Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File:                     3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier:          /3EW/TyIBygh64l5dgyI2DFIXtpsLeTkAycPzd0OkJs=
Subject key identifier:   BD:25:59:23:F2:35:4C:5A:A5:3C:1A:67:BE:34:4E:15:88:CD:8B:E8
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer:       /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial:       0198D5161F0BBA3E467272182FF2E6CCB31C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number:          0BBE
Signing time:             Sat 23 Aug 2025 04:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:53 +0000
Files and hashes:         1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: sg2mBT6aS5C67qdLNgs+9TugHc7sm9giNup4IfSvdJA=)
                          2: wkcnsTzQjgo9eEySS50APSZKqWQ.roa (hash: SKv++65s2nAU0vbkJDBqrGiZUMw6xX7YKBnglQkJRuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:1f:0b:ba:3e:46:72:72:18:2f:f2:e6:cc:b3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
        Validity
            Not Before: Aug 23 04:00:53 2025 GMT
            Not After : Aug 24 04:00:53 2025 GMT
        Subject: CN=bd255923f2354c5aa53c1a67be344e1588cd8be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:5a:28:82:22:61:d1:be:05:14:85:c4:63:
                    12:d5:c8:fa:0a:2e:90:29:da:ed:2e:fb:f8:c1:1d:
                    0e:d4:05:09:ee:cd:4f:e8:44:88:ac:06:49:14:23:
                    c2:56:28:f5:76:f5:49:97:23:fb:bc:83:fd:b5:7a:
                    08:ad:8c:27:62:cf:9f:ac:7e:82:cc:64:af:17:20:
                    8a:89:e1:d3:af:c4:e5:b1:e4:91:aa:50:fe:8e:22:
                    bf:c8:c1:26:29:07:e4:d5:b3:87:5c:2d:60:d5:26:
                    22:8d:ca:8d:05:e2:15:5f:98:a2:57:f1:73:91:a3:
                    c9:08:67:42:51:d8:90:37:2a:c6:d8:87:97:6a:fe:
                    cd:3b:d5:34:d4:f7:b3:44:6c:5c:37:83:9e:d6:8e:
                    41:80:5a:b6:4f:63:a8:d7:f8:4c:22:e3:67:e5:8e:
                    97:5f:f9:6b:26:6b:b0:11:90:cb:01:af:75:32:89:
                    cc:19:cb:b6:82:f6:f7:cd:4b:f3:60:a9:ab:39:8a:
                    76:b8:7f:d9:ff:91:55:62:ac:00:05:dc:19:18:76:
                    7a:9c:4c:3c:05:fd:52:f7:59:55:9b:d7:8c:a3:9f:
                    3e:c4:8c:bd:f6:26:09:d3:c1:3d:2f:b4:bd:83:54:
                    c5:2c:af:ed:c7:88:e7:5c:f3:b5:d8:ca:b6:98:b0:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:25:59:23:F2:35:4C:5A:A5:3C:1A:67:BE:34:4E:15:88:CD:8B:E8
            X509v3 Authority Key Identifier:
                keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:7a:de:85:61:77:29:4e:65:0f:b8:cf:27:fa:78:f8:5d:
         fd:9c:05:5d:e6:98:9c:d6:51:f7:c9:0d:9f:d9:68:da:99:2b:
         c8:43:2b:e4:00:dd:0b:b3:e8:dd:d7:d5:db:1c:7e:ea:8d:4b:
         d0:f2:43:66:e4:b6:d5:3b:a4:8b:91:4a:fb:df:13:1d:13:1a:
         21:33:bf:63:e9:d4:ea:e3:87:f0:89:54:86:64:dd:c8:84:34:
         59:84:eb:52:36:7b:f5:39:68:32:9a:99:e7:97:52:6f:4a:1c:
         cb:3f:54:92:90:2f:5a:42:a9:ea:f2:49:ac:3a:9b:fe:b8:b5:
         df:e0:e5:7b:60:8e:2b:22:8a:a8:99:b9:59:7b:da:18:bc:fc:
         08:80:79:96:c6:e4:25:6c:73:95:1c:91:5d:75:05:59:ea:6c:
         fc:17:70:5b:ba:aa:5d:c4:35:28:10:33:ba:ae:cf:eb:54:3c:
         b3:a2:ab:6e:2d:c6:d4:fe:83:1e:ed:8d:04:02:4d:1f:a1:6e:
         76:1d:77:af:d6:87:e1:c0:ba:c4:ec:8d:6f:2a:e2:72:0f:5e:
         d2:5c:a8:9c:04:81:ae:96:38:27:01:a7:4a:79:7d:d9:79:13:
         17:71:7b:8a:de:5c:5c:ba:bf:f8:ff:0e:49:50:35:02:4a:e5:
         bc:9a:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:59 2025 by rpki-client