Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          zyhLTZuLhzup6abQAVHLo5WqtDLUOWFnJDowS3GZrLY=
Subject key identifier:   EB:13:77:80:92:F3:E1:6E:92:FD:3A:B9:66:E5:5F:74:68:A3:78:16
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       019922C377CF84235B637421D89CEC43BDF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          0847
Signing time:             Sun 07 Sep 2025 06:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:59 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: OBefSBu/DXCWhL+fWfkNqaPxKpUJTTJog+9fqg49SNk=)
                          2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:77:cf:84:23:5b:63:74:21:d8:9c:ec:43:bd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: Sep  7 06:00:59 2025 GMT
            Not After : Sep  8 06:00:59 2025 GMT
        Subject: CN=eb13778092f3e16e92fd3ab966e55f7468a37816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fc:7b:91:de:2f:3e:ab:42:5e:4b:9d:70:6e:
                    00:b9:1a:36:33:c4:0a:ce:f0:c3:12:a3:6b:a7:ac:
                    70:8d:08:aa:97:5c:51:10:80:46:9a:cd:90:c8:07:
                    bc:32:46:1a:1f:62:42:50:a2:96:2a:ee:c9:55:25:
                    4b:e9:5b:9f:22:33:c5:3e:09:89:63:b9:dc:1c:58:
                    4e:f2:0c:aa:71:24:0a:26:7d:0f:88:01:7e:f6:a8:
                    10:d2:d8:e7:50:72:b0:4a:1e:67:45:e6:90:14:b3:
                    37:cf:f6:11:9e:35:12:cf:f5:26:26:b6:de:cf:85:
                    3c:36:2f:c7:60:08:c5:79:fb:da:fb:e5:a1:37:9a:
                    db:3d:fb:40:53:39:fb:f2:49:bb:d8:7c:b0:81:b6:
                    67:0b:b5:84:18:0c:b7:54:20:07:e4:1f:dc:c1:22:
                    a8:f1:a2:27:d3:ab:3c:38:26:6b:ef:91:7a:a1:66:
                    ab:96:83:3c:26:5f:d1:8b:1b:e2:06:ca:aa:c3:ef:
                    8f:b9:c8:aa:a1:f8:28:b6:b0:ef:5c:2a:be:7e:fc:
                    39:a6:6a:f7:94:c0:2f:ff:60:42:c5:f8:7e:e3:a9:
                    20:4f:d7:aa:b8:b6:5b:d4:55:1c:58:24:89:ca:21:
                    b8:88:02:13:76:81:5a:02:0c:0f:0a:11:4d:08:27:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:77:80:92:F3:E1:6E:92:FD:3A:B9:66:E5:5F:74:68:A3:78:16
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:99:b1:35:62:f2:7b:4c:47:29:4d:84:20:c9:44:ee:68:1d:
         eb:77:54:8b:90:4c:67:a4:9f:5b:d3:46:95:77:23:e0:ce:81:
         19:e5:f5:16:cf:0f:fa:ae:15:17:72:5e:d5:82:a4:95:c5:82:
         49:13:49:07:ce:c3:27:a3:d6:88:4b:33:9d:cf:c9:07:2f:0a:
         f5:2d:9e:e7:4a:f6:ce:70:ae:67:b2:19:4b:5d:0b:52:8b:7e:
         74:a0:a6:a1:19:d3:29:ea:84:5d:f9:f2:13:20:75:fc:c2:4d:
         f3:0c:57:e4:c1:1f:28:c6:02:05:53:ec:12:ea:aa:ba:0e:cd:
         82:59:b4:b6:8f:7d:cb:75:4e:f1:2e:3b:2d:9b:a5:9e:8d:f8:
         a9:08:0c:67:6a:8b:5b:70:a9:89:a3:69:40:f5:c5:fb:3d:87:
         e5:85:d8:b0:43:f7:e5:df:f6:f5:57:02:20:52:c2:93:91:71:
         a0:62:e9:3f:d5:5b:1d:a5:2a:82:9b:2e:5c:5e:b4:6b:15:09:
         87:71:dd:4b:e2:d6:18:6d:e8:e4:6f:2e:53:68:9d:98:bb:4e:
         62:fc:a4:f7:d7:af:d3:2f:52:50:25:6f:37:04:9d:59:39:33:
         ff:68:6e:c5:2a:9e:17:e5:65:82:b7:77:a5:f4:89:44:11:91:
         5e:48:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:05 2025 by rpki-client