Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File:                     s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier:          /YylzNq3IAfP+6LR7+w3NgoEdJd4HKg+3zgkmZ2bW3A=
Subject key identifier:   3F:B8:BF:10:0B:94:22:01:82:72:8B:5E:C2:D8:01:C3:D3:7E:08:74
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer:       /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial:       019A01B4E998C32E339E776E64C2A78A0A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number:          131D
Signing time:             Mon 20 Oct 2025 13:00:24 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:24 +0000
Manifest next update:     Tue 21 Oct 2025 13:00:24 +0000
Files and hashes:         1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: DDz/ArPXNU8C51SsE0rVro2osEh8gNYy58tL5n8fG0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b4:e9:98:c3:2e:33:9e:77:6e:64:c2:a7:8a:0a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
        Validity
            Not Before: Oct 20 13:00:24 2025 GMT
            Not After : Oct 21 13:00:24 2025 GMT
        Subject: CN=3fb8bf100b94220182728b5ec2d801c3d37e0874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:9e:8a:44:0b:b5:27:e9:70:85:84:4d:e5:
                    7b:1f:06:ac:e9:b2:1d:63:a5:23:54:4d:a1:3d:12:
                    b2:31:1f:b3:32:45:ec:23:15:e5:bb:d7:c5:94:79:
                    53:0e:8c:f4:bd:c3:04:a5:f7:97:20:c3:87:f4:84:
                    11:e7:98:ba:bd:76:c4:fa:aa:f6:cf:12:a0:f7:b7:
                    2e:6c:0b:49:59:ff:24:1d:c5:f3:9b:ad:eb:8c:28:
                    ab:69:64:1f:24:d6:f6:ca:26:33:37:d3:68:96:fb:
                    f4:1f:8e:44:ec:41:0e:d5:7e:25:f8:ec:9f:2c:92:
                    5a:c8:4a:1b:cc:67:88:ab:6f:2e:21:db:b3:93:5b:
                    d1:63:92:90:d8:3b:4a:62:a7:10:6d:10:e8:4b:78:
                    76:6c:35:a7:0c:48:7a:e8:97:0d:32:52:52:1e:07:
                    fa:52:e2:5e:a7:d4:ea:2f:da:1d:7a:c2:f5:a7:51:
                    6b:f1:3f:1c:7e:82:f7:9d:9b:e6:7e:85:df:80:41:
                    4c:13:02:c0:99:79:b1:cc:cf:cf:25:5d:0d:e5:a2:
                    7b:1a:3a:f6:eb:c9:64:7e:c4:45:b5:7b:0e:d2:44:
                    65:f6:f5:4b:f3:d1:1e:78:90:c2:7a:5f:5a:d1:bf:
                    21:ef:0c:6c:2a:38:bb:e5:29:b2:33:a9:64:20:4e:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B8:BF:10:0B:94:22:01:82:72:8B:5E:C2:D8:01:C3:D3:7E:08:74
            X509v3 Authority Key Identifier:
                keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:43:5e:2e:54:f5:15:ac:61:f1:ee:33:7d:14:5f:e9:82:
         97:66:f1:cc:76:ad:fd:f9:2d:c2:b4:b3:55:41:23:a7:90:3a:
         74:7e:53:aa:c1:a3:1e:47:55:a8:b4:e3:db:d2:69:4b:fa:b4:
         8f:e2:a6:2f:b3:32:13:64:0b:53:c2:57:4c:52:6e:f7:1e:28:
         14:86:e2:9e:59:a2:f0:16:09:c3:df:5c:e4:a2:67:6e:02:06:
         21:70:82:5d:6f:56:19:85:f1:af:d0:90:bb:aa:75:fd:f0:95:
         bd:33:a3:35:3a:a4:02:6f:65:4c:cc:0f:6f:15:1d:6f:fd:a9:
         c0:6c:9c:2e:a6:11:e6:97:71:fe:2c:e8:21:00:85:8c:39:bb:
         c3:3e:23:27:8d:83:bf:f1:57:f3:9d:dc:16:72:03:24:52:1f:
         5f:eb:94:2a:2c:3e:14:33:11:b3:ef:cb:ff:4a:aa:c4:2c:2f:
         9b:a4:aa:66:30:b5:a5:bb:39:30:6c:44:18:38:be:cf:02:d5:
         e4:93:32:59:2b:5a:4c:b8:e2:62:d8:7e:9c:7e:1b:66:a8:3f:
         56:70:b9:9f:77:b9:ca:5d:fb:6d:98:15:13:9b:59:1b:c6:e1:
         2b:41:94:3d:a4:c4:bf:63:3d:bd:d0:df:c6:4f:4b:77:26:01:
         36:c8:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:31:57 2025 by rpki-client