Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          SmiWs1ky58yWKGRR6eyg9hx4aFW9P+P4pKTZEjBHzgw=
Subject key identifier:   C1:58:76:B2:3E:38:38:E3:F0:DA:AE:91:90:FC:D1:7F:48:AE:0C:06
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       0198D660086EA3A33E542DEFF88D1DCB199F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:01:14 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:14 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:14 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: b1q/FMueyWxGYxbNXDcm2xv1MQJ/+HKRltrztz6nmRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:08:6e:a3:a3:3e:54:2d:ef:f8:8d:1d:cb:19:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Aug 23 10:01:14 2025 GMT
            Not After : Aug 24 10:01:14 2025 GMT
        Subject: CN=c15876b23e3838e3f0daae9190fcd17f48ae0c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:20:e5:9a:0e:04:4c:53:d9:ab:0c:ff:aa:
                    e1:94:38:49:b3:9e:04:8b:45:83:c8:90:ba:94:26:
                    f0:36:b1:2f:5c:6b:5b:db:e2:2f:e8:a4:1e:b0:2b:
                    b4:35:64:a4:ea:ef:f4:1d:68:87:a9:c0:1b:90:01:
                    d3:e1:4a:6d:be:9a:24:8e:a1:aa:ee:47:17:f3:0f:
                    e6:ae:7e:3e:ce:ca:81:00:0e:3f:6b:13:57:73:ec:
                    f3:3e:4d:7c:97:29:7b:72:d6:c9:37:7c:58:85:5d:
                    74:7f:5d:ee:77:64:43:1a:82:a4:12:d4:83:aa:ee:
                    fb:ce:ba:d7:1b:77:df:8e:df:21:49:3d:18:cf:a0:
                    a0:37:f6:02:9b:0e:76:d9:77:11:63:1a:1e:7a:b5:
                    e8:39:8d:71:82:f1:0d:03:58:ff:cc:c8:33:cd:e9:
                    d6:8b:88:73:06:b0:1b:c6:a9:20:66:4f:bc:27:d1:
                    5a:e0:31:24:2e:57:0a:df:f1:80:d3:7a:6a:5d:f0:
                    02:da:8a:6d:c3:ce:bc:cc:4d:ae:ce:5f:bc:18:f8:
                    43:69:e9:e4:35:61:64:ad:55:42:c2:7c:40:4d:ea:
                    f0:fd:d1:26:63:5d:81:71:d3:d5:cf:ad:d5:5e:7f:
                    35:ae:e5:14:a8:d2:2d:51:53:a5:c8:0c:4b:53:a1:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:58:76:B2:3E:38:38:E3:F0:DA:AE:91:90:FC:D1:7F:48:AE:0C:06
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:8c:93:f7:13:88:ad:16:b5:72:51:c1:fe:81:b3:e5:fb:
         a8:31:e7:d8:bc:5f:bb:f6:ab:22:36:51:81:2e:38:af:7e:c9:
         b2:74:f7:ff:c6:1c:4f:11:3b:ca:c5:34:34:e9:81:b5:38:78:
         86:be:8c:59:8a:d2:e6:b4:a5:f4:04:87:65:da:80:59:a5:d1:
         34:7d:2e:5a:7f:8b:cd:49:c6:c5:a0:20:30:f2:e9:14:aa:83:
         f7:45:d2:d7:e2:70:8d:5e:09:75:22:31:eb:57:45:2d:6b:dd:
         e1:92:59:14:5c:09:ee:1e:16:9c:11:ad:48:5f:8e:a6:e0:ee:
         62:d4:49:8f:e3:76:58:77:4d:d4:6b:f9:14:de:06:69:be:a9:
         44:99:44:90:27:99:63:68:59:ca:e8:d6:8f:cb:bf:e0:c6:04:
         43:e0:8c:1a:12:1d:5a:f2:91:94:62:87:59:43:84:dc:9f:4b:
         96:3e:94:39:9f:68:f9:82:03:46:ad:de:f2:78:14:ce:d3:16:
         92:d3:0e:af:9e:21:5b:b4:10:a4:77:98:ad:dd:67:b1:58:a0:
         32:0b:3d:b1:72:6b:5f:af:c7:ff:8b:48:b6:27:de:d5:67:06:
         e1:7f:bb:da:b5:1c:fd:08:6b:26:90:ff:c4:3a:e8:b6:c4:62:
         21:e8:10:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYAhuo6M+VC3v+I0dyxmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjRkNGJhODViNzU1ZWY5MjljOWI5OTVlYWY3NDZkMGUw
YjZlNTEwHhcNMjUwODIzMTAwMTE0WhcNMjUwODI0MTAwMTE0WjAzMTEwLwYDVQQD
EyhjMTU4NzZiMjNlMzgzOGUzZjBkYWFlOTE5MGZjZDE3ZjQ4YWUwYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zAg5ZoOBExT2asM/6rhlDhJs54E
i0WDyJC6lCbwNrEvXGtb2+Iv6KQesCu0NWSk6u/0HWiHqcAbkAHT4UptvpokjqGq
7kcX8w/mrn4+zsqBAA4/axNXc+zzPk18lyl7ctbJN3xYhV10f13ud2RDGoKkEtSD
qu77zrrXG3ffjt8hST0Yz6CgN/YCmw522XcRYxoeerXoOY1xgvENA1j/zMgzzenW
i4hzBrAbxqkgZk+8J9Fa4DEkLlcK3/GA03pqXfAC2optw868zE2uzl+8GPhDaenk
NWFkrVVCwnxATerw/dEmY12BcdPVz63VXn81ruUUqNItUVOlyAxLU6EfDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFYdrI+ODjj8NqukZD80X9IrgwGMB8GA1UdIwQY
MBaAFNz01LqFt1XvkpybmV6vdG0OC25RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAt
NDE0NzBhOTQ1OWExLzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAtNDE0NzBhOTQ1OWEx
LzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcCMk/cT
iK0WtXJRwf6Bs+X7qDHn2Lxfu/arIjZRgS44r37JsnT3/8YcTxE7ysU0NOmBtTh4
hr6MWYrS5rSl9ASHZdqAWaXRNH0uWn+LzUnGxaAgMPLpFKqD90XS1+JwjV4JdSIx
61dFLWvd4ZJZFFwJ7h4WnBGtSF+OpuDuYtRJj+N2WHdN1Gv5FN4Gab6pRJlEkCeZ
Y2hZyujWj8u/4MYEQ+CMGhIdWvKRlGKHWUOE3J9Llj6UOZ9o+YIDRq3e8ngUztMW
ktMOr54hW7QQpHeYrd1nsVigMgs9sXJrX6/H/4tItife1WcG4X+72rUc/QhrJpD/
xDrotsRiIegQ5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:17 2025 by rpki-client