Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File:                     HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier:          Y/gSPLKKs6+/h0cWzAhWgWhMnsAN3UnLW2DBh8roorM=
Subject key identifier:   4C:1F:45:01:1A:2E:CD:58:14:1B:57:4B:EB:85:17:5D:C0:11:83:B7
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer:       /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial:       019848898E692E8682B69EF71CAC9CC307A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number:          0CF6
Signing time:             Sat 26 Jul 2025 21:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:30 +0000
Files and hashes:         1: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (hash: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=)
                          2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: NyPXZPJSjPo1H9yE8IcThlQGEAzbMd+JmhPb++3uLOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:8e:69:2e:86:82:b6:9e:f7:1c:ac:9c:c3:07:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
        Validity
            Not Before: Jul 26 21:00:30 2025 GMT
            Not After : Jul 27 21:00:30 2025 GMT
        Subject: CN=4c1f45011a2ecd58141b574beb85175dc01183b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:a8:7f:c8:5e:a3:82:c7:c4:75:e7:c3:e0:
                    55:15:e4:bc:1b:3a:f0:c4:3b:88:22:fc:f9:6d:9e:
                    30:42:e5:ca:a8:7b:35:d0:18:8a:a7:36:4b:df:71:
                    0a:69:e3:55:f9:cb:47:2f:45:38:b2:34:67:6e:57:
                    1b:a0:4d:cf:1f:0d:33:f3:c7:15:c4:64:83:31:32:
                    02:da:cf:af:1f:23:54:fa:2d:96:4f:b4:2a:17:74:
                    be:f4:b1:c0:11:a3:ec:85:41:7c:50:ad:7b:44:3e:
                    b7:7c:b2:3f:d0:0a:54:78:2e:3e:cd:7a:13:20:e1:
                    b4:84:b8:9c:5c:62:66:f4:36:25:8c:5c:3f:69:ed:
                    15:84:08:88:fe:81:73:26:2f:bf:55:91:f0:b4:74:
                    b0:1e:38:72:28:cd:78:d8:87:67:b8:a6:46:e9:9f:
                    6b:ec:ab:a8:74:cd:1f:79:d7:e1:98:23:14:7d:e9:
                    99:74:5a:e4:09:e6:5b:1e:f1:82:e9:d9:ec:91:f8:
                    22:3e:42:7b:1a:2c:1a:0b:ec:76:4f:68:78:2a:44:
                    14:dc:c3:5a:d8:2b:ce:be:fe:bc:82:da:53:28:15:
                    ef:2a:38:4e:1c:95:5c:01:25:3d:52:6c:35:83:81:
                    89:44:1b:c7:b2:67:22:43:63:3b:7a:73:8b:0d:0a:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:45:01:1A:2E:CD:58:14:1B:57:4B:EB:85:17:5D:C0:11:83:B7
            X509v3 Authority Key Identifier:
                keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:bb:71:71:15:03:a3:14:25:4e:b9:39:f6:77:25:2c:96:bf:
         ae:8d:ff:c4:b9:96:fb:8b:8f:3a:03:70:a9:6d:38:d7:4e:4a:
         de:73:2e:8a:c5:66:9b:b3:18:17:9d:b1:6b:7a:13:23:96:26:
         ce:2c:48:ce:e2:47:e9:d1:8b:87:78:f0:48:a5:4c:e2:eb:e5:
         77:00:58:c3:72:9f:93:75:ed:2a:a7:10:da:12:5e:c8:86:ec:
         8e:cf:02:0b:df:80:70:4a:92:bd:5f:e8:63:40:b0:36:37:8d:
         34:4f:87:91:f1:56:9a:ca:7b:bd:c8:36:74:83:78:01:8e:8a:
         0a:ea:b5:d2:96:58:b3:0b:26:c8:de:6a:cb:d0:1c:39:3e:df:
         f5:c8:51:70:b0:53:13:a3:74:bc:b8:96:21:b6:17:6e:26:8c:
         52:91:65:f8:20:d9:79:19:83:53:20:58:ba:11:c0:60:56:03:
         16:93:b2:78:b1:fb:8d:40:97:62:d8:32:cc:34:5b:b9:ce:de:
         fc:0f:80:27:82:4d:2d:da:01:00:0a:0e:88:93:69:ab:bb:63:
         38:8e:bf:2d:3d:19:7d:7f:0e:7a:5c:b5:bf:c2:b7:09:32:40:
         34:9b:02:ff:65:3e:da:d6:ba:5f:3f:5d:94:cc:8c:a0:d5:d5:
         58:f7:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:43 2025 by rpki-client