Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          W3lGc4agd+c6c9D3o3h2y9rnztTFfHCvCqKcF4e0AAI=
Subject key identifier:   EB:02:7E:E8:62:E2:AC:8E:5B:4F:85:E2:65:9B:66:CE:FC:80:DB:B0
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       0198D4E004F2C5A6B05792A98E7B9F966091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:47 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: ujZS0emqqrvQW3p5b8oUTAfU6kPkTsswtZUd/l8kf+g=)
                          2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=)
                          3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=)
                          4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=)
                          5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=)
                          6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:04:f2:c5:a6:b0:57:92:a9:8e:7b:9f:96:60:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Aug 23 03:01:47 2025 GMT
            Not After : Aug 24 03:01:47 2025 GMT
        Subject: CN=eb027ee862e2ac8e5b4f85e2659b66cefc80dbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:09:5f:ab:34:13:41:87:3f:23:93:66:ca:
                    66:ce:f7:1d:3d:41:30:fc:4d:46:1b:60:7d:dd:b7:
                    7c:d1:53:2c:9c:e5:52:7a:19:8b:15:26:d1:e1:c2:
                    42:66:45:52:62:d5:57:63:2f:e4:fe:29:ae:e8:c2:
                    53:72:a2:62:25:bf:af:4e:51:83:13:06:05:c9:56:
                    02:66:46:2e:38:c3:0b:4d:5a:d6:c0:1c:ee:23:ce:
                    7d:7f:26:04:dd:87:c1:9e:18:fb:01:48:4d:d8:3e:
                    f7:9f:fc:1d:f3:c0:58:38:21:f3:27:fc:7f:39:d2:
                    99:51:fc:e6:96:83:5f:6b:e9:07:d7:c7:89:b9:df:
                    24:75:32:09:44:f2:d4:a1:7c:88:ab:3c:c3:f1:69:
                    b1:9b:b0:84:e3:ca:ef:b9:3b:38:2b:5a:3b:c3:26:
                    52:0d:76:dd:04:44:a8:dc:f9:e1:19:60:24:43:b1:
                    bb:6e:3b:d8:7a:a3:ec:b4:df:e6:4a:02:e8:1b:45:
                    73:50:b6:cb:f4:a6:67:84:9f:00:5b:12:a4:07:4c:
                    eb:c9:59:e1:ba:fd:13:5b:5b:25:28:c3:14:95:9f:
                    60:cd:17:e0:ec:c6:50:97:75:b8:da:55:30:3f:fd:
                    5b:30:e0:cb:57:fd:8c:14:47:c2:85:bd:99:2f:3f:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:7E:E8:62:E2:AC:8E:5B:4F:85:E2:65:9B:66:CE:FC:80:DB:B0
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:90:69:76:00:4c:36:9b:4b:04:2d:b9:b7:b3:18:73:70:
         fb:f9:35:ae:75:41:e4:ab:e2:a2:4b:6d:93:a8:e3:eb:c1:1e:
         a8:a4:f0:6f:4f:85:81:59:52:26:78:48:a4:a2:1f:26:94:40:
         8c:60:fc:25:7d:49:32:fb:1d:38:84:55:2a:0b:6c:7b:af:5c:
         c8:31:7a:1b:49:82:87:6d:4f:18:b0:30:b2:41:b1:c3:48:99:
         40:0f:b9:04:cd:09:16:bf:74:33:36:52:d7:c9:03:eb:26:03:
         a3:75:60:32:c3:33:fa:4b:64:27:fb:75:4c:69:54:58:4d:65:
         50:46:1e:af:e9:d0:34:2a:94:ab:48:39:80:7e:cd:9b:46:a7:
         87:7e:b3:dc:08:53:35:15:86:de:ab:d3:84:95:19:4f:ef:fa:
         78:77:b9:14:77:7a:b3:04:a1:09:1b:c2:61:e5:8e:ad:e8:47:
         c7:66:74:94:89:8e:bc:fa:7c:4e:d5:14:10:1c:99:47:73:46:
         04:a9:d9:3e:48:78:44:f6:8d:78:8e:5b:fb:cb:1e:fc:54:72:
         46:7e:2d:bf:0e:a4:94:f3:b1:c7:2c:e5:e6:5f:38:a7:bb:a0:
         87:2b:dd:4e:dd:48:bc:03:9f:6e:a9:27:7b:d8:6b:34:e9:84:
         22:1f:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:24 2025 by rpki-client