Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File:                     3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier:          OOoFTm6bFGHIy+COsqXy9iOPN42uq4TRO4F2uI1/sWU=
Subject key identifier:   35:6D:04:BB:27:2B:D6:C5:FB:5E:7E:0F:6B:94:3D:9D:AA:DE:E7:E2
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer:       /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial:       019A01B4D61FD3EB67B9E65F9AFD1DF6F333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 13:00:19 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:19 +0000
Manifest next update:     Tue 21 Oct 2025 13:00:19 +0000
Files and hashes:         1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: Jeu7XEpmdW/e6PNADJ18fuBdvTyKulZENnsTSPbySUU=)
                          2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
                          3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b4:d6:1f:d3:eb:67:b9:e6:5f:9a:fd:1d:f6:f3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
        Validity
            Not Before: Oct 20 13:00:19 2025 GMT
            Not After : Oct 21 13:00:19 2025 GMT
        Subject: CN=356d04bb272bd6c5fb5e7e0f6b943d9daadee7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6e:ff:ad:1d:7f:94:1f:2b:dc:47:fa:fb:c8:
                    47:ca:31:c7:77:96:89:dd:80:c6:79:97:44:a9:b4:
                    be:4a:53:bc:b3:0a:51:36:3a:db:49:6b:a3:1c:12:
                    17:69:cb:a6:94:87:24:04:58:e5:70:c8:04:7a:92:
                    3c:f3:5e:d5:aa:24:2c:6e:76:35:47:72:81:79:16:
                    2a:5f:e4:ad:d6:77:27:96:eb:f7:30:b5:82:0e:65:
                    fb:fc:6d:82:5d:59:cf:1c:52:c9:c6:0c:48:ed:c0:
                    e3:4d:02:1c:41:76:f1:40:1c:e3:96:f7:05:c3:11:
                    56:c8:95:08:5a:e5:4f:3c:53:35:b7:f3:7d:34:f7:
                    89:cf:a9:8a:aa:8a:48:8e:a8:fa:f3:63:a2:89:a7:
                    8a:73:0d:cf:72:1a:c3:77:f8:87:d8:f3:b9:67:c1:
                    d5:19:38:84:50:64:4e:03:de:84:56:51:7d:d4:91:
                    df:d3:4a:96:28:45:45:60:d3:cc:0a:75:b4:5c:32:
                    3b:b3:0b:6e:88:39:2d:eb:dc:64:60:0f:82:27:3b:
                    be:cc:72:f0:ac:8d:7e:e1:1f:c5:c2:73:a4:ad:5a:
                    e7:ae:ec:bb:aa:d2:cc:8c:61:ed:71:1f:12:bf:dd:
                    62:62:07:87:6b:9c:15:96:9b:a9:be:3d:7a:0d:f9:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:04:BB:27:2B:D6:C5:FB:5E:7E:0F:6B:94:3D:9D:AA:DE:E7:E2
            X509v3 Authority Key Identifier:
                keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:1d:b6:2b:88:a9:cc:e3:fc:e4:fa:ba:0a:7d:5e:a2:f5:a5:
         0e:b5:04:c9:ba:66:48:0b:37:0f:aa:cc:94:af:38:52:43:ff:
         75:ba:72:52:ad:a8:ed:d8:89:e9:90:c0:1e:83:fe:cc:92:ac:
         a8:62:8e:b2:02:5b:1b:31:0a:33:82:9b:d4:2f:df:fa:33:7f:
         e5:64:2c:30:77:0a:aa:27:c5:4f:fd:ab:c6:d5:f6:e8:61:c4:
         82:4d:32:6f:72:2f:09:aa:d0:6b:d3:ea:f3:1e:82:c3:ca:c1:
         76:69:70:86:70:b1:26:cd:19:db:6a:f3:f7:fb:b4:fa:d0:4c:
         88:a7:e3:69:41:ac:b3:fa:83:b4:f8:ca:dd:c3:b4:e1:ef:b8:
         b6:16:27:20:5f:d4:a0:e9:9d:60:3e:b8:08:00:14:fd:5a:75:
         c9:77:6f:a4:a5:03:6b:6a:04:2f:c0:1b:b5:88:1b:47:d7:1d:
         25:8b:8e:17:35:78:f7:29:6e:b0:5b:26:5d:9d:c5:b7:4d:d2:
         95:6c:47:f2:13:0a:45:f3:95:6c:8b:60:e8:08:42:14:c1:11:
         99:b4:e4:53:a3:cf:fc:c7:b0:42:ea:00:32:cd:a7:f4:9a:80:
         2c:a8:e9:d3:db:ae:f7:1d:22:34:ce:7a:3d:9f:b7:1a:aa:8c:
         19:36:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:09 2025 by rpki-client