Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File:                     3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier:          XGgIrI83jMmk8qJ2HISnEi8eFehr0hV6jTpYXaqJCZM=
Subject key identifier:   62:22:4C:B4:B8:93:39:B3:B2:D0:AA:91:9A:8C:43:43:94:D5:B9:77
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer:       /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial:       0197B745A4BD71F6F57257AE6EB300ACC412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 16:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:23 +0000
Files and hashes:         1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: l/432vGYuPwQhAksAHQ4KZ2r/PHVdb38wWUSPmPEDEw=)
                          2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
                          3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:a4:bd:71:f6:f5:72:57:ae:6e:b3:00:ac:c4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
        Validity
            Not Before: Jun 28 16:01:23 2025 GMT
            Not After : Jun 29 16:01:23 2025 GMT
        Subject: CN=62224cb4b89339b3b2d0aa919a8c434394d5b977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:c6:2d:f4:3e:f0:2b:d0:bd:62:b5:fc:1d:
                    dc:a1:26:9b:19:8b:4c:06:10:cd:dd:ff:5b:af:5c:
                    94:fb:c2:ed:53:31:8e:24:85:26:03:70:68:05:15:
                    0d:a1:41:5b:f9:f3:0d:45:bc:78:2e:82:b9:89:96:
                    99:e8:34:f7:30:d6:e0:6d:ac:f9:b7:cf:f4:f8:fa:
                    c6:99:a0:fe:94:8b:46:19:0e:3d:95:fc:6e:80:c9:
                    b2:35:d1:4e:d9:a1:f3:76:63:9d:db:01:98:86:fd:
                    f7:7e:7e:76:30:87:d3:18:10:3e:c7:98:57:3a:65:
                    1d:c9:bb:cc:b2:11:ea:46:a7:d2:01:15:9c:ee:2b:
                    ac:e7:83:bb:e4:d1:a2:61:b5:66:b7:40:aa:2b:1b:
                    ae:89:db:6f:29:88:cc:7c:15:8c:bd:f5:8f:73:b8:
                    71:6b:a5:33:96:2d:7b:df:a6:25:ef:29:71:66:38:
                    53:a8:52:29:67:4c:46:13:c2:cd:27:f2:f3:96:49:
                    bb:ab:65:4e:24:1c:73:aa:65:7e:0f:c3:04:ac:5b:
                    b6:24:e8:87:a6:61:7c:16:d0:11:b2:cd:10:2b:98:
                    9a:3c:48:cf:a0:f4:6c:00:a8:bd:18:ab:6b:f4:44:
                    e3:d8:c1:24:c6:eb:73:f9:c9:d7:c8:8c:bd:42:35:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:22:4C:B4:B8:93:39:B3:B2:D0:AA:91:9A:8C:43:43:94:D5:B9:77
            X509v3 Authority Key Identifier:
                keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:fc:91:b1:74:92:57:21:b4:ec:a6:f4:cd:ea:f7:18:ca:
         99:17:66:72:67:e1:78:ff:06:5a:b2:a1:12:2d:a7:a4:85:c6:
         38:bc:5e:27:fc:24:f9:58:c0:40:e7:1a:29:2c:53:bf:de:1b:
         8b:54:ef:63:1b:b9:0d:ef:09:92:16:a4:8e:12:1d:06:03:af:
         2f:69:4d:08:64:2b:fb:23:3e:a9:19:f2:be:de:14:09:39:d3:
         6b:07:0d:11:00:f5:35:27:ce:9a:44:44:0c:be:80:ad:e7:be:
         dc:d9:4d:29:8b:47:82:af:38:fd:5e:8d:63:ce:47:9a:cd:d9:
         ec:82:f7:dd:ec:ba:8d:f3:09:ba:a6:39:f9:25:de:6b:5e:5d:
         0c:5a:71:79:c3:25:36:0b:23:30:46:6b:24:88:0e:e1:cd:46:
         98:a8:30:76:7d:c3:54:28:e2:a5:5d:0f:10:4a:9d:25:48:70:
         51:b9:a7:35:46:e0:dc:51:47:2b:2c:cb:60:76:47:fb:7e:5a:
         0f:da:8a:82:ed:d8:a5:f7:61:9d:62:79:fc:f9:67:c4:d4:2e:
         01:a1:71:00:5c:51:25:5b:cc:13:ca:46:63:e2:7a:a2:05:6c:
         36:7a:01:ee:64:ed:00:6c:63:e0:57:8c:10:48:9e:7c:94:f0:
         5e:c1:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:54 2025 by rpki-client