Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft
File:                     MV3KddscDCcsCIvLF-dqTQ7tNNM.mft (raw, json)
Hash identifier:          6WQXuZ2+veLKGUwGZbUYQa3sseQibl6jf+YOC5z0IZA=
Subject key identifier:   41:B8:D5:5A:A0:E6:44:0F:AC:2B:19:55:F7:DC:7B:EF:71:B9:08:5D
Authority key identifier: 31:5D:CA:75:DB:1C:0C:27:2C:08:8B:CB:17:E7:6A:4D:0E:ED:34:D3
Certificate issuer:       /CN=315dca75db1c0c272c088bcb17e76a4d0eed34d3
Certificate serial:       0199FB7C7FB2698A14246C39155E3FFC62FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft
Manifest number:          3E
Signing time:             Sun 19 Oct 2025 08:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:04 +0000
Files and hashes:         1: MV3KddscDCcsCIvLF-dqTQ7tNNM.crl (hash: s6p+tolvj8rNqrUau5eDiN/p6xKd8rcSX1ruXw9N2GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:7f:b2:69:8a:14:24:6c:39:15:5e:3f:fc:62:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315dca75db1c0c272c088bcb17e76a4d0eed34d3
        Validity
            Not Before: Oct 19 08:01:04 2025 GMT
            Not After : Oct 20 08:01:04 2025 GMT
        Subject: CN=41b8d55aa0e6440fac2b1955f7dc7bef71b9085d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:06:d8:00:fb:28:13:e7:1a:29:af:e2:47:
                    e6:77:0b:da:6e:75:5b:a7:43:d0:e1:3f:d1:68:bd:
                    37:e3:f9:92:15:64:8b:17:47:c5:f9:1f:6a:c9:d6:
                    92:9d:c2:e0:69:7e:e9:04:96:bc:e4:cc:38:cd:70:
                    09:1f:ee:4f:41:cb:c9:87:79:46:2e:0d:f7:83:37:
                    de:0c:a3:92:1a:8c:de:34:7a:18:46:ab:0d:5b:da:
                    95:c8:13:9f:23:49:4e:3c:ca:98:fa:f9:8d:f0:c5:
                    e3:07:09:e7:fe:80:4b:bf:51:6d:41:26:f8:e8:13:
                    c9:2e:1d:b5:a5:35:1d:70:7d:c3:ef:35:4e:79:89:
                    65:37:4a:91:8a:61:79:b0:51:73:64:19:34:9e:b9:
                    7a:f0:68:a2:79:7b:93:a4:02:ea:cf:d5:e6:08:27:
                    ab:9e:ed:3d:b7:1f:18:13:1d:ee:a7:c1:8f:60:f5:
                    72:37:7c:15:72:7a:03:c1:dc:8f:3e:fe:07:15:ec:
                    0a:d1:ef:e1:bf:ca:7b:05:c2:87:73:95:eb:37:cb:
                    15:91:c2:35:8b:56:9a:e6:9b:08:4b:ae:98:96:c6:
                    73:66:bc:1d:68:d0:ac:f5:91:3a:b9:49:9d:05:00:
                    48:06:d9:71:f4:4a:31:bc:63:ff:e6:66:cb:e7:b7:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:D5:5A:A0:E6:44:0F:AC:2B:19:55:F7:DC:7B:EF:71:B9:08:5D
            X509v3 Authority Key Identifier:
                keyid:31:5D:CA:75:DB:1C:0C:27:2C:08:8B:CB:17:E7:6A:4D:0E:ED:34:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:96:75:e2:3c:bf:f4:f7:7b:1e:aa:0a:7d:d2:87:da:ee:
         43:8a:d1:37:6a:de:d0:9d:1c:fc:ef:2d:0d:66:3a:24:95:9e:
         39:9b:63:4a:19:46:23:32:43:e3:54:a9:46:fc:79:bb:3b:78:
         75:59:26:69:bd:b9:c1:a4:37:6c:d8:84:fb:10:04:3e:5e:c6:
         53:5d:b4:e6:40:46:b7:fe:01:aa:47:da:81:c2:91:c2:be:04:
         eb:ce:d8:8e:ad:29:e6:88:d1:d0:8f:6d:71:57:f1:66:93:7d:
         14:f9:d9:02:51:8b:4c:37:37:af:57:14:b6:58:ec:7a:80:be:
         8c:b7:35:66:75:6e:5b:78:8c:30:fb:69:e4:5a:4f:3e:5a:ae:
         8c:06:23:02:d4:3c:3a:98:79:a5:1c:a9:33:74:3a:a7:bc:60:
         23:6e:bb:30:49:f5:8c:51:2c:4f:b3:4d:d4:87:b2:36:1b:5c:
         d2:72:00:23:af:b8:e1:65:68:0f:5a:af:5c:fa:f9:76:cf:e1:
         ce:28:43:2f:74:2b:6d:e7:70:08:51:07:6c:ce:f2:3a:4d:a1:
         18:8b:a3:0f:2b:54:b0:71:77:71:a8:ef:05:82:1d:69:4b:50:
         f8:ca:56:27:0f:f3:ed:aa:f3:e6:1f:89:4e:3d:6a:8f:e2:7c:
         b4:42:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:37 2025 by rpki-client