Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
File:                     b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json)
Hash identifier:          yvFHDUJhDM9cTRstPvZZdAwN051G7hN5ydDv8LLB4ls=
Subject key identifier:   81:3A:FB:28:AF:53:F1:B0:39:B1:EA:8B:CE:A6:98:DF:76:3F:DF:98
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Certificate issuer:       /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial:       0198D54E274B610D8556D9978E43CC611DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
Manifest number:          08D5
Signing time:             Sat 23 Aug 2025 05:02:05 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:05 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:05 +0000
Files and hashes:         1: 7oPgYuLkR8YeCeBAjdj-EV5NcO8.roa (hash: cfjdHkH+PZdGo+DIF9TmRoRCIzPJW7XiEbCIBO7MIlM=)
                          2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: nN858E701jWzkCg2tZHnVcOei37nk2JBjduOUxtJiHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:27:4b:61:0d:85:56:d9:97:8e:43:cc:61:1d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
        Validity
            Not Before: Aug 23 05:02:05 2025 GMT
            Not After : Aug 24 05:02:05 2025 GMT
        Subject: CN=813afb28af53f1b039b1ea8bcea698df763fdf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f9:cc:fb:b7:09:90:ef:9a:c6:7d:8d:5e:2b:
                    f7:45:49:67:ef:12:80:86:c3:5d:56:8b:5a:49:cb:
                    f9:b0:f9:65:08:8c:cb:6e:ea:5f:f4:45:1b:38:97:
                    4e:64:bb:c6:be:a8:80:dd:65:ea:a9:a9:1d:00:0a:
                    08:bc:ee:91:5e:d9:6b:d5:81:e5:63:b2:be:f8:1b:
                    17:e3:39:8d:63:89:a4:1e:64:2f:3f:a0:60:03:51:
                    e3:2a:81:19:00:ad:cc:58:0e:ce:ff:48:9a:9f:eb:
                    78:ef:d4:d1:f1:0d:e4:44:92:25:92:b5:f4:b4:c4:
                    8d:2b:87:fa:b0:7f:41:bf:27:52:f7:61:51:d7:04:
                    1d:5e:68:d3:f1:c6:c4:ce:c0:73:1e:30:fa:e0:e4:
                    42:c7:33:9c:4f:0e:79:9a:7e:ae:72:ec:93:da:e3:
                    44:84:1d:61:c7:dd:1c:2a:02:e5:1c:ea:f5:64:98:
                    47:67:90:62:ef:05:0d:8d:a0:38:f1:b3:43:d8:1e:
                    ec:32:a7:f1:72:b3:2d:17:8e:ad:7f:37:34:9b:bf:
                    6b:fe:cc:f0:59:d9:da:9e:13:3a:bd:d5:e3:e6:17:
                    89:5d:c1:7a:2a:14:a9:4d:1d:a5:6d:c9:d2:82:99:
                    9e:ff:ec:bf:d9:81:a5:84:3a:6b:38:ce:4c:56:b2:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:FB:28:AF:53:F1:B0:39:B1:EA:8B:CE:A6:98:DF:76:3F:DF:98
            X509v3 Authority Key Identifier:
                keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:38:5b:ad:31:b1:2e:fc:da:55:e1:47:5c:6c:e4:cc:45:
         56:d3:71:24:b4:a6:8e:44:13:3d:51:7f:35:72:0b:44:c3:18:
         37:76:72:88:df:dc:55:df:b2:81:70:88:d0:00:32:fe:d1:51:
         cd:9a:7e:d2:f1:7a:f8:3c:38:8f:c4:90:63:6b:46:4b:b1:3f:
         16:c0:ab:81:af:b6:fa:3d:82:69:3d:5d:b4:90:3a:e0:fa:64:
         84:9c:27:d5:88:83:3d:53:a4:95:9b:eb:e9:bf:8f:76:b7:44:
         f0:f6:80:ad:57:80:64:70:4f:4a:b9:10:a9:fc:02:bd:47:c4:
         e6:b2:2e:04:00:07:ee:2e:cd:53:db:a0:02:6c:d8:7b:4e:33:
         71:28:87:14:63:34:4a:bb:82:32:64:69:3d:ea:cb:54:9a:bd:
         ed:f4:49:be:36:c7:68:e9:7b:b6:4a:6b:45:86:14:ed:67:0f:
         3c:f0:13:ce:db:48:4b:46:a1:43:e1:78:b6:77:c5:b4:58:de:
         5e:bb:e2:0c:fb:ae:9f:21:d9:15:0a:5e:ca:34:73:3e:35:e9:
         69:e1:ea:08:d0:0b:7c:1b:14:99:af:11:6c:83:37:7c:2b:29:
         55:93:e2:9c:8d:28:b5:31:32:92:a8:b8:e9:d5:9b:70:ac:6f:
         72:98:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:19 2025 by rpki-client