Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          I2VChqn/HybSc8nUaUwep8/kKD0NkDy9YFqEVvz1mgA=
Subject key identifier:   7A:9D:A7:06:8D:4D:96:AF:57:EF:9C:65:C3:F2:8B:01:BF:12:89:97
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       0198D54E8BCA1A93857B834F5CE5271F3B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          131D
Signing time:             Sat 23 Aug 2025 05:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:31 +0000
Files and hashes:         1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: GfsIP5Li0ULWGVzbN7/iWY4Dqb0u7iRJQFN/tCCtyzc=)
                          3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=)
                          4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=)
                          5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:8b:ca:1a:93:85:7b:83:4f:5c:e5:27:1f:3b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Aug 23 05:02:31 2025 GMT
            Not After : Aug 24 05:02:31 2025 GMT
        Subject: CN=7a9da7068d4d96af57ef9c65c3f28b01bf128997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:c6:cf:37:36:04:a1:b5:6d:01:40:36:27:
                    67:00:0f:01:43:e8:93:72:8b:ba:ce:93:b4:f8:c8:
                    26:a9:ad:c9:3d:af:63:c7:f4:f4:f1:f1:cd:73:6e:
                    e4:5f:5f:64:d1:ec:93:17:1d:03:f7:d4:dc:4a:7f:
                    55:db:26:89:39:a8:3f:93:5e:6f:c4:e9:17:4f:f1:
                    72:ef:05:57:6c:75:d7:94:d9:54:98:84:b5:d3:63:
                    46:c6:cd:29:df:0f:51:0e:24:bd:f9:ff:fe:79:9f:
                    ab:e2:9d:c4:8e:78:c4:14:fd:e1:41:77:29:ef:a5:
                    bb:e0:22:44:48:24:e0:96:f0:d6:24:2e:26:a2:e6:
                    ad:48:59:b1:81:9a:1e:83:17:34:4c:bf:41:73:70:
                    38:32:77:cf:fc:16:a7:d6:27:a7:2b:ec:cd:a8:9e:
                    1f:c3:74:4f:b6:50:f0:fd:58:d0:30:3a:8f:d5:20:
                    e6:3c:19:8d:cf:b8:ae:be:e2:d4:45:f0:2f:e8:23:
                    3e:4b:79:4e:36:1b:95:3f:03:3f:36:ca:a9:e2:f1:
                    de:2c:eb:d8:6e:67:cc:22:8c:a1:cc:9b:45:b4:fc:
                    6a:54:8d:e3:0a:bc:1f:7e:e8:a4:c9:0f:ea:6a:34:
                    ba:64:4d:0b:71:bc:f5:a0:a9:bb:a0:fa:c3:32:f8:
                    4e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:A7:06:8D:4D:96:AF:57:EF:9C:65:C3:F2:8B:01:BF:12:89:97
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:44:24:56:48:9d:66:03:4f:55:41:d4:c5:0d:dd:98:58:6b:
         70:26:e9:d9:8e:03:2f:ef:31:c1:65:6d:0a:2a:b6:c2:72:b4:
         e7:ec:fd:b6:f6:63:36:b7:5f:37:8d:03:e3:f7:90:70:61:f1:
         d5:3d:60:fa:22:b5:15:9a:e0:89:0d:4d:e4:60:0a:a4:91:23:
         6a:02:12:79:b8:19:aa:e7:e1:d3:b8:e1:5b:62:73:c5:9b:09:
         89:3a:4b:e7:06:48:70:59:f1:a0:da:e5:9c:02:d3:01:f6:a7:
         8c:de:41:25:32:18:bf:94:6f:e8:e8:03:6e:d0:50:4d:8b:4d:
         a4:7d:1b:ee:d0:61:ee:f6:39:5e:23:90:22:9f:7b:2c:e0:31:
         58:fb:7c:e1:2e:f7:7c:17:f6:a6:fa:7c:25:d1:e7:2c:f3:51:
         c5:43:50:37:c5:27:dc:fd:20:a8:5d:1d:8f:0d:e9:37:5f:57:
         09:5b:26:8a:49:ae:30:14:0e:c1:27:f2:63:4e:7d:33:b6:27:
         b5:e3:d4:64:9c:d5:6f:aa:49:1d:48:da:90:ea:2b:c8:30:92:
         79:5f:b5:df:64:d6:f6:f0:de:44:b6:03:2f:ed:b4:d2:06:23:
         a0:c2:57:32:a1:0a:45:ba:aa:ee:82:da:36:db:1b:01:8a:da:
         92:e5:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:44 2025 by rpki-client