Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File:                     x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier:          839cJfkOL0egw3lyOzSljCswkeu3oF+TfzDVVQVCkgY=
Subject key identifier:   9C:54:EF:D4:5B:DC:69:F9:46:94:E7:53:60:08:10:70:1B:C4:C2:DD
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer:       /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial:       0198D660CA160051B7388FC02467357DE6E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number:          0AF0
Signing time:             Sat 23 Aug 2025 10:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:04 +0000
Files and hashes:         1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=)
                          2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=)
                          3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=)
                          4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: E7QgKBIAVd1qC4AshryGhsnlyB9kK8sJTA4c/8zbOYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:ca:16:00:51:b7:38:8f:c0:24:67:35:7d:e6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
        Validity
            Not Before: Aug 23 10:02:04 2025 GMT
            Not After : Aug 24 10:02:04 2025 GMT
        Subject: CN=9c54efd45bdc69f94694e753600810701bc4c2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:1c:1b:1b:8f:84:91:34:30:89:9c:2f:8a:
                    23:61:ad:59:11:d4:b8:90:85:b3:3b:65:b5:46:d5:
                    d2:52:85:fa:61:e3:59:de:d6:d1:f7:59:c5:cf:c9:
                    00:7d:8b:db:b9:8f:2a:16:c8:f1:cf:a2:27:ac:e0:
                    b3:e3:9a:bc:62:d1:1b:d6:a3:13:a1:f0:3b:7c:d5:
                    c1:63:26:9b:ba:39:79:1c:55:60:63:dc:06:db:be:
                    0b:e8:fc:31:a8:f7:41:76:f1:0b:f7:55:88:b2:bd:
                    13:00:91:a2:19:91:61:36:80:0e:22:08:f4:18:d5:
                    4f:90:ac:4b:dd:c0:e6:91:cd:73:0b:0c:be:67:4b:
                    f4:97:29:2a:9d:df:f2:4d:59:47:0a:2a:22:c3:3c:
                    95:3d:28:e2:94:65:d8:8a:81:e6:97:40:52:32:27:
                    27:53:35:2e:4b:39:1c:18:1d:60:be:11:c2:6f:40:
                    b2:0e:40:77:8d:91:cf:73:e7:81:f7:b7:e6:a1:48:
                    91:1c:44:d7:41:9a:1a:db:42:c7:b9:ad:7a:1d:57:
                    4c:c6:d7:d5:c4:1c:18:fe:54:bd:c8:56:a7:3b:ac:
                    04:31:1a:86:c8:f9:1e:02:4e:7b:e5:9b:59:19:50:
                    d2:39:3c:c6:0d:eb:28:77:4c:54:95:1b:fd:07:96:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:EF:D4:5B:DC:69:F9:46:94:E7:53:60:08:10:70:1B:C4:C2:DD
            X509v3 Authority Key Identifier:
                keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:66:14:c7:84:d6:19:9e:60:5f:a0:4c:c8:67:5c:86:01:
         04:4b:cc:09:ff:d7:da:9f:99:2c:96:04:54:44:7f:6e:95:9d:
         ba:45:b4:c9:3f:68:0e:9a:b8:b2:5b:00:13:97:b2:89:7f:7f:
         7b:58:82:91:b5:d0:32:58:1a:2f:bd:cd:a4:6b:07:1a:f6:37:
         b7:d8:d0:f4:b7:a8:dc:95:62:1c:b9:b3:90:4f:66:17:cd:25:
         93:df:6c:ae:7c:1b:28:ef:2c:b8:cc:b9:85:d8:1b:18:01:87:
         3d:71:59:f1:c4:f1:6b:75:30:3c:17:33:f3:62:8b:aa:c3:8c:
         07:7f:3d:dc:35:f7:50:3b:c3:7b:89:d3:7e:a1:2d:e3:84:ec:
         18:29:db:50:fa:4b:ef:c5:7b:5e:b4:fe:9d:88:23:f2:57:cb:
         e9:91:c6:35:8b:aa:66:c0:10:a3:fa:60:86:82:51:73:c2:ac:
         81:b8:fe:ba:11:60:69:ca:56:51:fa:c9:2d:b3:83:9c:dd:57:
         69:9b:06:98:e8:c6:00:16:6a:ab:fd:02:d4:a0:88:a6:4a:3c:
         d7:ad:df:15:66:e2:cb:17:c9:d5:c1:d1:9f:55:16:b8:e6:79:
         40:f5:f2:58:82:10:05:f8:ff:a8:bf:16:67:6a:b0:49:5c:f7:
         cd:98:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:41 2025 by rpki-client