Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          VgrBBXn5d+8Hb4/pCziXKoTcxzepwyLUP3lnh5ZEK5w=
Subject key identifier:   9C:E7:5C:38:25:EF:77:DB:FD:7C:5B:2E:F7:0D:1B:CD:D3:1E:DB:B2
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       0199356DF001DC6EF1E0EA335026F1B5983A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          167D
Signing time:             Wed 10 Sep 2025 21:00:21 +0000
Manifest this update:     Wed 10 Sep 2025 21:00:21 +0000
Manifest next update:     Thu 11 Sep 2025 21:00:21 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: ycxO8gLjHRH7Bmt8mblCOT+slf3I+Y/XVFWH0NUMNH8=)
                          2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=)
                          3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=)
                          4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=)
                          5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=)
                          6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:6d:f0:01:dc:6e:f1:e0:ea:33:50:26:f1:b5:98:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Sep 10 21:00:21 2025 GMT
            Not After : Sep 11 21:00:21 2025 GMT
        Subject: CN=9ce75c3825ef77dbfd7c5b2ef70d1bcdd31edbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:50:e3:73:15:e9:e8:c6:4f:2b:fe:75:c0:
                    ef:42:e9:cb:26:41:6d:00:11:e8:59:b4:e6:60:a0:
                    cc:ab:8c:f0:b0:78:7b:5a:71:2c:97:e5:82:5c:5d:
                    95:3d:e8:d2:00:01:b1:99:fc:52:b0:34:b4:b8:1e:
                    d8:42:9e:84:75:d5:0d:c7:d0:be:10:26:17:ed:65:
                    5a:e6:fd:59:81:db:e7:d5:72:21:2f:99:e9:d3:20:
                    ed:7e:6a:00:90:e0:0b:f2:c7:0b:68:15:a5:3e:38:
                    24:52:6d:2f:98:e1:dc:c1:25:ea:fc:4b:8a:ec:5e:
                    75:b6:43:43:21:68:f5:cf:1f:c7:a5:f7:f5:c6:76:
                    01:9b:33:94:ee:72:a9:d5:d5:9a:2e:3b:a9:a1:d4:
                    6c:a3:76:2a:c2:c2:95:10:92:fe:36:9b:05:10:ff:
                    e8:c1:8a:22:b1:88:88:11:55:1b:65:b1:c1:d1:5d:
                    ce:93:cc:fd:0a:a3:d9:85:d5:b6:44:b5:dd:46:e0:
                    7d:76:54:96:cb:32:f4:e9:a5:41:9b:fe:58:df:2d:
                    58:28:50:58:cf:ce:74:7b:39:d6:9b:6d:17:c4:71:
                    17:a6:80:f5:d6:11:af:0c:77:be:1d:7b:ce:b1:8c:
                    23:d6:98:61:52:2c:0b:b8:9f:a4:ef:1c:f9:03:63:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E7:5C:38:25:EF:77:DB:FD:7C:5B:2E:F7:0D:1B:CD:D3:1E:DB:B2
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:50:f2:bd:2f:43:ba:53:8d:17:fd:04:0c:c0:68:5d:80:57:
         c1:bb:dd:17:aa:4b:a2:19:1a:71:41:3d:4f:14:cd:47:91:7e:
         61:31:84:a9:b9:f6:fc:a8:5f:31:04:47:45:84:ec:3c:cc:ff:
         92:84:6c:4a:68:a3:62:28:92:ca:27:48:38:56:fe:ac:be:3c:
         12:fd:a2:e6:50:86:e2:25:1e:97:d0:db:65:ba:b7:74:ae:53:
         6d:8d:1b:58:36:21:b9:09:76:3f:ca:75:e0:3d:e4:75:3b:32:
         dd:6f:bc:51:d5:65:d3:94:c6:71:b4:b3:33:13:5f:ea:63:36:
         68:e2:48:ab:26:07:5e:a4:d7:7a:4a:b7:7a:c2:14:a6:8c:02:
         51:47:ad:04:2f:24:04:ed:c8:47:da:d7:c1:12:14:9b:d7:a5:
         19:12:53:4d:9a:77:4a:13:10:5c:73:86:02:6a:4e:02:62:51:
         5a:2a:b6:b7:a9:b5:82:aa:c5:04:88:6a:fc:ae:31:1c:31:95:
         71:d4:3c:36:f2:24:09:40:d9:4b:74:17:31:7b:64:49:b7:9b:
         19:a0:df:97:ec:2c:cc:c4:39:24:53:26:13:86:1b:bd:6f:21:
         5c:35:97:4e:cd:9a:1a:25:97:52:77:9b:6e:87:a0:7e:8d:b0:
         86:38:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:19:41 2025 by rpki-client