Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File:                     3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier:          /74m/+rR+8fx5h+GaD9cOvkIhe/ygSLln4HK2VJfWf4=
Subject key identifier:   07:09:5F:6B:2A:AD:A6:34:F7:C1:54:C6:D2:17:FD:6F:9E:2C:84:61
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       0198D473DD4034275A2B619D3749A2EF913E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number:          1654
Signing time:             Sat 23 Aug 2025 01:03:39 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:39 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:39 +0000
Files and hashes:         1: 27nlRHwxg0E9Q8sg08KsIM7uurM.roa (hash: S/euVGTNqJg3LcazblgCESHTj7tHb3XsTieuaVZKJ7c=)
                          2: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: w+ui9DOEaywLRpsGQeJA/2NQDZ9v16ZnZhtsadTP+Jc=)
                          3: cb_zDnKlQ9maV_mcPiyN2HwpRxo.roa (hash: rr7OeDKsSm5RUPgVy2VLBciOmsBRvc5YKTQcvs96n0U=)
                          4: ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa (hash: dL+5O6eKdQJWgkq0JqtkXhyJzAf/MU7XQ0/GDtElRTc=)
                          5: qGOQ_yXUb9fqfdc0pjv8GkkFrgA.roa (hash: 833QRTQTY31+HWX8nRUFCr/VNiol8C4z2kqd75zyrgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:dd:40:34:27:5a:2b:61:9d:37:49:a2:ef:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Aug 23 01:03:39 2025 GMT
            Not After : Aug 24 01:03:39 2025 GMT
        Subject: CN=07095f6b2aada634f7c154c6d217fd6f9e2c8461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:45:15:86:61:4f:f8:f8:11:fe:e2:d9:cc:
                    bc:43:9d:1c:3e:59:7b:a6:27:92:18:76:b0:a7:21:
                    70:ab:40:a6:47:17:12:f3:61:07:0c:f6:49:04:1e:
                    66:e0:64:1d:4e:40:75:9a:bc:f7:4b:b5:13:3e:ed:
                    79:ed:54:82:e0:ec:97:18:6a:03:f8:3e:08:c7:69:
                    3f:31:88:fc:59:19:83:fd:0b:6c:4f:cf:39:a9:90:
                    76:69:99:dd:c7:2e:47:e0:bd:cc:d7:45:32:ad:93:
                    46:4d:ec:6a:02:66:55:f4:d5:ff:fe:25:cb:96:ad:
                    49:d2:32:76:a0:b3:c4:d8:9c:39:f9:c3:46:6a:7f:
                    38:67:ca:26:b6:d2:2c:2a:e7:35:2e:88:8e:ce:81:
                    c6:db:23:2a:47:89:72:49:b9:9e:dc:c7:58:14:15:
                    67:08:6f:b5:e8:92:de:e8:ee:2f:d9:f4:6d:51:cd:
                    f1:41:72:07:eb:db:11:ac:51:13:40:46:48:d4:a9:
                    f8:33:dc:19:83:fd:07:8b:5d:50:3e:e6:37:f2:15:
                    f2:cd:6d:0c:ca:b3:f6:00:ee:bd:96:d0:00:b9:e8:
                    21:b1:df:f7:ce:91:84:0c:cc:5f:b1:98:25:0e:dc:
                    c5:68:1e:a8:08:6c:a1:a3:62:b0:b9:18:23:5d:05:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:5F:6B:2A:AD:A6:34:F7:C1:54:C6:D2:17:FD:6F:9E:2C:84:61
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:06:3b:9e:1d:c1:06:24:51:79:a4:09:c7:86:99:1b:8b:0f:
         9c:1d:d5:aa:71:b8:54:63:f2:da:17:6a:11:61:0c:92:97:e6:
         a0:2b:4d:89:37:56:ea:76:3c:68:24:a8:13:df:4e:bc:b5:98:
         d4:ff:b9:28:08:b7:09:de:96:bb:2c:77:87:77:5e:a3:a9:05:
         4c:01:03:7f:28:af:e1:3b:92:1b:69:ec:b6:70:47:e8:e2:5f:
         24:64:69:b4:33:c0:97:96:fe:43:02:62:4a:61:70:0c:a6:00:
         e3:b1:40:67:9b:f7:a2:a4:34:69:8a:18:02:ba:9c:cd:af:6b:
         14:8d:6b:ea:bb:5c:db:83:2f:a4:0c:2e:17:93:e5:f8:98:c3:
         d8:e5:97:56:7b:d5:4b:7a:db:da:64:e2:0d:60:9c:d5:2d:f4:
         78:da:86:37:a8:4b:57:23:eb:be:28:21:5d:b4:12:3d:e5:3e:
         04:3e:3b:c3:e2:74:ff:b9:47:fd:58:d4:d8:9e:e7:d1:e1:e3:
         6e:ff:02:59:bc:fc:e9:f6:6f:95:53:d4:66:24:08:84:01:ae:
         f9:0f:95:56:29:c8:16:99:10:de:ba:c9:57:5b:0c:67:80:97:
         f0:a7:e9:70:0b:25:6b:a3:bd:d3:ee:95:44:b0:46:a4:3e:ad:
         e6:a5:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:04 2025 by rpki-client