Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
File:                     3DhEUAcx1V-JiN3phVnP7QswmrY.mft (raw, json)
Hash identifier:          37NHk1HxTpFQ/fo4bRdOmxoR0CqLBaHlBkD3QWStnO8=
Subject key identifier:   70:DD:EB:C9:12:5C:B6:F4:15:0C:17:88:D7:D5:D6:91:A7:A1:7A:D6
Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
Certificate issuer:       /CN=dc3844500731d55f8988dde98559cfed0b309ab6
Certificate serial:       019922FAEF94F45BEC29B6C1A253FA756D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
Manifest number:          016D
Signing time:             Sun 07 Sep 2025 07:01:34 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:34 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:34 +0000
Files and hashes:         1: 3DhEUAcx1V-JiN3phVnP7QswmrY.crl (hash: LvDRvt4vT9X2mayxAaelSohbNZa8Ql4wly2FZdi5AlQ=)
                          2: 4YPbiAtEI4aIVwSYoOB9atG5l_o.roa (hash: 5G9M3UH6Px38TdWKWNsZTcUTomaq2supA1BUuPBFOUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:ef:94:f4:5b:ec:29:b6:c1:a2:53:fa:75:6d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6
        Validity
            Not Before: Sep  7 07:01:34 2025 GMT
            Not After : Sep  8 07:01:34 2025 GMT
        Subject: CN=70ddebc9125cb6f4150c1788d7d5d691a7a17ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:f2:a8:5f:7e:89:40:4f:b2:59:f8:be:a9:
                    d5:77:83:12:64:fd:74:fb:1d:09:ef:35:f2:2f:93:
                    e1:0f:96:8a:21:54:51:a6:bf:b5:7e:57:b6:ba:4f:
                    a7:6f:1e:14:2d:dc:2d:62:eb:03:f4:0f:21:a3:28:
                    92:fc:8f:87:e9:cc:be:73:f2:30:54:21:35:83:9e:
                    b2:18:3d:2f:4a:1b:53:cd:25:df:64:c6:4e:37:8a:
                    89:c8:0d:c3:98:39:c7:14:1d:be:3b:e6:f8:5f:7e:
                    7a:13:02:63:32:b2:ea:3a:4d:46:2d:f8:70:8c:e9:
                    c9:c3:32:7d:b8:74:0d:17:cc:34:e5:0d:ec:9a:08:
                    7b:fa:c9:d2:30:3a:9c:80:b9:e2:e7:71:1a:76:7d:
                    b3:df:60:dd:de:16:09:db:d3:e3:fa:ef:b9:8e:e6:
                    1d:26:8c:4a:de:28:5c:f0:51:e8:4b:8e:7f:a5:54:
                    44:50:ef:6a:c1:28:3a:96:bd:e2:ad:a5:61:c3:22:
                    5e:00:88:ad:03:99:a8:6f:71:51:ba:c1:2a:db:10:
                    8c:ad:65:d5:5f:3a:7a:91:31:c8:c8:85:39:ca:0b:
                    4a:f0:49:e2:5b:11:9f:7a:fe:6f:f6:75:d2:16:f7:
                    81:6e:1d:c7:0f:ea:38:02:70:b2:47:2a:c4:a9:59:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DD:EB:C9:12:5C:B6:F4:15:0C:17:88:D7:D5:D6:91:A7:A1:7A:D6
            X509v3 Authority Key Identifier:
                keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:87:54:62:40:3a:26:b4:b3:36:67:ed:c5:65:6c:a1:27:88:
         3e:b4:b6:45:a2:2b:7c:86:2b:c3:ae:8b:25:28:12:e2:6d:f3:
         d7:a4:07:a0:65:31:1d:67:c5:58:f1:98:7a:d5:99:ba:12:ae:
         ec:61:dc:8e:73:f5:4a:33:b7:a0:a3:60:ab:8c:c9:f6:e5:61:
         10:59:1b:b7:44:de:5d:98:ad:4a:6d:eb:50:62:e8:f3:db:63:
         92:03:a4:05:dc:cc:f9:60:e6:2e:2c:89:67:5d:a8:f1:86:c0:
         1e:32:2e:fd:85:87:9e:90:b3:ff:b2:3b:96:3b:1b:de:22:f2:
         1b:0d:8f:0b:3c:0b:12:1b:cd:0d:f3:00:3d:93:d7:00:68:b5:
         49:ce:90:b4:1b:cf:e7:e9:45:f6:80:d2:f5:13:7a:7c:d6:f7:
         79:ed:a9:4e:1a:4d:b0:76:81:68:0f:fc:9c:66:6d:dd:c4:64:
         64:b7:22:f8:6f:91:97:9e:2f:fb:5a:dc:5a:b3:bb:88:80:ee:
         19:91:42:1b:78:48:97:aa:2d:eb:7f:be:fa:c9:b6:11:49:12:
         d6:ec:3a:ab:bb:8c:80:08:97:48:ad:87:a9:97:46:ec:4c:e6:
         d3:31:98:7f:ad:3e:f3:cf:ac:b8:ac:51:08:6f:a5:58:d4:46:
         b4:03:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:25 2025 by rpki-client