Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          aPTb1weZgpgJbF23xF0ea2iJFfCjC/iEBhuQi1NrGeg=
Subject key identifier:   04:67:FA:FD:03:1B:76:74:D0:89:92:92:18:FE:59:D0:84:56:49:8F
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       019A228AF82D7FB956C69A264CC62FF01C4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          1707
Signing time:             Sun 26 Oct 2025 22:02:04 +0000
Manifest this update:     Sun 26 Oct 2025 22:02:04 +0000
Manifest next update:     Mon 27 Oct 2025 22:02:04 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: ZSSIGiacqwfdBt0ieN8/7uBnLdKs+D3zJu3BBgIFPzc=)
                          2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=)
                          3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=)
                          4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:f8:2d:7f:b9:56:c6:9a:26:4c:c6:2f:f0:1c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Oct 26 22:02:04 2025 GMT
            Not After : Oct 27 22:02:04 2025 GMT
        Subject: CN=0467fafd031b7674d089929218fe59d08456498f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:34:62:4a:25:49:7c:0d:e4:0c:94:b4:f8:
                    16:46:00:08:27:e9:56:e8:4e:51:9c:7b:83:0c:62:
                    e6:56:c0:21:bf:ee:3a:e7:d2:35:65:7d:93:a4:40:
                    dd:a6:5a:dd:46:0f:e5:79:6d:6c:36:7f:76:11:e2:
                    d7:ec:fc:9a:58:44:92:c7:2d:b8:32:e1:49:69:ab:
                    c3:cb:21:a9:de:c2:d4:c5:56:93:4d:a3:87:e2:bc:
                    77:c9:08:a5:e3:a8:72:e5:b2:db:d8:89:bf:8e:c4:
                    6d:80:3f:81:c2:79:06:b7:3f:61:12:68:10:49:e4:
                    eb:df:71:16:bc:87:ca:8a:1b:ed:31:e2:00:ef:fc:
                    f5:df:04:f7:c8:d3:4d:8e:48:5e:2a:b8:a2:52:27:
                    0e:9c:00:01:c9:93:57:49:bd:45:33:c9:9b:15:c0:
                    07:e6:1b:f4:67:16:48:a5:fe:5a:7c:13:52:05:87:
                    93:b0:d1:f4:48:0e:ba:d0:2c:93:61:f0:90:fe:a9:
                    ae:cc:e7:aa:8f:a6:81:0a:75:32:9a:27:90:b8:d9:
                    db:11:06:2e:42:37:fd:73:06:c9:6a:bf:7f:11:27:
                    d6:71:68:b3:7d:cc:43:c7:e2:89:aa:3d:88:9c:58:
                    d3:a1:37:0b:f7:6e:4c:c1:eb:d3:16:13:87:21:af:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:67:FA:FD:03:1B:76:74:D0:89:92:92:18:FE:59:D0:84:56:49:8F
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b6:08:f0:43:94:39:14:71:62:c6:e4:57:67:b0:87:59:c9:
         98:46:51:d6:82:fc:b1:5b:31:b6:b0:3d:1a:3c:3d:4d:88:80:
         62:de:93:e6:37:6e:5f:e5:c7:e7:b3:85:64:bd:ca:b4:ff:36:
         ef:55:b8:1b:73:4f:51:59:f0:34:87:db:c7:a1:87:b0:e9:8b:
         f2:17:c8:a4:96:bc:2b:47:97:10:d5:1c:c4:22:b9:ac:6e:de:
         2e:0e:6e:c0:b8:7c:b5:42:6d:09:f3:7d:c9:2a:d0:bc:9e:3d:
         2e:f6:3e:d1:dd:50:7a:ab:66:0d:8e:ed:47:9c:99:3f:9e:88:
         eb:e2:74:9a:2f:46:ab:1e:d3:ed:a0:35:ed:d4:9f:06:a1:fd:
         12:7b:ef:e8:5c:ae:03:b7:67:27:97:15:33:dd:4e:0f:4e:18:
         28:00:8d:e8:7b:24:e0:03:67:e9:ca:3f:ae:4b:c1:bc:9d:1b:
         48:ce:d9:9e:fd:98:4a:b3:9e:dd:a1:09:7a:8e:9a:42:9f:32:
         ff:a0:21:05:66:09:5b:b0:cf:ec:2d:e9:1e:6b:29:a5:4e:ad:
         40:88:de:fb:0c:b4:bb:5a:7a:41:0f:3c:c3:cd:4a:76:4e:2d:
         cb:cd:c4:e6:d3:ba:91:7a:8c:41:25:64:5d:bd:30:4a:af:f5:
         8d:db:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:26 2025 by rpki-client