Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          nqpUQAEFKPogkJNub+heYBKE/KLkLPSG/ww52n9/TrM=
Subject key identifier:   66:D5:5B:DB:CB:74:76:47:6C:FD:B5:92:5D:3A:D1:B3:70:86:C9:C2
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       0198C97F505884BD38ED517782F8027C2F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0B35
Signing time:             Wed 20 Aug 2025 22:00:20 +0000
Manifest this update:     Wed 20 Aug 2025 22:00:20 +0000
Manifest next update:     Thu 21 Aug 2025 22:00:20 +0000
Files and hashes:         1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: wq5wecvVscrx/JZualAxyVKKgzPkV073gvAn4OxbCE0=)
                          2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=)
                          3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=)
                          4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=)
                          5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=)
                          6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c9:7f:50:58:84:bd:38:ed:51:77:82:f8:02:7c:2f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: Aug 20 22:00:20 2025 GMT
            Not After : Aug 21 22:00:20 2025 GMT
        Subject: CN=66d55bdbcb7476476cfdb5925d3ad1b37086c9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:2d:7e:d0:4e:11:c1:31:55:00:0f:1b:ea:
                    04:bd:90:3d:65:03:fc:af:ea:53:97:d8:fc:92:a1:
                    69:27:1f:05:e1:be:98:1a:35:92:25:4b:a9:21:ef:
                    c6:fb:65:6e:46:16:c9:51:3d:c9:bf:79:50:e3:28:
                    c5:f2:28:39:69:8e:4d:b2:06:b7:2e:43:31:12:f7:
                    52:7d:3a:41:2c:c8:6a:e3:51:74:71:9c:24:c6:51:
                    fc:72:b5:b2:83:9f:ce:16:98:eb:b4:51:b8:b0:4a:
                    05:b4:f5:64:d4:6e:fd:54:97:83:f2:6b:3b:e9:8d:
                    08:bb:12:6e:11:45:07:82:6d:67:44:92:cc:b9:78:
                    6e:d3:f4:5a:43:8f:92:31:dc:7d:e3:c4:25:c8:d9:
                    31:4a:e5:8c:ff:42:13:91:15:a3:85:29:2e:ea:c2:
                    b8:33:11:a5:80:9c:cd:63:db:44:0e:d0:ef:f8:d8:
                    9c:61:a6:ed:c2:b8:20:bb:96:a8:a5:54:2f:48:f9:
                    fe:99:2f:45:c0:96:4c:7f:9e:ec:4e:cb:71:1a:72:
                    73:5a:73:c2:60:87:78:df:9d:85:2f:96:91:3a:9d:
                    d6:09:9e:81:4c:cd:a7:62:dc:46:e6:aa:d7:26:51:
                    44:51:40:27:03:10:2c:4e:76:9e:cd:6e:2b:75:e7:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:5B:DB:CB:74:76:47:6C:FD:B5:92:5D:3A:D1:B3:70:86:C9:C2
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:74:42:29:e3:3c:08:80:7f:f4:d2:0b:e6:5b:e8:d9:ad:
         83:da:2d:a2:e2:03:18:ad:61:25:ea:60:07:b5:aa:31:86:01:
         98:90:cb:d9:d2:4f:68:f9:d8:3f:8f:19:b8:04:41:b3:24:ce:
         f4:17:f3:c3:f4:72:f7:ba:3e:17:e1:36:a9:0f:b9:28:1f:b7:
         8b:48:39:ce:67:62:2f:53:2f:8f:e0:e7:8a:1c:98:e6:11:1b:
         a8:4b:24:b5:11:0b:84:71:a6:2c:85:a2:f9:02:bf:f6:b0:37:
         84:dc:35:df:e1:56:56:db:20:86:9d:01:93:87:76:bb:1b:46:
         14:9c:42:9b:cd:d1:6c:12:7c:37:40:6f:e0:07:d0:48:05:6e:
         b6:da:b0:20:c4:ca:81:96:4b:40:1f:44:7c:fa:8d:f3:b3:e7:
         3c:3f:60:10:1a:53:7c:73:2e:b0:0d:d3:10:27:bb:4d:08:c8:
         36:3f:8a:45:a2:e3:83:3c:f4:74:9d:0c:fb:a9:9d:2f:3c:e7:
         a0:47:e6:85:75:4b:d2:f2:c1:8a:9a:bf:ce:c6:a4:b2:ca:26:
         a9:69:00:70:19:ac:04:11:55:b4:5b:6c:91:56:01:44:d3:fd:
         c8:48:f2:d1:b3:de:59:ef:c4:7c:28:fa:36:dd:c3:fa:a0:2a:
         28:bd:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:01:56 2025 by rpki-client