Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File:                     3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier:          Z9EeoE/GVDPtD92M3otlFzk/qxZxicd2oOPXnw+LXqA=
Subject key identifier:   E2:82:F8:B3:0C:F8:66:D5:B9:31:6F:7A:92:C4:A4:90:8A:B5:5A:C5
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer:       /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial:       0199FC215B2CB44EFE000C7F8397B11F3BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number:          1674
Signing time:             Sun 19 Oct 2025 11:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:08 +0000
Files and hashes:         1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: 1OS1zTxHebo12ISQhPn4qEFA3XyHonfFU3lZERW6Cys=)
                          2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:5b:2c:b4:4e:fe:00:0c:7f:83:97:b1:1f:3b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
        Validity
            Not Before: Oct 19 11:01:08 2025 GMT
            Not After : Oct 20 11:01:08 2025 GMT
        Subject: CN=e282f8b30cf866d5b9316f7a92c4a4908ab55ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:0c:eb:97:0f:6e:94:89:bb:4e:07:15:2e:
                    de:b7:48:b3:97:3d:2b:48:e7:77:26:60:f7:fa:e9:
                    e8:fa:81:94:54:9d:ea:f7:b1:05:30:9b:23:ac:e1:
                    c2:3d:7c:22:58:78:90:fb:32:12:96:2c:a1:e3:20:
                    90:d1:4b:ed:e8:65:dc:d7:6a:a5:a4:d0:e7:c7:d7:
                    1e:98:00:92:87:9d:4f:73:5d:9d:7e:b2:b6:c9:b6:
                    5b:bb:8c:25:98:97:b9:8c:e2:f8:14:c0:9f:ec:6f:
                    37:1c:7a:f2:57:a1:f5:b8:88:de:48:6f:24:85:ae:
                    e7:b7:da:b9:60:a7:2e:17:4f:70:75:21:0a:2b:36:
                    e2:d9:53:0a:86:18:5a:50:56:52:26:fd:f3:fe:5a:
                    05:bf:98:a4:07:a1:a9:5b:fa:01:b9:7d:85:99:fa:
                    81:b5:71:5e:29:5c:36:1c:07:fe:3f:c5:1e:fa:d0:
                    8e:c0:77:11:25:d6:6d:e2:8f:90:55:af:1f:c7:a4:
                    ba:dc:70:f2:fc:46:1f:d6:3c:ee:7f:f8:75:30:7d:
                    c1:e8:d2:2c:2f:ec:a5:ed:92:ae:8e:50:de:aa:5f:
                    f6:e2:f4:48:95:91:0b:cd:6f:9e:a2:52:4b:67:c8:
                    23:7a:88:e9:9d:68:bc:2b:f0:19:b3:2c:d9:09:63:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:F8:B3:0C:F8:66:D5:B9:31:6F:7A:92:C4:A4:90:8A:B5:5A:C5
            X509v3 Authority Key Identifier:
                keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:29:f6:d8:4b:a3:52:5f:08:7c:48:67:56:6f:11:c3:d6:d6:
         34:59:81:cd:c6:e2:36:f3:ea:e9:35:93:7b:a5:7e:7e:80:52:
         78:8b:31:50:5f:71:55:32:90:6d:6b:54:89:2e:28:30:e2:75:
         50:62:0e:28:3c:e5:94:76:75:b6:9e:3e:37:6e:ab:ae:9f:69:
         48:b4:ca:e1:36:ab:a1:e6:65:32:b1:22:fc:02:d4:9e:62:80:
         11:1e:12:ac:49:21:83:60:2d:f7:75:e8:7c:b0:62:eb:28:12:
         49:81:20:4b:88:75:28:b0:28:d8:c4:de:12:f1:b3:1f:b7:d3:
         36:56:0f:c5:3b:f6:87:38:7c:3e:bb:7e:4d:e3:68:5d:7e:04:
         8a:f3:64:63:43:bf:d7:9e:12:09:ac:b9:fa:f8:f4:da:1a:fd:
         e1:02:74:63:d5:da:fe:ce:0e:f1:e1:7f:93:ba:79:b0:61:7f:
         39:b2:21:e9:07:e6:dd:7f:d4:bc:8b:80:b8:29:9f:be:aa:35:
         78:86:78:77:57:7c:6a:d6:52:9a:72:a2:eb:c8:42:93:15:84:
         51:4c:7f:3b:5d:0a:5f:ac:cf:6e:4f:d8:33:8c:31:eb:9b:bb:
         ed:cc:85:5b:10:bc:4d:67:37:39:7b:61:f0:0f:96:aa:35:58:
         a0:8c:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:55 2025 by rpki-client