Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File:                     n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier:          8oXwqQmreiu1tsfGTTmosO6HjOKJog7ArVSOIgGg+i0=
Subject key identifier:   C5:D3:1D:97:FF:BC:5F:67:6E:AB:80:42:77:05:86:33:D7:CB:21:BB
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer:       /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial:       0198D5F15D859F5033CAD92B197A80CE050E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number:          03EE
Signing time:             Sat 23 Aug 2025 08:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:21 +0000
Files and hashes:         1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: DyP6/Gsz+PM6xtTuLSaTLftUqNYcX+se1rx8MAAfuAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:5d:85:9f:50:33:ca:d9:2b:19:7a:80:ce:05:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
        Validity
            Not Before: Aug 23 08:00:21 2025 GMT
            Not After : Aug 24 08:00:21 2025 GMT
        Subject: CN=c5d31d97ffbc5f676eab804277058633d7cb21bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:07:01:65:92:52:c8:50:70:35:7d:bb:ea:
                    fd:9c:a6:6d:c9:1f:5b:1f:2d:44:da:2f:b1:02:77:
                    b0:bb:fd:3c:b4:78:26:2d:9f:fe:88:f9:cd:8e:2f:
                    c4:1a:74:26:72:db:45:c1:37:e4:2d:c8:9e:99:5e:
                    64:76:75:1c:bd:03:2b:89:73:a3:57:97:ff:0b:ae:
                    c6:14:41:94:3a:dc:56:2e:48:e1:02:d7:60:9b:1d:
                    28:e9:46:70:dc:1a:28:5f:9a:fc:1c:88:9f:b2:fd:
                    d5:73:56:d8:15:2c:b0:d1:26:b9:9b:87:d2:8a:c0:
                    4c:bc:b6:df:4f:20:61:15:c7:d8:fe:6c:ce:88:68:
                    90:55:5f:6b:e1:7c:9d:a7:ba:e1:ab:a7:d1:20:b7:
                    9a:92:84:ab:2b:e5:27:26:b4:76:79:cf:15:27:87:
                    c7:d8:30:75:5d:aa:b4:93:ac:62:52:59:dc:d5:88:
                    96:7c:9a:e9:03:75:fc:9f:3f:3d:75:87:7f:10:85:
                    7d:f9:b4:f5:bf:bf:35:ae:9c:26:1e:6e:6d:8f:cf:
                    59:18:15:01:ce:ab:fd:55:c6:4b:e9:ec:09:0e:cb:
                    ae:cf:e4:2e:6c:8e:3d:31:3f:23:cb:fd:41:ec:b9:
                    db:a4:d0:94:4c:8d:7a:27:6d:61:22:b9:28:6d:3d:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D3:1D:97:FF:BC:5F:67:6E:AB:80:42:77:05:86:33:D7:CB:21:BB
            X509v3 Authority Key Identifier:
                keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:b3:d1:53:07:54:d5:17:a7:67:c7:ac:b8:a6:dc:3e:35:12:
         aa:7f:37:c0:60:ae:11:a4:52:a6:5d:06:df:66:db:26:c8:18:
         f8:ce:91:57:31:8a:81:5e:a8:e9:82:3c:5b:0a:4f:b4:48:0a:
         ba:c4:62:28:46:bf:41:04:ce:83:f8:5c:a8:d3:81:b4:0c:01:
         d3:6a:0c:53:ce:cc:31:1e:d7:c2:16:a9:f0:e0:af:88:0b:f5:
         5e:48:72:d5:9f:1d:9e:00:ef:58:cd:12:91:08:a0:7d:c5:0a:
         76:19:c7:e4:04:c6:86:cd:16:ce:bc:d4:a4:41:87:21:58:a2:
         09:82:55:24:74:55:33:08:0b:08:58:6d:fa:6c:46:4e:c1:d1:
         85:02:c4:a7:88:9c:70:c7:59:a9:24:a7:dc:cd:25:e9:76:60:
         71:f0:4d:37:e5:5e:df:c2:cf:74:3e:20:d2:2d:42:1c:32:75:
         f5:ae:8a:fc:66:e3:5c:bb:a6:50:ec:95:c4:a5:1e:6b:97:99:
         3c:1d:6e:cc:41:8f:c5:72:ca:f4:fb:b5:6b:d0:04:e1:5f:b5:
         be:66:ee:f0:9e:e0:79:b7:f4:e5:a6:60:21:46:04:d2:e2:0e:
         e7:29:46:0d:77:18:6c:3f:0b:61:39:42:b4:12:0e:c9:f6:52:
         c6:0f:99:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:20 2025 by rpki-client