Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          Gl4+FA3ZLcz70niR0BUlwxTYMqYKsls6w+PKctGsjlM=
Subject key identifier:   A8:CF:9C:70:70:70:24:EF:D7:3F:A0:BD:DB:47:EF:85:1F:3C:EE:EA
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       0198D5160F6B1CC2756352A4F129F3BA47AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0B3B
Signing time:             Sat 23 Aug 2025 04:00:49 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:49 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:49 +0000
Files and hashes:         1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: NzFpAOD8Eg6W6PkzHwX65B0u0JFg/Qd4+OoJWHNn9ms=)
                          2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=)
                          3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=)
                          4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=)
                          5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=)
                          6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:0f:6b:1c:c2:75:63:52:a4:f1:29:f3:ba:47:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: Aug 23 04:00:49 2025 GMT
            Not After : Aug 24 04:00:49 2025 GMT
        Subject: CN=a8cf9c70707024efd73fa0bddb47ef851f3ceeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:38:e7:42:b7:d3:09:a5:6d:53:9e:8d:cf:
                    ca:03:da:0e:8e:ff:aa:af:0e:4e:ad:9f:89:3d:f0:
                    e4:d5:73:0c:d2:9e:d3:b1:ba:1f:3c:44:69:d8:3e:
                    38:41:81:38:c9:01:f0:6d:9d:d4:84:df:89:30:9e:
                    eb:38:64:48:0a:2f:13:49:16:47:19:51:99:e0:aa:
                    56:cf:6f:a9:17:92:e3:15:b2:e1:df:9d:60:60:b0:
                    39:c5:55:c2:0a:e4:cf:cf:ce:97:6b:b9:86:ee:9d:
                    cb:37:de:96:35:5e:f9:fb:5a:46:a8:4a:fa:c4:cb:
                    19:21:4b:05:ad:00:61:1b:b3:61:c5:6b:39:a8:df:
                    cc:04:33:95:92:08:de:78:36:ac:09:64:8b:7d:7e:
                    e6:3a:21:90:51:48:f9:f2:72:e4:cb:5d:61:9b:b5:
                    46:be:09:5b:1a:64:13:a2:a5:dd:f2:df:c5:d1:70:
                    25:95:06:68:50:6d:13:0a:98:80:89:ac:99:4f:66:
                    41:95:70:c5:00:52:7c:d8:84:60:60:07:b2:ac:af:
                    cf:b5:eb:91:07:d3:36:92:59:74:70:c5:94:ad:7f:
                    bf:93:5d:4b:64:53:ea:bb:9f:56:10:d4:75:df:93:
                    90:95:09:3a:7f:5a:93:1e:d3:5d:6d:6b:f9:46:48:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CF:9C:70:70:70:24:EF:D7:3F:A0:BD:DB:47:EF:85:1F:3C:EE:EA
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:61:3f:57:4e:3a:2d:b2:fe:a4:1a:32:65:64:fe:8b:54:cf:
         b2:75:cb:8e:45:4c:43:05:aa:cc:4b:d6:43:ed:6c:4d:ef:eb:
         10:af:90:11:8f:5c:08:78:6f:c5:31:17:27:b0:52:99:f5:87:
         1a:bf:8e:dc:61:b5:ac:67:c8:04:6d:ba:01:ab:4b:5c:64:51:
         5b:78:bc:ec:54:32:4e:19:c8:1d:d4:4f:69:07:6b:e7:49:b1:
         08:b8:f8:da:35:13:7a:66:eb:f0:52:d4:70:d4:65:99:75:db:
         32:8c:d2:e1:6b:25:b8:8f:48:ec:ca:5e:19:99:b5:dd:ee:4f:
         2e:23:d7:fb:5b:4b:dc:af:04:7e:a1:97:bf:a0:c4:f1:ce:6f:
         ae:d3:96:d0:29:b0:77:bf:39:c8:df:96:e3:1e:f1:61:d7:17:
         23:d3:f2:e2:db:20:ad:2b:0e:fa:2f:3e:69:cf:c8:e5:4d:d1:
         a9:3e:5e:c7:fe:80:01:aa:56:3e:30:1f:4b:70:7f:a2:8d:88:
         db:b5:3c:c9:e6:b2:ca:a9:6e:3f:35:a9:55:b5:6c:01:55:6d:
         4d:56:9c:e9:b6:ba:57:ac:ed:5a:ba:70:02:70:ed:9c:74:2e:
         9f:e6:7e:2b:e0:2a:4f:e1:a8:ed:c0:de:0a:bc:7c:24:d7:c4:
         f7:79:4d:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFg9rHMJ1Y1Kk8SnzuketMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx
ODkwM2MwHhcNMjUwODIzMDQwMDQ5WhcNMjUwODI0MDQwMDQ5WjAzMTEwLwYDVQQD
EyhhOGNmOWM3MDcwNzAyNGVmZDczZmEwYmRkYjQ3ZWY4NTFmM2NlZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GM450K30wmlbVOejc/KA9oOjv+q
rw5OrZ+JPfDk1XMM0p7TsbofPERp2D44QYE4yQHwbZ3UhN+JMJ7rOGRICi8TSRZH
GVGZ4KpWz2+pF5LjFbLh351gYLA5xVXCCuTPz86Xa7mG7p3LN96WNV75+1pGqEr6
xMsZIUsFrQBhG7NhxWs5qN/MBDOVkgjeeDasCWSLfX7mOiGQUUj58nLky11hm7VG
vglbGmQToqXd8t/F0XAllQZoUG0TCpiAiayZT2ZBlXDFAFJ82IRgYAeyrK/PteuR
B9M2kll0cMWUrX+/k11LZFPqu59WENR135OQlQk6f1qTHtNdbWv5Rkiw+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjPnHBwcCTv1z+gvdtH74UfPO7qMB8GA1UdIwQY
MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt
ZmY5N2Y2MmEwOTQ1LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1
LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemE/V046
LbL+pBoyZWT+i1TPsnXLjkVMQwWqzEvWQ+1sTe/rEK+QEY9cCHhvxTEXJ7BSmfWH
Gr+O3GG1rGfIBG26AatLXGRRW3i87FQyThnIHdRPaQdr50mxCLj42jUTembr8FLU
cNRlmXXbMozS4WsluI9I7MpeGZm13e5PLiPX+1tL3K8EfqGXv6DE8c5vrtOW0Cmw
d785yN+W4x7xYdcXI9Py4tsgrSsO+i8+ac/I5U3RqT5ex/6AAapWPjAfS3B/oo2I
27U8yeayyqluPzWpVbVsAVVtTVac6ba6V6ztWrpwAnDtnHQun+Z+K+AqT+Go7cDe
Crx8JNfE93lN8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:14 2025 by rpki-client