Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          fcWkC9i7ZJlSj+n+SPutHrLowYHGYRUBLjuBjvt6TCM=
Subject key identifier:   C3:96:2C:F1:41:2F:CB:64:B9:9B:B5:68:33:95:26:7D:B7:BB:D7:62
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       0198D583D3B72B088A1C0A4917BD3C368714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          081F
Signing time:             Sat 23 Aug 2025 06:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:43 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: 5+CTeip5VfVoOkXx8HcLQWiz94omCEEwHUcx6Tz3W+E=)
                          2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d3:b7:2b:08:8a:1c:0a:49:17:bd:3c:36:87:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: Aug 23 06:00:43 2025 GMT
            Not After : Aug 24 06:00:43 2025 GMT
        Subject: CN=c3962cf1412fcb64b99bb5683395267db7bbd762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:3c:65:e0:eb:fa:d8:b4:60:a5:e5:3a:2a:
                    52:b7:eb:e1:ef:4b:7b:5e:8f:8f:31:0a:61:5c:bd:
                    56:5b:f9:7d:35:7e:59:09:a2:c1:3d:e5:14:05:31:
                    1b:ad:81:c2:89:e1:d1:5e:70:4b:60:74:58:57:66:
                    67:e7:77:ea:81:d4:e3:a3:83:5b:72:34:5c:9c:09:
                    6f:f4:74:10:38:88:5f:18:29:22:35:0d:ee:b8:f5:
                    31:77:e3:5a:53:01:6e:0b:1c:92:35:5f:fa:3e:03:
                    30:60:6f:5d:1d:73:9b:b7:57:36:fa:c3:f8:82:cc:
                    84:7d:6a:95:ac:58:ce:ce:20:95:43:74:01:10:d2:
                    69:5a:68:05:56:c6:5a:5a:21:34:6c:10:f3:9b:6c:
                    8f:c4:85:53:06:da:30:4a:41:80:e3:18:f4:cf:51:
                    cd:45:ef:21:36:ad:b9:c4:9c:11:46:cd:18:e1:81:
                    5e:90:65:aa:23:74:40:40:7a:26:10:56:76:be:47:
                    d5:d5:4c:35:26:39:44:b4:56:42:4e:47:f4:99:55:
                    c5:dd:6e:33:81:af:ad:38:67:48:fe:9d:59:60:2c:
                    25:22:c8:ad:e2:bd:3e:18:68:38:3f:14:a3:18:ba:
                    ec:e3:df:42:3a:26:41:55:cb:c5:0f:e3:71:d3:4a:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:2C:F1:41:2F:CB:64:B9:9B:B5:68:33:95:26:7D:B7:BB:D7:62
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:da:ee:d1:80:c6:12:6f:db:3b:e5:de:92:12:f4:91:e7:19:
         58:fc:50:9e:bd:ba:50:16:63:4d:40:1b:84:ea:88:e4:42:7b:
         5d:87:82:48:20:68:78:6a:02:f4:09:52:b7:2e:9f:01:2f:43:
         f3:c4:25:e3:74:1c:bf:b7:d8:d6:8a:6d:14:77:f9:4a:6b:4c:
         e5:25:dc:6c:7e:0f:31:a8:d6:97:b4:43:0d:2e:d3:be:64:13:
         c3:51:58:64:fa:3e:ec:78:9e:3a:cf:e4:55:75:87:7b:a1:55:
         9e:00:6b:1b:a9:04:66:44:f5:4e:41:a5:f9:3e:8b:b8:60:5f:
         bc:3e:2b:a4:9e:69:15:0f:ad:63:bc:54:c9:05:7c:5c:59:1c:
         01:9b:72:48:99:c6:f5:a0:d5:00:ce:8b:c3:6a:a1:45:c5:98:
         56:47:bf:32:27:f3:1e:58:3d:6c:f0:d7:0e:53:1b:ad:6d:8d:
         0c:ec:03:45:11:5c:f9:03:45:b8:e4:e4:b8:97:ac:bf:73:4e:
         2f:ff:5d:e7:c7:52:79:1f:c1:c6:1a:01:11:87:e7:83:74:a0:
         cf:b6:29:34:9b:3a:9a:91:b0:77:3f:77:b7:e0:fd:da:80:62:
         52:1a:b5:c6:73:a8:74:30:3c:f4:0b:50:c0:c4:ee:90:f4:dd:
         5f:fd:1b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9O3KwiKHApJF708NocUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWEzYWEwY2Y4ZGZhOTE2N2QyNGQ5MmVkOGExNmViNGU3
ODA0NGMwHhcNMjUwODIzMDYwMDQzWhcNMjUwODI0MDYwMDQzWjAzMTEwLwYDVQQD
EyhjMzk2MmNmMTQxMmZjYjY0Yjk5YmI1NjgzMzk1MjY3ZGI3YmJkNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuY8ZeDr+ti0YKXlOipSt+vh70t7
Xo+PMQphXL1WW/l9NX5ZCaLBPeUUBTEbrYHCieHRXnBLYHRYV2Zn53fqgdTjo4Nb
cjRcnAlv9HQQOIhfGCkiNQ3uuPUxd+NaUwFuCxySNV/6PgMwYG9dHXObt1c2+sP4
gsyEfWqVrFjOziCVQ3QBENJpWmgFVsZaWiE0bBDzm2yPxIVTBtowSkGA4xj0z1HN
Re8hNq25xJwRRs0Y4YFekGWqI3RAQHomEFZ2vkfV1Uw1JjlEtFZCTkf0mVXF3W4z
ga+tOGdI/p1ZYCwlIsit4r0+GGg4PxSjGLrs499COiZBVcvFD+Nx00o/RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOWLPFBL8tkuZu1aDOVJn23u9diMB8GA1UdIwQY
MBaAFNwaOqDPjfqRZ9JNku2KFutOeARMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUt
MmRkNjUwZWE0YWMzLzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUtMmRkNjUwZWE0YWMz
LzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNru0YDG
Em/bO+XekhL0kecZWPxQnr26UBZjTUAbhOqI5EJ7XYeCSCBoeGoC9AlSty6fAS9D
88Ql43Qcv7fY1optFHf5SmtM5SXcbH4PMajWl7RDDS7TvmQTw1FYZPo+7HieOs/k
VXWHe6FVngBrG6kEZkT1TkGl+T6LuGBfvD4rpJ5pFQ+tY7xUyQV8XFkcAZtySJnG
9aDVAM6Lw2qhRcWYVke/MifzHlg9bPDXDlMbrW2NDOwDRRFc+QNFuOTkuJesv3NO
L/9d58dSeR/BxhoBEYfng3Sgz7YpNJs6mpGwdz93t+D92oBiUhq1xnOodDA89AtQ
wMTukPTdX/0bSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:19 2025 by rpki-client