Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File:                     _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier:          sqxyF6N/zA69jgTV1JO20GvLABfZWHOuUTIEO2gnnyw=
Subject key identifier:   3B:CC:A4:C8:55:46:8F:36:55:1A:51:03:3F:AE:EB:96:4D:B0:7E:D9
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer:       /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial:       0198D998CA62F67EB1E32352B86D452CD57E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number:          0EC6
Signing time:             Sun 24 Aug 2025 01:02:05 +0000
Manifest this update:     Sun 24 Aug 2025 01:02:05 +0000
Manifest next update:     Mon 25 Aug 2025 01:02:05 +0000
Files and hashes:         1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: g/nZkNEJCL/8AF3iyfJRQswsSwdWLLMWX1mwieswQiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:98:ca:62:f6:7e:b1:e3:23:52:b8:6d:45:2c:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
        Validity
            Not Before: Aug 24 01:02:05 2025 GMT
            Not After : Aug 25 01:02:05 2025 GMT
        Subject: CN=3bcca4c855468f36551a51033faeeb964db07ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:2d:c8:fc:0b:a7:26:24:9b:c6:3c:7a:a4:
                    f5:12:a3:24:00:cd:3b:e3:fc:4e:e7:87:d9:80:ae:
                    14:d2:7d:a7:08:73:98:cb:40:39:22:8a:8a:46:ec:
                    da:db:d9:0c:26:ca:d2:bd:7e:f5:b0:e2:dd:15:5b:
                    46:2f:80:9b:31:01:28:77:a5:5a:8d:13:d9:04:48:
                    bb:3b:09:a7:79:4c:73:c4:0d:33:d4:37:59:29:10:
                    67:9b:b3:b1:48:a3:14:ba:2d:f8:8a:a4:00:be:4b:
                    5c:45:44:22:0d:36:e5:35:d0:92:5f:1c:26:bc:8c:
                    36:ad:d2:06:34:f1:50:90:73:a5:b4:10:60:44:c9:
                    1b:96:36:ab:ec:9c:d7:6e:5f:7a:cf:9c:67:9a:9e:
                    c1:b1:9f:69:8f:38:e4:0e:6d:ca:45:50:70:90:0b:
                    ca:7a:c9:f5:e0:e8:07:da:cb:34:18:03:02:6a:a7:
                    14:9e:b5:9b:63:aa:e6:05:f0:19:9b:e5:ce:8e:8f:
                    63:8b:9e:a0:00:b1:9b:ba:5d:89:7e:c3:7b:a1:56:
                    6d:d0:eb:44:60:9e:c8:3d:a4:e8:40:5b:25:49:1d:
                    47:6f:aa:19:e0:d8:89:be:65:d1:0a:f1:a9:97:73:
                    41:fd:2a:6d:b4:db:8f:0d:e2:73:56:f3:9e:58:77:
                    33:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CC:A4:C8:55:46:8F:36:55:1A:51:03:3F:AE:EB:96:4D:B0:7E:D9
            X509v3 Authority Key Identifier:
                keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:01:1c:9a:21:ed:bf:c0:f9:26:7a:6c:db:45:37:c6:a1:
         dd:87:25:68:3c:4d:0b:bd:15:8a:95:08:a3:a5:8b:11:6b:68:
         6d:f7:0b:0d:44:48:cb:ca:eb:47:87:ee:d4:e1:db:88:68:ad:
         93:88:01:cc:63:5e:65:5d:de:9b:64:68:54:8a:65:ce:a2:89:
         d8:31:c9:f0:15:d0:11:99:96:45:f6:3b:ff:bc:e0:96:6a:fe:
         e2:a5:6f:1d:dd:e9:fd:e1:ce:c2:13:e5:ff:5d:8a:f3:a9:aa:
         a8:75:79:72:07:b3:1a:f3:fc:89:a8:54:d4:b8:d8:26:4f:c2:
         ac:99:cb:40:a0:63:3e:32:6c:66:02:b9:f9:26:75:e2:12:4d:
         f4:47:c4:c4:05:cf:06:58:d0:ea:e3:cf:cd:b6:42:a8:a8:f8:
         d0:da:63:2c:86:81:78:e8:f3:b4:3b:97:83:02:05:27:d9:fd:
         ee:82:ae:4b:f8:82:d4:45:41:d7:ff:47:e7:e0:8d:f5:c2:7f:
         a2:32:1e:f1:d4:6d:58:30:7b:c8:b6:7c:94:88:7c:cf:6d:a9:
         0b:4f:03:26:40:d2:25:34:a5:30:67:7b:cd:fc:d8:2f:d1:28:
         f6:10:3b:fb:73:e9:ae:f1:cd:9e:39:9c:aa:27:6b:10:2f:43:
         c5:24:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:54:37 2025 by rpki-client