Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          SBnt2bR+HOc+9+pL6MxbCICgXBAYouyMIU2ZMQkuDhI=
Subject key identifier:   3D:8A:0F:72:A2:28:4D:BC:3E:C5:72:56:0D:A0:16:00:B1:F8:E2:8C
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       019A1EACB8CF73CF3789A3C7C2B609D426D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          170A
Signing time:             Sun 26 Oct 2025 04:00:27 +0000
Manifest this update:     Sun 26 Oct 2025 04:00:27 +0000
Manifest next update:     Mon 27 Oct 2025 04:00:27 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: 0jDrkrZRJiDOLxDX8+ZVR4xMl3rBfReBoa4jlGJLxhs=)
                          2: ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa (hash: B9pNA14gZya54yZcULKpZm4AHqIWlkttw9up4kc/opc=)
                          3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=)
                          4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=)
                          5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=)
                          6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ac:b8:cf:73:cf:37:89:a3:c7:c2:b6:09:d4:26:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Oct 26 04:00:27 2025 GMT
            Not After : Oct 27 04:00:27 2025 GMT
        Subject: CN=3d8a0f72a2284dbc3ec572560da01600b1f8e28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:2b:ce:9c:d7:d9:0e:05:ca:88:97:a9:b8:
                    be:b8:89:14:f1:e0:b1:bd:a5:72:14:ff:01:cc:cd:
                    93:36:ed:ee:21:8b:3e:2b:60:9a:14:14:23:8a:58:
                    84:cd:1f:71:70:08:b1:fc:eb:cc:49:ac:35:86:f8:
                    5e:b8:f3:a9:d6:a4:3a:d8:96:6a:71:cd:b9:29:80:
                    a0:87:45:f4:9b:37:5b:35:cb:0c:e9:34:9e:3b:c2:
                    96:6d:ab:69:45:5f:38:62:8c:6c:6d:9c:9b:89:ed:
                    aa:de:8f:1d:b3:a4:72:51:b0:14:78:69:4b:e4:37:
                    76:24:c5:dd:86:4a:93:70:70:cd:19:00:1f:e6:dc:
                    89:7d:27:b1:65:cb:e1:2c:7c:6d:be:bf:96:5d:da:
                    c9:ee:ea:0f:a4:11:e6:ad:6d:c2:7a:6e:ec:51:7e:
                    b7:81:da:29:2d:60:b4:1f:15:6e:c9:a0:2d:a3:43:
                    c3:7a:1c:3e:1d:5e:8d:45:35:d3:26:3b:5c:e6:e1:
                    08:78:2a:fa:e5:66:ed:1f:08:71:72:6e:2f:05:9c:
                    ee:70:70:91:4a:ee:4e:1b:4a:e2:4d:31:6f:a3:9b:
                    23:90:f5:76:8b:1d:42:90:42:12:6d:08:f9:fa:72:
                    89:7c:79:5d:87:87:40:80:07:51:3e:75:54:2a:8c:
                    4b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8A:0F:72:A2:28:4D:BC:3E:C5:72:56:0D:A0:16:00:B1:F8:E2:8C
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:09:ac:97:0e:20:73:7d:10:15:1c:39:0f:f4:ed:54:19:8d:
         fa:02:5d:c7:9d:a8:d2:90:8d:37:fa:9c:99:d6:ef:07:a1:93:
         3b:0b:d7:a5:7f:22:f1:3d:f0:5b:b3:d0:00:eb:e2:7d:8a:df:
         82:40:11:fc:2e:4e:af:bd:2d:84:6a:47:1f:0d:f4:0e:8a:51:
         6b:55:a7:1d:49:d4:df:f2:e8:00:86:72:00:07:4c:9f:a2:de:
         88:a9:c5:a3:97:0c:8d:c5:01:e3:7c:77:ce:4f:ac:42:73:a1:
         06:af:4b:47:d7:29:76:5a:45:be:dc:51:27:2f:0c:13:fa:bf:
         f7:d2:63:46:65:95:8a:62:13:f3:c5:a8:81:6f:bd:54:14:c4:
         a0:f2:a8:98:03:7c:0c:79:4d:6d:3a:df:3c:4f:64:4b:e5:10:
         32:95:17:41:a0:0d:e1:2f:d0:fb:1a:76:f6:f6:5a:2c:19:d1:
         85:a5:b7:23:2c:4a:ef:1c:f0:be:d9:d9:23:82:9a:8a:db:c9:
         82:89:fb:79:ba:d7:7f:74:ad:82:82:76:2e:6e:de:ea:c9:e2:
         97:ae:23:be:dd:cc:42:5f:f8:f7:21:fa:bf:40:b6:e9:79:b1:
         62:57:17:cf:b0:54:0e:85:d6:c1:a2:c4:ac:22:cc:39:f7:50:
         83:b8:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:24:08 2025 by rpki-client