Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          kwc2tYNJFnFjknjaHp9Xukk75a8/5BTZiZr3Bz3M3U8=
Subject key identifier:   A3:D8:B2:41:7A:FF:A0:62:75:69:E9:F6:61:F2:5C:75:E7:27:BA:BF
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       0198D51612A827F216734FA8663591926EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          1659
Signing time:             Sat 23 Aug 2025 04:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:50 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: +DA6tGYq2AxsTay5NE0vjmS8wq0BKFaFpRGz7SZqiPk=)
                          2: JOdkDpvp0vkWhvJ9lV0dWUTL_74.roa (hash: Yn5hV+sSL6Zg2EJjKD6GZsY1cY5bsq3d8VKm7ARDueo=)
                          3: Mx0tomllVsmkxbnh1iU8_2PCyj0.roa (hash: 7kB7d7CTYtow392lbDCXYANcYe1E5mU3cWH2302D1Ck=)
                          4: TiEyxKmyiS65-0wzRPZF8VUxgEI.roa (hash: O61YlumzohkeBoQeKX9n1/69jzfPg7pNTilEHThyZVQ=)
                          5: UZGcM2ffX81NtAhfATE7LMKcmU0.roa (hash: IHojeJZnyEKNZzsFj36mgVJwIZkRWe7Nk65gWxDYXn0=)
                          6: gWauuati_t4mDyHK5P6-vGRw5tI.roa (hash: 8Gg051rcVEVxLbKS4zWCYakDmEwjk+i+o+ush3e3CSQ=)
                          7: rtkk5gT-jAJhBoaE_BQPXocOEfU.roa (hash: v/MP7pEa6ZGIvq0Wu6Fpus/nOHl8IEXjbt8QwhltqFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:12:a8:27:f2:16:73:4f:a8:66:35:91:92:6e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: Aug 23 04:00:50 2025 GMT
            Not After : Aug 24 04:00:50 2025 GMT
        Subject: CN=a3d8b2417affa0627569e9f661f25c75e727babf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:72:bf:a3:92:0a:9b:3b:3c:3b:56:6a:73:
                    19:d7:89:86:a2:f4:48:85:a1:87:c7:95:bf:58:bc:
                    8d:27:39:c0:bf:d3:bb:21:42:5f:05:73:b6:c7:b5:
                    d1:59:ac:50:ac:d5:e6:6b:bb:57:e3:5a:58:36:0a:
                    2f:1c:aa:a3:83:79:d0:a6:46:5e:eb:f8:66:4e:70:
                    58:b7:bf:0d:b1:98:4b:f8:38:00:23:88:ed:b1:2b:
                    94:2f:da:93:f9:00:80:18:90:17:11:f8:b3:14:26:
                    99:f1:7c:b5:6a:da:9c:7f:51:91:b8:f1:92:5a:83:
                    5d:9e:3a:c6:36:dc:a0:f6:cb:05:f9:66:51:14:5d:
                    b3:20:af:8b:a0:c8:02:15:33:ce:33:49:7b:53:c7:
                    48:7c:db:d5:12:d1:1f:ea:b8:ad:b0:56:93:39:d6:
                    18:0d:20:a8:7b:39:e0:4c:38:71:0a:6d:c1:c7:08:
                    ba:0e:6c:22:9e:69:c5:65:0e:ca:d1:3e:d5:f9:e6:
                    e6:50:9a:0f:0b:82:4c:36:70:bb:a6:4c:c9:32:cc:
                    58:db:27:54:ed:fe:7e:b2:31:5a:a7:e2:84:9a:13:
