Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
File:                     qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json)
Hash identifier:          8LoCbR8uwMvqXqeGmJlcgy0aCzB191srE4sfL4hDuOI=
Subject key identifier:   F1:B6:3D:E0:34:D4:75:D1:69:AF:32:93:C1:39:B1:2C:7B:5F:0C:33
Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
Certificate issuer:       /CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Certificate serial:       01984AE597359CC2723083737E2B8E121166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
Manifest number:          0795
Signing time:             Sun 27 Jul 2025 08:00:17 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:17 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:17 +0000
Files and hashes:         1: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: gxXH4ikkJp2c7+zyuNbYnIE6iNMxKgXMR4mxbODna0w=)
                          2: yHgH_lMUm4oFa_GnCsmAbIU1COM.roa (hash: MjR/P2+PrAk5Bu0tg2NHyXtBDLvOpshbkzdWh1K2WRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:97:35:9c:c2:72:30:83:73:7e:2b:8e:12:11:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5
        Validity
            Not Before: Jul 27 08:00:17 2025 GMT
            Not After : Jul 28 08:00:17 2025 GMT
        Subject: CN=f1b63de034d475d169af3293c139b12c7b5f0c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:de:ff:90:89:69:8a:11:1a:5d:6d:1c:58:
                    6f:8a:0e:43:50:48:e5:70:cc:4c:08:9a:f0:27:05:
                    27:f4:8c:63:eb:19:06:c9:7d:98:f9:e7:b8:77:11:
                    60:66:92:10:24:16:51:28:09:9a:42:45:dd:07:24:
                    5d:e6:9a:01:12:9e:7b:24:d5:53:b7:6c:71:47:35:
                    e7:f1:d7:87:b4:d7:21:27:5b:71:8b:ab:72:7e:cd:
                    62:e4:36:3e:49:88:96:c0:f4:71:71:4f:0f:08:93:
                    69:4c:53:94:f2:3a:90:b8:e2:e9:f4:72:b8:9b:13:
                    47:fe:71:3b:5f:4d:25:ec:05:3f:58:94:d0:a8:e5:
                    02:40:e4:7f:d9:d7:78:49:c8:8c:26:89:e7:5c:2b:
                    62:27:7a:a2:31:c6:20:f3:bc:a2:f8:b4:90:fb:7e:
                    a0:bc:f5:46:2c:fe:f2:b4:df:a0:68:e0:f3:c0:77:
                    d1:2e:b4:ed:d2:90:e1:bd:3c:18:50:42:99:a7:ef:
                    e6:74:2d:c2:d3:dd:a4:c5:10:7e:8e:a5:b7:e5:73:
                    b4:1b:18:00:8e:9a:bc:6c:f5:60:22:6b:8a:2e:a0:
                    89:70:ce:52:40:5a:3b:3f:f2:4c:ea:92:e1:29:cc:
                    dd:8b:77:6c:61:a1:3d:cd:1f:16:c2:24:91:d9:00:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B6:3D:E0:34:D4:75:D1:69:AF:32:93:C1:39:B1:2C:7B:5F:0C:33
            X509v3 Authority Key Identifier:
                keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:28:9e:b4:85:0f:c1:6f:2f:d7:61:7e:99:94:74:f4:98:
         96:34:c0:89:f9:7f:e6:f5:5e:ad:cb:37:b0:9a:b9:fc:bc:ef:
         f3:6c:be:9e:a2:41:62:e7:10:38:e5:a5:98:c9:80:2c:fb:40:
         31:46:a7:d1:7d:92:d8:b4:15:15:80:ba:76:0c:68:17:98:65:
         2c:ef:df:be:1a:4b:ba:60:8a:d2:c2:b8:d7:16:41:10:e7:53:
         2a:35:31:39:3e:f3:92:24:83:98:6c:43:07:06:36:77:5c:c2:
         a4:4c:0b:aa:4e:4d:26:77:7d:48:21:99:a2:1d:70:49:02:e3:
         33:a4:2b:4d:f3:3f:a7:d2:8e:67:37:f9:d7:fe:f4:38:7b:8c:
         ed:14:30:9d:60:44:62:3f:74:c1:ee:9a:8b:ce:98:e9:b5:3a:
         6e:22:d3:50:3a:9f:c4:6b:09:b6:37:3d:09:ef:c9:83:d3:ba:
         7d:97:ab:1d:d1:a0:0d:40:6f:c8:ab:3f:ca:ae:37:ce:82:e5:
         4b:a3:ca:7f:cf:c3:03:69:33:8b:c1:d3:bf:c3:ea:0c:fd:24:
         c6:d3:d9:4e:d4:6c:71:fb:72:35:fe:23:bd:9f:0c:9d:c1:c5:
         a8:08:08:ec:dc:d1:7f:11:7f:b9:ad:90:7a:0a:1d:64:2c:73:
         df:64:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:38:35 2025 by rpki-client