Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File:                     d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier:          i5u96UBmwfYSLkhr1D980gx1QDnrk7q35nRsnywFG1g=
Subject key identifier:   8F:A9:11:27:18:C1:DD:30:1E:93:C6:76:B3:03:F8:CF:B3:3E:65:64
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       01993501ECCB56474DEF5E11A69B044D8AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number:          0D64
Signing time:             Wed 10 Sep 2025 19:02:22 +0000
Manifest this update:     Wed 10 Sep 2025 19:02:22 +0000
Manifest next update:     Thu 11 Sep 2025 19:02:22 +0000
Files and hashes:         1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
                          2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: Pc73H9Ht1VSz9xuhdldwTJK0v7zutCa/qo6z5nSYwNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:01:ec:cb:56:47:4d:ef:5e:11:a6:9b:04:4d:8a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Sep 10 19:02:22 2025 GMT
            Not After : Sep 11 19:02:22 2025 GMT
        Subject: CN=8fa9112718c1dd301e93c676b303f8cfb33e6564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:be:d2:75:ef:c2:c7:19:35:ad:b0:ed:51:
                    4c:3e:41:f2:0d:88:6c:9c:b1:40:2a:54:95:ee:b8:
                    91:7d:a0:cc:88:b3:87:1a:7c:ac:d2:d7:32:b6:a5:
                    e3:68:69:11:8a:fb:c9:0b:d0:c7:c5:1a:15:8d:d4:
                    39:e3:29:d7:a3:a6:4f:11:3b:a7:88:a9:7d:9a:74:
                    46:dd:e2:0c:fa:05:7e:60:64:29:11:3f:cd:2e:4a:
                    eb:bb:d0:33:90:0c:98:7f:00:05:3e:05:24:e3:13:
                    de:bb:1e:9c:2c:bf:86:a3:89:53:e9:57:19:03:12:
                    c7:0d:da:b5:f4:04:6c:60:55:fe:4f:87:f3:30:04:
                    2d:a7:95:00:86:50:33:82:c7:86:e7:4c:9f:e9:3f:
                    e1:ed:c2:41:c3:bc:c0:13:c9:fa:21:fc:e5:0f:dd:
                    ee:58:80:d9:32:ed:e1:ca:2e:f8:ef:b2:51:c5:d7:
                    6a:0b:b6:a6:d1:b1:e2:c0:eb:df:26:e9:36:9c:e7:
                    37:78:d9:c6:e4:de:75:58:6d:44:9c:b6:de:4c:9e:
                    b0:04:b6:eb:cf:cc:3e:c8:a3:d8:f1:2c:20:4d:b3:
                    b0:f4:de:8b:2d:f3:f7:28:af:13:40:bb:52:ec:ed:
                    e4:28:c2:31:4a:ae:40:09:9b:18:bb:ae:94:7e:2e:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:11:27:18:C1:DD:30:1E:93:C6:76:B3:03:F8:CF:B3:3E:65:64
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:12:4d:cc:39:3e:95:de:7c:e9:9e:0e:5d:8c:70:fd:29:18:
         fb:73:a5:f6:4e:58:d2:6e:1b:3f:f2:d8:48:36:d2:3a:29:e1:
         ba:6d:d5:6f:92:15:be:30:b9:fa:7c:ae:34:1f:03:f8:16:1e:
         ee:d2:5e:aa:28:d0:78:a3:2c:66:5c:3e:18:4f:83:4b:8f:24:
         0a:96:fe:d8:38:9e:96:be:f3:7e:9b:ac:88:f0:3c:79:1a:58:
         72:46:03:64:44:7d:49:47:6e:6a:62:51:fb:2c:63:f6:1e:e6:
         0c:fd:4a:92:a2:5f:ce:7f:ec:5a:b2:70:83:86:89:73:2b:ca:
         2f:93:df:02:48:64:d8:3b:cd:ec:59:ce:26:9f:f2:6f:42:1f:
         1d:f3:7b:44:f8:81:34:21:a0:0a:59:49:5e:9e:3a:3f:a9:0c:
         e9:f7:43:2a:4b:c5:34:3e:f4:2c:c1:a3:5d:11:01:bc:a2:3f:
         2f:53:2f:4d:97:10:56:3d:79:d2:b2:26:28:51:f9:4d:75:18:
         7a:dc:bf:21:52:35:53:92:25:95:f8:05:a1:a3:74:06:6c:1f:
         5d:16:d5:82:69:63:74:c8:67:06:00:2d:d8:85:1a:fa:45:91:
         85:87:fe:51:8e:05:57:1a:b2:63:2d:8d:ad:bc:25:d6:a8:19:
         3f:d3:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:15:22 2025 by rpki-client