Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File:                     3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier:          wtOnDPW7vs7CJBOkq0g/GYuaiJxSjGLahx9ctmrXSjg=
Subject key identifier:   FE:5C:7F:58:EB:25:60:1E:28:42:11:01:1E:40:FE:14:7B:78:B9:75
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer:       /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial:       0198D6601873601BCB88B2CB353EC6AE92D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number:          0D65
Signing time:             Sat 23 Aug 2025 10:01:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:18 +0000
Files and hashes:         1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: yc7bNGFFJDDaIqf+Tj9QUj4uRhf8zP4/ejEhh+8aLAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:18:73:60:1b:cb:88:b2:cb:35:3e:c6:ae:92:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
        Validity
            Not Before: Aug 23 10:01:18 2025 GMT
            Not After : Aug 24 10:01:18 2025 GMT
        Subject: CN=fe5c7f58eb25601e284211011e40fe147b78b975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:8a:29:9e:ec:3b:6e:e9:32:dc:29:9b:55:
                    0e:28:05:0f:41:00:0a:18:48:6e:3c:e1:02:7f:86:
                    a6:ba:e6:de:05:ab:46:38:0d:6c:3a:76:4f:98:73:
                    0a:ea:0d:21:c3:71:7d:ec:9a:88:0f:79:b9:1e:16:
                    09:8b:94:13:ff:27:a1:04:d4:f9:8a:15:ae:bb:da:
                    00:93:21:63:6a:94:71:df:99:12:3e:84:15:2f:77:
                    d4:28:12:c8:15:19:09:f3:04:e3:cf:e8:fe:a2:da:
                    2d:e1:f8:e3:1e:ab:03:2f:cb:42:2b:9d:13:f5:20:
                    3f:63:f2:1e:c1:6c:8c:fa:a1:a9:f8:1f:a1:56:ad:
                    a2:08:7b:e0:9e:3d:9d:2f:49:46:80:60:b6:16:d6:
                    0c:8a:c4:b8:7c:37:99:af:fa:c7:87:ee:21:7d:5e:
                    c3:73:07:20:de:76:dd:c0:b4:69:3e:05:46:c4:e4:
                    bc:3d:f3:45:11:32:4f:ae:f2:f4:5c:78:09:a6:69:
                    b6:ad:1b:f9:34:97:98:78:58:bd:36:b2:24:d6:a3:
                    9c:7b:94:34:2d:ab:4d:45:83:87:73:d2:c0:d3:f0:
                    b5:84:60:eb:47:01:7e:bb:36:df:ad:e2:f8:17:93:
                    f9:08:0e:ed:89:52:df:1f:83:32:78:f0:07:5f:c8:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5C:7F:58:EB:25:60:1E:28:42:11:01:1E:40:FE:14:7B:78:B9:75
            X509v3 Authority Key Identifier:
                keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:09:27:89:33:4d:5c:82:0e:de:8b:c4:48:12:ec:fb:cb:1c:
         f7:15:a8:83:bc:eb:b7:c4:b8:80:89:4c:92:cc:01:ce:58:77:
         44:ee:fe:94:1c:5e:d5:7c:b2:d1:ed:80:e4:1d:6d:11:c8:29:
         36:3c:b9:b8:bd:b5:87:2b:0b:42:3c:43:a6:ab:c1:e9:e6:d8:
         bd:8d:31:07:1b:a5:0c:7a:6c:c5:1d:df:69:06:89:67:7d:57:
         eb:61:7a:d3:81:2b:81:d2:fe:72:40:d3:42:e5:03:e3:1f:8c:
         8a:bb:8e:6c:c4:50:e0:37:57:03:12:b6:54:62:4d:29:96:41:
         df:63:39:b3:dc:0a:01:14:d3:48:6c:42:e0:ae:23:81:94:0d:
         16:55:35:7a:66:27:0f:5c:f0:af:3c:3c:05:61:f5:d1:02:78:
         32:3b:bb:57:94:e8:5e:1b:ea:40:2e:35:df:2b:26:2f:e1:cc:
         58:6f:f2:35:36:f5:7f:84:e7:ce:d0:59:9e:c9:a7:64:c6:29:
         bf:fb:10:88:2c:a2:76:48:ba:de:87:6d:e2:01:58:ca:5d:b0:
         dd:15:ab:2a:1d:e1:1e:3d:99:85:f0:90:02:44:a4:78:3e:1a:
         48:04:69:6f:bf:63:c7:1b:e7:e1:7d:a9:ee:d4:b6:33:74:97:
         3b:79:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:50 2025 by rpki-client