Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
File:                     b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json)
Hash identifier:          H2CsH0yYy7RZQGEWdWqb9rBX6/BzXRuPLkl4pYW3/+o=
Subject key identifier:   DF:D6:FA:F2:A0:AB:C7:94:03:73:CA:96:10:A3:E6:16:41:09:F5:D2
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Certificate issuer:       /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial:       0199FAD7DA5A412DF60D7A2BE757C39C65C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
Manifest number:          096D
Signing time:             Sun 19 Oct 2025 05:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:13 +0000
Files and hashes:         1: 7oPgYuLkR8YeCeBAjdj-EV5NcO8.roa (hash: cfjdHkH+PZdGo+DIF9TmRoRCIzPJW7XiEbCIBO7MIlM=)
                          2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: VPKlEDTaMYIbzoIkY33BwDlXDcPe1xYec3TiDkh9GOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:da:5a:41:2d:f6:0d:7a:2b:e7:57:c3:9c:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
        Validity
            Not Before: Oct 19 05:01:13 2025 GMT
            Not After : Oct 20 05:01:13 2025 GMT
        Subject: CN=dfd6faf2a0abc7940373ca9610a3e6164109f5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:54:af:b8:59:98:5f:72:49:fb:6e:4d:28:
                    bb:2b:46:18:e1:97:79:b5:d6:f9:c1:85:35:74:77:
                    cd:00:9a:05:f6:11:9d:23:e5:bc:c9:99:0a:b3:01:
                    19:54:78:35:07:15:23:e6:19:c9:09:32:17:3c:a9:
                    ec:ad:f6:8a:b0:0d:59:aa:ac:ab:9e:7b:b7:d8:60:
                    00:7f:d2:f3:e3:55:39:9e:83:92:76:86:23:55:b5:
                    22:86:7a:33:80:57:df:db:e0:2c:8f:6f:9d:3c:ab:
                    a9:f4:12:c4:64:28:bf:c8:21:ca:e4:27:9a:2a:ef:
                    35:17:43:27:bc:92:90:6e:a4:ae:2a:bd:fc:53:d2:
                    7c:b8:fe:18:a2:64:ec:cf:0e:fc:52:85:78:55:6d:
                    c0:c0:be:19:f2:c4:47:84:c4:5e:8d:73:a5:06:82:
                    71:81:21:b3:e3:48:dc:67:ba:47:c9:ef:b2:32:f5:
                    5c:50:98:69:fc:9f:4e:e6:82:b4:84:09:1c:f2:b3:
                    f4:b5:1a:ce:00:7d:dc:02:a5:7e:62:ce:7a:d3:d7:
                    6a:ee:0c:68:f4:c0:dc:0f:d7:15:04:12:f9:8e:09:
                    bf:e6:d1:a6:be:24:29:91:bd:e8:af:48:e8:a6:11:
                    70:16:47:1b:ae:3b:04:5d:a8:e5:58:8a:25:90:fe:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D6:FA:F2:A0:AB:C7:94:03:73:CA:96:10:A3:E6:16:41:09:F5:D2
            X509v3 Authority Key Identifier:
                keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:75:7b:b8:8d:a7:a0:4f:d9:49:ef:d6:2e:ac:6e:53:b4:22:
         35:bd:f1:16:c9:ac:b9:b3:ac:8b:0a:9e:de:fb:05:4a:31:2c:
         ec:1a:a1:c7:07:02:df:5c:94:36:c4:27:f0:77:71:5c:ce:cb:
         bd:5b:6e:86:b5:57:eb:ef:85:61:fc:a9:ee:e2:de:a3:24:c5:
         37:3d:66:fb:9e:1f:0f:85:0b:7f:e6:ff:58:7e:63:0a:f3:0e:
         1e:be:26:58:4a:fa:e2:44:50:61:53:53:cc:03:03:fb:c2:1b:
         4a:b0:a3:5c:c0:07:40:be:3d:6a:ea:b4:a5:7b:ab:7e:26:bf:
         b1:4a:a9:46:85:3d:a4:43:1c:09:86:f2:52:a8:9b:68:3f:7e:
         76:98:bb:cf:d4:b6:13:c0:33:aa:c1:e5:f8:b9:12:d6:19:41:
         b5:db:10:a9:a6:10:f5:b5:5b:84:9e:ac:c4:2c:8a:ba:36:03:
         77:25:b1:b8:52:2f:7e:db:aa:79:c5:4e:63:9a:2f:20:c4:73:
         4b:2d:db:0b:06:b2:09:36:21:9b:eb:6b:ad:f6:69:91:49:5c:
         0d:d6:fd:8a:0a:74:85:ef:13:82:6a:b3:66:82:eb:6b:37:2a:
         36:7b:ed:96:8e:bb:d3:2c:4d:58:23:d8:a9:d9:22:d2:28:70:
         63:1d:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:07 2025 by rpki-client