Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File:                     3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier:          B719wRNNh2///0Z58+iWAeNA1rzBqw+CRXrmU2tOWiA=
Subject key identifier:   63:6D:C1:F8:9C:0D:AE:84:D5:BC:FA:4F:CD:4D:87:FA:E3:3D:D2:9D
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer:       /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial:       0198D660CAF8D40475C1D156F75C60326462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number:          0A56
Signing time:             Sat 23 Aug 2025 10:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:04 +0000
Files and hashes:         1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: 8JR696vyef/LecPcx/jjAgtxw1H2iG+Ngj9yWAIclo0=)
                          2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:ca:f8:d4:04:75:c1:d1:56:f7:5c:60:32:64:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
        Validity
            Not Before: Aug 23 10:02:04 2025 GMT
            Not After : Aug 24 10:02:04 2025 GMT
        Subject: CN=636dc1f89c0dae84d5bcfa4fcd4d87fae33dd29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:35:d9:db:49:c2:f5:0e:f4:0d:4b:41:39:
                    36:a5:e3:93:3d:f6:22:85:a3:32:1e:66:36:b6:41:
                    cc:10:56:4d:42:2a:a8:10:76:2e:a1:67:74:95:cc:
                    0f:fd:25:c1:b1:37:de:73:1c:ad:64:a4:1b:e0:ce:
                    b6:cb:b0:7b:88:79:9a:b1:75:af:3f:a9:34:17:2c:
                    40:6a:4e:84:b6:8e:a8:bf:a4:87:53:1a:24:df:31:
                    81:fd:99:2a:96:82:7a:80:2e:ea:a7:7f:88:98:f2:
                    e8:75:d7:c3:b4:21:55:c6:97:f9:51:75:c1:3b:68:
                    b6:9e:b9:8b:08:56:ac:8a:8a:a2:2f:71:6b:71:9c:
                    73:23:a4:81:2a:c9:c5:86:e4:32:5e:4e:14:d4:e6:
                    91:cf:87:23:79:fa:77:72:bb:53:19:1a:02:d6:a2:
                    43:25:94:db:d2:cb:15:2a:61:c0:91:f3:9f:38:b3:
                    ba:b8:7b:1d:1e:7f:a2:0c:1c:21:30:04:e9:ca:2e:
                    96:58:ba:14:e3:ff:bb:d7:ed:0b:f5:0d:5c:29:ba:
                    47:e1:c8:51:a9:9d:0e:f3:7b:e8:82:18:bb:d4:90:
                    d1:45:b4:d1:ae:40:c2:a6:cc:8a:53:dc:21:56:4f:
                    52:e3:8a:79:61:7f:c8:5c:9c:01:11:17:24:ca:25:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:C1:F8:9C:0D:AE:84:D5:BC:FA:4F:CD:4D:87:FA:E3:3D:D2:9D
            X509v3 Authority Key Identifier:
                keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:be:d1:3d:78:ec:03:2a:59:2b:aa:87:ba:6e:60:88:94:d0:
         7c:75:2b:cc:1e:2c:7c:ae:f4:14:cb:21:20:83:ec:ed:1b:e7:
         7b:7a:10:a7:4b:aa:12:89:71:a5:a3:31:a9:9a:17:f7:4b:f0:
         27:dc:a8:8f:39:cb:44:93:2c:fa:17:76:9b:00:37:fc:76:97:
         0f:52:80:87:2e:8a:1f:14:07:a1:f3:3d:9c:68:71:3f:4a:14:
         7b:fa:d6:6e:96:62:90:85:a5:4b:12:a2:8a:05:80:3b:70:95:
         90:38:52:60:c0:7d:c6:e6:42:29:0d:ac:2c:74:a2:e5:85:29:
         79:dc:72:33:4d:d7:29:2e:e5:9e:9e:4c:2f:d8:20:70:62:61:
         9c:2e:68:3a:99:4b:27:29:9d:75:cb:99:9b:6a:b0:e2:18:74:
         22:6e:04:13:e0:f7:47:d8:54:5e:ad:a8:61:bb:00:62:ea:f2:
         b2:2e:b6:96:da:75:58:83:ff:b8:c7:e3:fd:0f:ba:ad:4a:05:
         19:e6:51:28:8a:28:c7:f2:06:8f:19:73:7d:cf:3a:0a:37:17:
         e5:53:51:28:ed:f7:d8:6e:29:b8:91:32:e6:f9:18:ad:00:b2:
         e2:44:f3:0d:46:76:55:1f:69:9a:13:03:c1:7f:05:b5:a1:c3:
         36:2b:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:35 2025 by rpki-client