Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
File:                     B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json)
Hash identifier:          ejfw1u+S/G5yJNUh5a7WQwN9lewXIV0XiXuQJ1HaqoY=
Subject key identifier:   A8:A6:6A:5A:3D:BE:17:17:F5:0E:26:D9:38:B4:1E:60:32:61:07:F9
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Certificate issuer:       /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial:       019921B1F4496A3ED1D695DCF870B1FC85BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 01:02:14 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:14 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:14 +0000
Files and hashes:         1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: +sje5HEVG+LQarYwTT+wETCCqFY/Hx9f/tUzx/hK0ps=)
                          2: wfzCH1I_jaacEoQG0qX5DBfYP5Q.roa (hash: lkjeD8VK2uApBBO5OoQq9Fe2IWIHnY1S+YXHFJmJj3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:f4:49:6a:3e:d1:d6:95:dc:f8:70:b1:fc:85:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
        Validity
            Not Before: Sep  7 01:02:14 2025 GMT
            Not After : Sep  8 01:02:14 2025 GMT
        Subject: CN=a8a66a5a3dbe1717f50e26d938b41e60326107f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:52:9c:8f:48:82:7b:fb:5c:ae:62:5f:32:
                    06:6d:3a:e9:cc:92:16:2a:db:67:c6:db:18:cc:62:
                    99:f6:c3:be:bd:89:e5:b4:a7:3c:14:c9:13:b1:e9:
                    b3:d1:cc:0e:0a:ac:e3:6b:cf:24:a2:c2:d4:42:d1:
                    e7:b6:35:84:7c:50:d4:cf:d0:d0:b7:8f:57:4c:41:
                    7c:ba:d6:6d:71:d7:b8:cd:e2:f4:f0:1e:b2:78:bc:
                    06:8c:6d:81:23:3f:d6:ce:30:71:29:5e:d1:9d:fd:
                    30:d4:62:70:5b:04:fd:ce:db:db:d9:a2:01:3a:ad:
                    3d:55:b1:8a:44:1a:03:95:27:96:82:61:01:0b:01:
                    58:b7:07:cb:3d:68:cf:ce:83:d1:59:b9:f7:07:39:
                    2c:c6:de:22:0d:20:a9:20:7b:4d:47:c7:7f:3f:23:
                    3c:01:23:6f:2b:b9:f1:cb:40:e1:1f:f3:2f:7a:92:
                    3f:32:9d:bd:e9:67:a9:87:53:9b:b9:e0:3c:68:a4:
                    f3:09:c2:b2:7c:bf:63:0b:9b:b8:69:89:66:bd:b8:
                    a0:db:23:7d:0b:f8:4e:37:54:ea:96:f2:c7:28:9b:
                    f7:d3:0a:86:7d:92:d1:da:45:fa:26:e5:cf:58:1b:
                    93:38:1f:f2:f9:47:24:1d:e1:23:5a:63:52:e9:68:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A6:6A:5A:3D:BE:17:17:F5:0E:26:D9:38:B4:1E:60:32:61:07:F9
            X509v3 Authority Key Identifier:
                keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ff:20:4d:d9:4e:63:4f:12:7a:49:10:8b:c3:0a:0c:e9:4a:
         bb:f3:25:27:88:ef:63:2f:e6:23:03:cb:09:5e:e2:c7:ae:74:
         2c:13:dd:ca:84:41:40:1d:bf:45:5e:b8:ed:99:64:9b:e0:32:
         04:82:ab:b5:11:f9:e8:b3:ac:01:93:cd:47:e0:da:1f:53:46:
         f2:c8:42:85:6d:f1:22:6f:3b:0e:b4:02:70:51:ae:13:23:35:
         6c:29:81:4c:25:9f:81:55:37:10:cf:95:09:54:c5:f7:54:5e:
         b5:c2:29:a3:ea:d5:de:04:ad:9d:21:d0:41:f9:8b:c4:e0:ff:
         25:79:a3:9f:7a:68:1c:e5:e6:a1:f6:d3:3f:04:5d:c0:df:8a:
         54:b4:b8:a2:cb:69:be:0c:36:56:00:9e:b0:dc:12:26:64:ea:
         7a:53:51:32:05:cf:ac:40:9f:89:69:3f:a6:14:ca:f7:f3:b5:
         b7:b1:eb:ff:07:19:7b:c2:fd:fa:d3:3e:36:0f:86:b4:44:4f:
         e0:73:79:0b:da:0a:aa:32:f3:13:b1:61:6f:53:2f:e9:4d:ee:
         e6:ea:bd:9b:80:b9:67:f9:7e:83:1e:3f:96:3c:5f:0b:7e:14:
         0e:02:62:3f:a7:fd:61:f1:e4:ff:d8:a5:15:16:cd:f8:4c:97:
         7d:3d:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:38 2025 by rpki-client