Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File:                     h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier:          7J2UqkhGEpzm34znxbGvG2xIcc9KqsP807K6HHb6t94=
Subject key identifier:   0C:09:CE:EA:91:10:8B:DF:D9:44:4F:36:CD:99:14:BE:67:5B:E6:7E
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer:       /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial:       0198564605B29035FFDAECCC9E9847C8DE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number:          051C
Signing time:             Tue 29 Jul 2025 13:01:26 +0000
Manifest this update:     Tue 29 Jul 2025 13:01:26 +0000
Manifest next update:     Wed 30 Jul 2025 13:01:26 +0000
Files and hashes:         1: Vzz9bAfXoV_CbBlQ5On5u4sMVy4.roa (hash: 9L5UOAnznGuqnwBvCvaXb3wcpMtqdknz4TA8q7GIbmw=)
                          2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: NyolWNfrv0mbWM008l/jrCh+r1Zk109+CxmQY0X3W7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:56:46:05:b2:90:35:ff:da:ec:cc:9e:98:47:c8:de:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
        Validity
            Not Before: Jul 29 13:01:26 2025 GMT
            Not After : Jul 30 13:01:26 2025 GMT
        Subject: CN=0c09ceea91108bdfd9444f36cd9914be675be67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:16:79:33:30:bb:8c:d8:a1:ec:a1:4e:a2:
                    de:e3:6e:21:95:f2:8e:63:b3:d3:64:7a:2a:62:c9:
                    7b:8b:24:8a:4a:ce:f3:b6:7c:a8:7f:9c:84:35:60:
                    9f:58:91:f2:0d:e1:6b:aa:b1:80:f4:7e:9d:4b:11:
                    49:d8:cf:91:17:eb:99:88:c8:df:8c:5e:d4:ce:32:
                    36:11:61:16:b2:b0:96:d7:d7:c3:4a:a1:64:62:85:
                    af:6c:2a:94:76:04:28:71:09:08:c3:0f:49:d6:2d:
                    ea:89:3f:3f:fb:a2:11:e5:e0:2a:d0:e1:17:23:10:
                    ab:51:3f:c4:ca:e0:39:96:97:db:9f:9d:93:94:e7:
                    53:a8:df:b3:88:63:c9:ce:c6:aa:84:73:85:19:fc:
                    c9:d8:5a:90:47:88:9f:0d:54:b6:1e:77:0a:79:65:
                    03:c6:b3:ed:1c:13:a4:d7:ed:8d:a9:e4:de:f6:74:
                    cc:e5:5c:d9:9d:50:64:b6:43:2e:bd:14:cd:b2:9d:
                    6f:11:e3:21:b0:3e:06:2b:1a:30:eb:40:98:2d:96:
                    ed:1e:e1:3e:c8:c4:6f:ac:cc:47:1b:a6:54:48:83:
                    90:16:3a:2e:47:fd:04:71:16:80:7e:bf:f2:94:b2:
                    df:0e:d2:eb:46:74:88:b2:86:b0:61:a3:b1:2b:1d:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:09:CE:EA:91:10:8B:DF:D9:44:4F:36:CD:99:14:BE:67:5B:E6:7E
            X509v3 Authority Key Identifier:
                keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d5:64:68:5e:b9:ff:d6:0b:3d:03:20:1b:50:1c:91:84:53:
         35:16:ae:43:c2:98:6d:e8:75:97:5a:50:7c:f5:ff:7c:43:d8:
         f4:6f:fe:a0:bb:f4:9b:b5:66:7f:45:6b:aa:69:5d:40:09:1a:
         dd:7c:4b:32:81:6c:44:61:df:08:43:a8:d4:c6:ac:59:3c:37:
         33:fb:e4:73:51:0a:ab:8a:0f:aa:8a:e8:d2:e6:6b:d3:41:ac:
         38:8f:47:c7:dc:7e:eb:e3:4a:08:ad:47:12:73:68:a0:cf:40:
         32:cf:33:c9:1f:df:81:fb:69:56:20:92:da:d0:be:9a:50:fc:
         51:c4:85:da:34:68:f8:48:77:bb:8b:fd:f0:04:28:d9:8c:bd:
         34:52:92:f6:d5:9a:e7:6a:06:9a:45:a6:0d:fb:12:05:d3:16:
         67:62:23:f3:94:88:20:ed:e8:a0:86:79:24:fa:3a:30:b5:d6:
         74:57:0b:01:f6:ec:cc:47:45:5e:0b:f1:ed:7f:ee:ec:0a:86:
         81:35:ea:b8:0d:85:d5:77:40:d0:ed:f5:43:0d:2e:f4:f0:ab:
         df:6d:ce:f6:2d:95:54:53:9a:b0:6b:fc:a8:88:c7:22:8c:ff:
         b9:83:5d:d0:e9:55:80:ea:27:8f:f6:18:eb:e7:01:17:8a:45:
         4d:c9:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:02:31 2025 by rpki-client