57:75:e5:ba:99:
                    8b:1f:9d:74:ba:da:3a:2b:a3:5f:e1:a3:1f:62:45:
                    89:c2:37:11:f9:74:6f:b1:ec:8e:81:22:6e:24:40:
                    36:cd:a4:22:48:e5:9c:d8:3e:38:2c:f5:b1:e1:7b:
                    7a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7D:B2:C6:FE:5F:78:0E:B8:BD:95:75:D5:4E:43:01:79:51:C8:2A
            X509v3 Authority Key Identifier:
                keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:53:e1:3e:17:7b:21:e2:7e:5d:c6:e8:41:35:56:96:ae:20:
         f3:84:a2:f8:16:69:e4:71:74:93:d7:22:87:bf:c4:f1:99:23:
         95:27:f6:c9:16:f2:e3:64:be:ec:65:a9:97:62:eb:67:a6:b4:
         8b:15:05:d9:ee:b6:72:2c:23:eb:80:db:fd:7c:8c:5e:3e:f3:
         fd:7c:e4:c1:49:3c:e6:05:79:9a:41:bb:75:16:b4:62:0a:4d:
         b6:3d:06:90:83:bf:a9:b1:85:6d:96:bf:a1:06:7e:21:70:a5:
         6e:65:bd:44:c2:27:9a:c5:87:7f:1d:5c:e3:18:90:88:bd:a8:
         20:65:80:95:63:9f:0e:80:f3:c9:e2:88:64:4c:c6:6a:98:d2:
         f9:60:c4:59:99:48:4f:c4:29:df:13:a7:ac:37:e3:5e:b9:bc:
         c0:35:94:f3:1f:8a:d7:b3:4d:e0:a3:fe:55:4b:5e:94:68:15:
         cb:f9:f7:2d:62:69:13:f9:d5:ea:d3:1a:e8:e5:f6:02:90:24:
         0b:2b:5e:09:9c:ac:8d:a9:0d:23:bf:db:64:b0:d9:94:74:ce:
         fb:cc:0d:68:22:45:b2:89:b5:2c:11:90:6f:25:77:fb:70:6b:
         46:32:db:85:d4:1f:fd:2c:44:1e:de:e4:e1:7e:25:8e:c7:58:
         4c:a5:0f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:57 2025 by rpki-client