                    cb:d9:fb:fe:2a:fa:0e:68:98:2b:70:e8:f4:e6:81:
                    c0:5b:08:4e:3d:9b:ca:16:9a:81:03:f9:91:e4:bc:
                    4b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D8:B2:41:7A:FF:A0:62:75:69:E9:F6:61:F2:5C:75:E7:27:BA:BF
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:24:b3:8c:9a:b4:47:80:67:d4:29:79:3d:d7:dc:ef:45:c1:
         54:b0:66:ca:28:92:eb:64:3f:7d:3e:29:92:4e:0e:ac:9a:95:
         ed:c7:52:9e:ff:eb:91:35:ff:10:79:bd:5b:8b:88:f3:d0:dc:
         6b:98:56:fe:4e:b2:a1:06:4c:5b:07:99:c3:f2:16:05:8d:5b:
         ee:4d:a9:52:68:c2:5f:9e:ce:fd:55:74:43:13:eb:bb:27:81:
         41:c3:7f:ca:b2:66:a1:62:06:28:c8:d6:60:d8:40:d5:15:9a:
         15:88:47:f7:dc:38:a5:da:df:a8:02:56:4d:c9:5b:b2:b0:53:
         4e:13:b7:a9:70:e6:61:24:c4:da:c6:f7:5b:69:8f:ff:54:b5:
         79:d1:4c:37:b8:c8:0a:24:b4:c3:02:31:20:36:8d:35:ab:f5:
         2c:9e:05:f5:bc:bd:fa:03:c2:e0:ad:35:2c:f6:97:4d:41:a0:
         93:d0:f3:34:3d:43:c6:02:93:42:b9:30:79:f6:1e:cf:f3:45:
         3c:38:c9:3f:25:f5:5b:a0:33:b5:bc:06:97:3f:13:4e:57:d4:
         3f:4d:78:d7:d1:2c:7e:d4:e1:9f:61:2c:5c:b6:aa:20:de:8b:
         cf:c8:fb:ae:17:19:22:ef:74:45:d7:98:17:42:af:ef:96:84:
         40:db:24:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFhKoJ/IWc0+oZjWRkm6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4
ZDQ3OWYwHhcNMjUwODIzMDQwMDUwWhcNMjUwODI0MDQwMDUwWjAzMTEwLwYDVQQD
EyhhM2Q4YjI0MTdhZmZhMDYyNzU2OWU5ZjY2MWYyNWM3NWU3MjdiYWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSByv6OSCps7PDtWanMZ14mGovRI
haGHx5W/WLyNJznAv9O7IUJfBXO2x7XRWaxQrNXma7tX41pYNgovHKqjg3nQpkZe
6/hmTnBYt78NsZhL+DgAI4jtsSuUL9qT+QCAGJAXEfizFCaZ8Xy1atqcf1GRuPGS
WoNdnjrGNtyg9ssF+WZRFF2zIK+LoMgCFTPOM0l7U8dIfNvVEtEf6ritsFaTOdYY
DSCoezngTDhxCm3Bxwi6DmwinmnFZQ7K0T7V+ebmUJoPC4JMNnC7pkzJMsxY2ydU
7f5+sjFap+KEmhPL2fv+KvoOaJgrcOj05oHAWwhOPZvKFpqBA/mR5LxLVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPYskF6/6BidWnp9mHyXHXnJ7q/MB8GA1UdIwQY
MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt
YjE2NmFlMmVmMjg3LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3
LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMySzjJq0
R4Bn1Cl5Pdfc70XBVLBmyiiS62Q/fT4pkk4OrJqV7cdSnv/rkTX/EHm9W4uI89Dc
a5hW/k6yoQZMWweZw/IWBY1b7k2pUmjCX57O/VV0QxPruyeBQcN/yrJmoWIGKMjW
YNhA1RWaFYhH99w4pdrfqAJWTclbsrBTThO3qXDmYSTE2sb3W2mP/1S1edFMN7jI
CiS0wwIxIDaNNav1LJ4F9by9+gPC4K01LPaXTUGgk9DzND1DxgKTQrkwefYez/NF
PDjJPyX1W6AztbwGlz8TTlfUP01419EsftThn2EsXLaqIN6Lz8j7rhcZIu90RdeY
F0Kv75aEQNsk5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:19 2025 by rpki-client