Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File:                     3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier:          mA6ZpHztxYqf6GqV0+Fu2Q2wh+Omic8HrjrmGsfQ5JE=
Subject key identifier:   3C:37:19:4D:0B:1A:C7:A2:BB:16:24:60:D3:62:04:83:A0:46:AF:6C
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer:       /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial:       0199FCFD625111FB638C240D3E39DD6077DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number:          1325
Signing time:             Sun 19 Oct 2025 15:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:28 +0000
Files and hashes:         1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: sQ7CCYbLuXUqo+G/rOzWIyNZb1MaCxJC0fu4H//T8Kw=)
                          2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:62:51:11:fb:63:8c:24:0d:3e:39:dd:60:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
        Validity
            Not Before: Oct 19 15:01:28 2025 GMT
            Not After : Oct 20 15:01:28 2025 GMT
        Subject: CN=3c37194d0b1ac7a2bb162460d3620483a046af6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:84:7d:a1:90:20:0c:25:0f:61:f4:21:07:
                    4b:eb:83:32:1d:ab:50:a6:42:b1:82:7a:5b:80:25:
                    d1:87:63:a2:8e:d9:dc:79:3d:36:24:ff:0b:6e:9b:
                    94:d7:e4:17:ce:65:47:db:e3:59:37:a2:80:91:cd:
                    29:a0:04:cc:54:03:6f:f9:93:b5:67:4b:6d:68:02:
                    3a:23:d2:6c:fa:42:c0:fb:64:ec:4a:76:37:97:5e:
                    6a:18:40:5a:cd:e4:a1:81:dd:2d:66:3d:6f:7e:81:
                    ef:06:2e:11:bb:6a:58:fd:33:90:08:42:ea:cc:57:
                    c6:01:e8:ae:55:8d:fc:4b:44:4f:c2:15:a3:44:17:
                    0c:25:56:34:0e:bc:17:f8:19:13:37:8d:23:87:a3:
                    c7:d0:2d:78:89:c2:4a:78:94:31:99:3a:5c:c6:78:
                    a7:b9:a2:9e:58:ed:0b:d1:f5:49:75:3e:1d:2d:a5:
                    88:62:71:d5:50:5e:a3:2a:9a:65:c1:22:b9:57:19:
                    7f:27:5f:a9:7f:2a:05:63:1f:c9:5a:88:e0:26:af:
                    f6:b1:65:e4:cf:5c:85:c8:62:e5:f9:43:05:5c:83:
                    2a:99:2a:0d:32:54:75:50:30:3b:95:ae:c0:d6:85:
                    bc:76:c7:a5:04:35:17:34:1b:77:f0:d5:33:f2:a2:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:37:19:4D:0B:1A:C7:A2:BB:16:24:60:D3:62:04:83:A0:46:AF:6C
            X509v3 Authority Key Identifier:
                keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a6:70:92:a6:f4:b2:b2:e8:4e:c0:b6:05:8b:09:1b:3d:70:
         46:88:ed:f8:d6:15:1d:83:45:f2:2a:9c:5a:ac:b8:5c:c4:f3:
         98:9b:01:2c:a9:86:be:24:ca:90:1b:57:13:e5:b9:9c:75:fe:
         0d:43:83:75:f8:bf:98:89:72:1b:78:97:9d:11:c2:e2:88:ac:
         30:28:ac:1d:5d:b5:24:65:76:55:eb:6b:e4:ee:1b:f1:9d:2a:
         c0:09:7a:2b:60:76:23:ea:c8:80:3d:f6:32:3f:52:ed:6f:63:
         42:38:7d:d0:ff:8e:a0:da:80:cc:70:77:e7:89:58:11:6e:14:
         88:5d:cb:a5:f0:db:9e:84:46:a2:fc:2c:08:a4:ac:6e:a5:dd:
         dc:b8:85:ca:9e:da:8b:20:1b:82:43:eb:a1:f4:cb:ea:c1:dc:
         cc:0e:bb:e2:84:c2:5e:d3:4e:e6:c3:40:74:32:d3:2a:59:67:
         c0:b2:58:2f:6e:d0:d8:1c:76:e6:09:f0:2d:54:4a:99:f9:7e:
         f7:37:df:04:dc:d6:c0:39:3d:ea:e2:1e:55:db:80:dd:61:65:
         6f:c5:73:71:35:0b:c1:ad:6e:d7:b5:1c:48:74:18:c9:e5:3c:
         58:6d:67:83:fd:5f:40:cb:8e:a5:af:89:78:19:ed:e9:0a:55:
         9e:3e:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:38 2025 by rpki-client