Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File:                     3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier:          d2Wv/fP21F1gMx/I3xngAe5HHFjT+mhc5MEQWOFkVaI=
Subject key identifier:   9E:5C:CA:7A:A9:75:3B:C9:75:92:89:5B:A0:CF:97:ED:96:FC:39:25
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       01991C8ABBB1791E5905231F3B864BB35565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number:          1237
Signing time:             Sat 06 Sep 2025 01:01:17 +0000
Manifest this update:     Sat 06 Sep 2025 01:01:17 +0000
Manifest next update:     Sun 07 Sep 2025 01:01:17 +0000
Files and hashes:         1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
                          2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: 7sE7HmWRmd7hby/qO00nWvKTSsw/IgTYEfcDQZgScxo=)
                          3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
                          4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
                          5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
                          6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
                          7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
                          8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:8a:bb:b1:79:1e:59:05:23:1f:3b:86:4b:b3:55:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Sep  6 01:01:17 2025 GMT
            Not After : Sep  7 01:01:17 2025 GMT
        Subject: CN=9e5cca7aa9753bc97592895ba0cf97ed96fc3925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:45:18:1e:ce:06:7c:d6:69:c7:c0:dd:68:
                    b1:35:5a:7b:cd:85:0f:3e:d6:1d:ef:9b:5e:cb:f9:
                    ba:d4:84:d1:d3:83:1c:d4:ac:d6:9c:d4:50:67:da:
                    60:ff:cf:60:38:07:49:66:d5:2a:09:86:9c:34:87:
                    08:d7:78:1d:e9:7f:73:6b:cf:25:c9:25:4d:74:07:
                    f7:61:cb:ad:af:7a:47:2a:74:07:ad:ea:be:08:92:
                    59:c3:19:e7:e2:93:04:b7:ae:6c:26:ab:90:09:26:
                    45:73:87:bb:35:c9:f6:9b:69:f0:e5:8c:fe:50:9c:
                    fb:0c:fd:00:db:51:b3:c9:05:ec:79:0b:c0:3b:f7:
                    0f:b8:d4:7a:a7:d9:a6:89:40:cf:bc:f9:ad:42:eb:
                    e6:4f:ae:4c:4d:e7:98:d2:42:e5:36:02:ad:20:f1:
                    9d:91:94:4a:e0:4c:98:98:12:13:b7:0a:0e:d5:ef:
                    6d:25:30:b9:ec:c3:72:1c:d0:d8:37:fa:31:ca:8d:
                    4c:d9:f0:b5:18:12:e4:35:92:d5:5f:ea:8a:79:01:
                    50:1e:54:99:97:bd:87:ce:da:43:ed:b5:84:f3:87:
                    41:9b:1f:4e:ca:81:25:57:2e:58:ea:ee:30:0a:d0:
                    f8:73:67:d2:e7:7e:51:f9:02:b2:d0:ec:1d:94:dc:
                    93:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5C:CA:7A:A9:75:3B:C9:75:92:89:5B:A0:CF:97:ED:96:FC:39:25
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:7f:eb:be:fd:ad:f7:93:ea:84:65:20:3a:62:44:3c:0e:
         ae:34:c1:34:71:a6:0d:70:a2:5e:eb:c3:12:8c:39:75:0a:46:
         2b:9d:8b:a7:a5:ff:3b:37:d4:54:23:35:0a:a4:d4:83:df:94:
         0b:fc:d6:4e:5a:e1:e7:34:f0:9d:05:ff:99:e2:fc:81:9e:ee:
         96:d2:9d:98:e2:2d:e0:dc:e5:d0:80:5e:2d:7a:9d:ad:56:5b:
         eb:37:d7:67:dc:8b:3a:24:a8:34:7c:38:ac:7b:a5:81:39:e6:
         e3:ae:4f:9e:b8:5c:4e:5c:70:10:29:c4:29:cd:a0:c6:37:1a:
         e0:68:a6:af:c1:7a:51:a6:38:47:32:ed:2a:08:85:41:18:9b:
         60:ac:d4:01:bc:1e:12:0b:1e:2a:b4:e6:c9:42:bb:59:8c:f5:
         b7:d4:95:da:93:29:11:4b:05:10:d4:38:04:dc:c4:1b:b0:a3:
         f0:48:d7:e0:a0:96:83:f3:6c:8a:b7:55:67:89:7d:dd:c3:36:
         72:bd:51:2b:5c:b3:78:dd:9e:09:99:27:9b:91:aa:de:b8:a8:
         a3:17:52:95:1f:2e:9d:b0:1a:c3:cd:cb:eb:5a:4a:cb:58:0e:
         34:e3:98:2f:cf:4a:50:1f:a9:f6:f6:d9:35:7e:9d:ea:57:57:
         93:58:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:01:57 2025 by rpki-client