Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File:                     3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier:          yX02Vb6bI1ZbVhlIOUM9beKHFJL7rS8oy8Ja4JIumY8=
Subject key identifier:   BF:94:68:86:2E:17:63:38:ED:77:A0:78:61:2B:39:3D:BE:0B:74:89
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer:       /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial:       0198D69849B7EF32414008733EC7F8305AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number:          158B
Signing time:             Sat 23 Aug 2025 11:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:41 +0000
Files and hashes:         1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: ny57kuB72ouTioApHCFQ3cqxCuSWnzen8V6T2LbZA2E=)
                          2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:49:b7:ef:32:41:40:08:73:3e:c7:f8:30:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
        Validity
            Not Before: Aug 23 11:02:41 2025 GMT
            Not After : Aug 24 11:02:41 2025 GMT
        Subject: CN=bf9468862e176338ed77a078612b393dbe0b7489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:ed:13:bd:5e:f3:2a:e2:df:38:39:39:8b:
                    16:3e:83:e6:23:7c:b1:5c:6b:2c:b3:fd:5b:3c:d0:
                    f6:1d:54:a4:31:8d:a7:9e:9a:1e:96:01:e6:c0:15:
                    1c:4e:aa:49:ad:22:d2:3d:d0:59:3e:9b:b5:8f:fe:
                    7c:b5:95:1d:0a:e5:60:4b:75:d0:a4:d0:fd:35:07:
                    a1:cf:44:29:f7:6a:a4:2c:62:fa:ae:64:53:93:b2:
                    04:7b:91:7e:09:e1:56:c7:a1:f2:47:5d:56:40:45:
                    99:a3:b6:7e:70:5f:cf:82:aa:cb:f8:af:09:81:d5:
                    fb:e6:29:f0:0c:7e:74:4d:fe:c4:a4:27:3e:7e:a4:
                    30:4d:b9:39:01:e8:51:b7:81:ee:3e:7e:0d:8b:e9:
                    36:61:ca:1c:6e:10:4b:4a:70:dd:db:7e:ec:08:a0:
                    91:66:0e:e6:f7:e8:86:dc:21:e7:18:c6:c6:1a:bf:
                    2c:4a:fe:78:2f:5c:58:4c:1c:3e:30:39:c2:76:43:
                    0e:73:07:98:e0:d5:a9:8c:f6:86:5f:a2:14:15:33:
                    85:4a:d6:7f:03:20:de:7f:76:6b:89:7f:e8:d9:67:
                    90:38:de:ba:40:e8:99:e7:6e:47:64:a0:f9:e0:32:
                    3b:f4:d6:e3:f3:4a:70:9a:17:45:98:de:7f:49:0e:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:94:68:86:2E:17:63:38:ED:77:A0:78:61:2B:39:3D:BE:0B:74:89
            X509v3 Authority Key Identifier:
                keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4d:9e:bc:8c:ca:b3:f1:f1:60:cc:91:61:49:38:62:80:5f:
         43:67:52:15:8e:5b:62:65:bc:a4:62:5a:df:f8:d0:05:13:8c:
         9f:ed:5f:89:a1:ca:40:df:a7:9a:7a:aa:43:0b:4a:d2:58:03:
         19:a6:72:24:3a:8c:09:b3:aa:70:33:a8:87:dc:e3:d6:46:d5:
         ff:3a:93:52:13:38:a7:23:16:4c:96:10:22:1e:1a:45:41:bb:
         26:fe:3a:95:f8:88:5d:51:88:10:b2:b1:83:4b:52:93:b3:7e:
         cf:57:4e:d2:87:af:23:8e:e4:fb:2e:81:6e:ab:b0:c6:e5:70:
         8c:41:b9:f0:54:4c:82:94:83:0b:ed:27:a3:e9:4a:de:db:2a:
         6a:40:e2:c7:1e:83:9a:9c:44:5d:f2:5e:6b:42:dd:a9:87:90:
         04:06:cf:bd:c1:8d:f5:df:ad:9f:05:b4:16:46:92:df:d3:c2:
         26:04:a7:2e:ee:f3:5f:db:1a:b1:b0:12:20:01:f8:46:87:4a:
         10:a6:aa:05:ff:58:6f:5a:66:7e:0b:50:81:28:e5:be:a2:1c:
         63:2d:c4:03:88:b5:3e:1e:2e:8f:b3:84:24:c6:bf:b7:68:36:
         45:36:3a:7a:07:b2:23:47:d5:8b:b1:73:e0:1a:85:2e:92:95:
         7d:37:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:44 2025 by rpki-client