Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File:                     b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier:          JVEw+Ss6r1tUbuqI7E43/v53LgxMFaVx9XgLx9ho47A=
Subject key identifier:   EF:2F:A5:27:EC:CD:76:63:D5:0C:65:0D:6C:8C:27:F6:FE:B8:3E:33
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer:       /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial:       0198D473CACFF6BCE2BA319FC7469BFEE104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number:          1380
Signing time:             Sat 23 Aug 2025 01:03:34 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:34 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:34 +0000
Files and hashes:         1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: U/OZDIEXyVYah5r8qFM7/SafWru0uGrWvHj8dO90cLE=)
                          2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:ca:cf:f6:bc:e2:ba:31:9f:c7:46:9b:fe:e1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
        Validity
            Not Before: Aug 23 01:03:34 2025 GMT
            Not After : Aug 24 01:03:34 2025 GMT
        Subject: CN=ef2fa527eccd7663d50c650d6c8c27f6feb83e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:13:5f:5f:6f:74:54:54:39:15:1b:d5:eb:
                    fc:0e:49:c5:91:3a:d8:9b:c3:69:a5:f0:b4:5d:b7:
                    fa:be:4e:f0:d8:07:25:d4:2a:61:7e:79:e9:f5:79:
                    cf:f9:6e:61:29:8e:47:be:11:31:74:2d:5a:6b:6c:
                    ff:d4:3a:b5:e7:2a:89:28:49:61:00:31:ea:a1:dd:
                    15:ee:ae:bf:01:ef:b2:1a:07:b9:0f:c6:f8:2e:f3:
                    d2:02:fd:a7:cd:ee:b9:26:73:f2:6d:a3:bc:11:2a:
                    6e:0b:9e:0d:85:e1:60:28:a3:56:d7:5f:17:a8:5f:
                    93:43:b1:b7:b1:39:2f:30:ea:b0:c1:5b:4e:20:44:
                    83:45:44:64:6a:22:99:b2:15:a2:b9:f6:f6:1e:69:
                    56:40:77:93:9c:8a:f1:2a:cb:db:32:0a:ae:ba:5c:
                    0e:89:5c:1a:1f:5c:b0:7a:99:7d:0f:a2:c4:54:2e:
                    ff:2e:b7:d2:9e:3d:85:43:c2:dd:bc:e4:e6:1e:f8:
                    66:9b:37:e7:ac:60:68:47:c6:63:9a:3b:12:79:af:
                    08:ef:92:ec:19:50:47:fd:3d:c6:6f:cd:4e:ff:61:
                    e8:86:56:f0:f9:a3:8c:4b:52:ef:e7:f7:ae:a3:97:
                    69:66:f0:9f:3d:0c:62:4a:90:e3:47:da:89:7c:e2:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:A5:27:EC:CD:76:63:D5:0C:65:0D:6C:8C:27:F6:FE:B8:3E:33
            X509v3 Authority Key Identifier:
                keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fc:fb:89:bb:3a:f7:fc:36:b1:4e:53:b3:ae:fb:40:f7:b5:
         f5:96:b3:84:52:99:67:7f:b5:c3:7a:86:94:cf:ff:5b:9a:60:
         5a:cb:3e:ce:53:9c:b3:d6:f9:42:9d:54:d5:37:a3:83:8d:6f:
         97:b7:e7:1c:d2:d0:4a:8c:eb:81:97:f7:cc:3b:88:1a:66:68:
         c2:3a:1c:67:ec:39:95:fb:cc:05:4a:6f:35:a2:27:51:d5:d6:
         c8:4a:3e:c9:50:97:86:06:aa:45:54:9a:59:63:70:6d:57:4b:
         0b:58:cb:b4:a0:4c:54:c0:9b:0b:e5:de:55:12:2b:63:6e:37:
         7f:92:34:d4:56:79:3a:5e:77:64:59:52:58:bf:74:d3:8e:e5:
         bf:54:66:da:c7:de:ae:0a:16:43:3f:9d:d0:1f:bd:4f:ae:e4:
         b7:68:1f:af:a2:42:e1:b1:69:66:4b:26:01:b6:b0:47:8f:4d:
         7f:e8:60:31:a5:ef:c6:20:34:f2:60:dd:0c:b2:65:0b:4b:c5:
         49:2b:ed:ed:b5:df:57:c9:f9:3c:a9:18:1d:54:20:d1:35:8e:
         cc:69:99:7c:09:40:e0:0e:42:85:a4:6f:aa:82:95:53:ca:d0:
         48:a3:95:99:37:78:44:7b:69:03:d9:2c:7e:cf:95:68:61:f3:
         5d:f0:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:56 2025 by rpki-client