Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File:                     mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier:          E2uUQBV8Y3p9yg1B+f9ncP+g0HphCpWqvOSuSpGVkP4=
Subject key identifier:   64:4D:97:DA:57:24:17:54:D2:0A:A4:D8:82:88:8F:EE:10:BA:84:4A
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer:       /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial:       01984A0A507774E54DE8B70E31A713C0EFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number:          0413
Signing time:             Sun 27 Jul 2025 04:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:46 +0000
Files and hashes:         1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=)
                          2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=)
                          3: CF82jVUVZeKpuyFYv8cM6TsLQC0.roa (hash: JBQmTeNOrtVCdfq+3VNtxXtIRDR/14iOJ6hQdOlG2Jg=)
                          4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=)
                          5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: JEe0fNtvyVFLnc7xZJEn55ElBYiBysKbkEJ6ydTM9g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:50:77:74:e5:4d:e8:b7:0e:31:a7:13:c0:ef:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
        Validity
            Not Before: Jul 27 04:00:46 2025 GMT
            Not After : Jul 28 04:00:46 2025 GMT
        Subject: CN=644d97da57241754d20aa4d882888fee10ba844a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:da:3f:4e:0c:aa:03:87:dc:09:79:f2:a6:
                    61:a1:17:99:c1:b0:c4:00:3f:37:67:1b:bf:1c:3a:
                    a5:ef:9a:c9:16:54:1c:d7:46:f3:82:bf:73:0b:6a:
                    8f:84:24:a0:2a:ca:df:98:b6:e2:03:44:9c:84:67:
                    d1:a3:49:36:72:f8:8b:0a:ff:e4:11:2c:86:3b:25:
                    28:01:30:30:0c:e3:e3:02:57:4f:ca:34:d3:7f:47:
                    a1:52:76:11:20:31:e5:58:4c:18:8d:86:a4:f3:fb:
                    c4:2a:b0:1e:e3:5e:11:d2:af:6a:8d:74:9e:2a:71:
                    d2:e5:78:d8:8c:aa:fc:aa:38:d5:35:42:4b:af:1f:
                    67:9e:80:5f:08:47:e8:52:33:d4:a2:98:14:40:d2:
                    5b:f2:a6:6b:a7:89:44:5d:7d:60:69:f4:13:36:44:
                    7b:fc:4b:aa:55:7c:a5:c1:96:fc:5b:a4:19:76:a6:
                    0c:8f:c8:8a:3c:db:a5:be:74:28:53:6c:8d:59:aa:
                    91:5d:8d:07:37:26:a8:58:85:00:2c:8b:cd:64:0b:
                    fd:82:28:d7:97:c1:8a:24:ec:86:4e:86:a9:ef:56:
                    46:8f:33:8c:62:b9:13:2e:2e:15:04:ad:ef:fe:9f:
                    48:31:6a:04:a3:da:72:e6:74:f5:35:70:c4:8c:f1:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4D:97:DA:57:24:17:54:D2:0A:A4:D8:82:88:8F:EE:10:BA:84:4A
            X509v3 Authority Key Identifier:
                keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:d8:f8:38:13:b8:ea:5a:19:7b:2d:56:3d:fb:c1:96:c7:
         c5:0b:d8:2c:37:1c:61:30:07:4d:37:fe:da:93:6a:c4:ba:6e:
         b3:f3:a8:95:74:46:33:2e:44:cd:a1:1c:86:4e:47:08:9a:38:
         bb:89:7c:08:ae:4f:ef:61:a9:90:61:d5:e4:06:34:e8:38:60:
         68:71:0a:6b:ea:70:35:2c:df:37:66:e4:14:be:bf:d0:04:ed:
         a7:88:54:86:3b:ca:5c:27:2d:2f:c2:03:37:46:6b:fb:b7:21:
         0f:50:f7:27:a3:94:1d:93:f9:2a:d3:8f:8c:c5:f3:d6:f3:c1:
         64:21:5d:47:e1:6f:d0:9a:39:e9:09:06:3a:56:d2:3d:d3:fd:
         c2:16:c0:3b:5b:28:42:e2:4e:7c:52:e2:d5:b4:d7:44:cb:18:
         0b:6c:5f:23:22:37:90:69:35:39:74:bd:7a:49:42:8b:1f:3c:
         8d:be:6c:17:02:f2:3e:8d:46:ac:7a:5f:de:03:d9:b2:b1:a8:
         d8:2e:ba:29:5c:c0:d9:89:8d:dd:90:12:d0:3a:9d:21:52:31:
         81:9f:d1:20:63:c6:b8:94:7c:76:65:6e:e7:f6:72:79:c6:3d:
         e3:98:a0:36:ad:3b:d3:83:33:8b:88:f5:5e:36:3c:e8:0a:46:
         40:58:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:40 2025 by rpki-client