Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          gl8+pLrYWBa4TlQFAB6QGjf5jiPZ1g02bcbul2sY41M=
Subject key identifier:   B6:E4:89:A9:04:41:54:18:07:74:04:E5:56:38:68:41:06:C2:59:85
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       0198D65FE5A857C1C94EB5290F1B10C7B137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          0784
Signing time:             Sat 23 Aug 2025 10:01:05 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:05 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:05 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: eA6QR7bsUXZI6BrO7RmTxXau/NYN8rjLJkI8PE1Ltfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:e5:a8:57:c1:c9:4e:b5:29:0f:1b:10:c7:b1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: Aug 23 10:01:05 2025 GMT
            Not After : Aug 24 10:01:05 2025 GMT
        Subject: CN=b6e489a904415418077404e55638684106c25985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:cd:1e:3c:34:5d:66:c8:98:99:72:28:44:
                    c2:db:2a:68:ce:03:f5:26:f9:ab:84:b1:65:34:d7:
                    67:54:61:b6:17:82:8a:26:49:00:fa:14:cf:5e:46:
                    f8:a1:f0:c5:01:1f:67:1a:d5:66:72:b5:48:42:d4:
                    81:b8:87:50:51:4f:e8:10:db:31:7f:50:a2:85:c1:
                    1d:e4:9c:1b:73:1d:7c:53:82:99:3d:56:46:14:70:
                    3a:26:20:eb:42:71:cf:86:53:24:14:8d:99:19:e4:
                    3d:d4:a2:12:2a:fd:fd:bb:0e:ea:5c:c8:f3:7a:bb:
                    e4:34:80:86:33:fe:bd:f8:14:19:72:06:47:61:af:
                    80:8f:ba:0c:02:4d:9b:3d:78:68:f3:72:99:d4:71:
                    1d:44:ce:b3:aa:c2:a1:b2:37:5f:12:84:ff:b5:2a:
                    0e:81:b6:2d:96:70:82:e6:8d:0d:02:9b:c2:40:b7:
                    19:59:e5:a6:c8:49:1e:a8:b8:05:74:40:e0:57:3d:
                    5f:71:4c:dd:fc:88:d5:87:4c:01:2f:0f:d4:3f:a9:
                    60:59:15:f9:69:8b:07:68:52:a8:a9:0b:9c:79:28:
                    72:df:cf:97:78:62:c1:2b:3c:e5:50:db:fe:b8:ff:
                    bf:9a:27:95:65:31:35:0e:40:cd:9e:d1:19:56:94:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:89:A9:04:41:54:18:07:74:04:E5:56:38:68:41:06:C2:59:85
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:20:33:1e:c2:0b:5c:d8:f9:61:00:c3:67:da:7c:45:b0:
         9c:a1:8b:27:9b:dc:aa:8a:96:13:ad:24:f5:de:fc:73:49:90:
         b7:c3:d8:88:11:cb:3e:86:3f:ca:46:76:89:66:cd:2c:3c:61:
         d8:d1:52:4c:f0:fe:ba:eb:79:38:60:e7:e8:29:25:91:90:ac:
         f6:92:79:40:79:e4:11:c2:bc:8e:b9:61:8a:47:33:8d:00:4a:
         75:5d:08:bc:35:0e:23:e7:2c:79:59:fe:a1:89:e9:4b:2b:a2:
         f0:a0:3f:a5:90:6d:93:6c:fc:fa:87:63:b9:0d:20:8b:ce:0d:
         de:b8:27:81:d1:e1:f5:d3:e7:c1:34:a6:28:51:11:60:ec:df:
         a9:29:94:fe:71:46:d0:38:36:1c:3c:db:9d:18:c7:23:1f:e0:
         6e:c2:ee:af:0f:5e:18:8e:4a:6b:87:47:b1:72:bc:a2:93:b8:
         86:78:15:89:bb:86:c5:fb:d8:c2:b0:0a:5f:0e:57:36:5b:c0:
         54:79:3d:66:bd:e6:fa:6a:df:47:68:64:e2:68:cb:83:24:c8:
         b5:a6:30:7e:5a:11:88:59:31:af:7c:b5:e1:d9:22:99:54:5d:
         0a:cb:f8:55:dd:f0:27:4b:a6:b1:b1:b4:6c:70:49:0a:97:61:
         87:0f:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:55 2025 by rpki-client