Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File:                     hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier:          WdJu1W0Y/x4CZjMG8PIHJNDUqVRfJGLX7uf3sOwTl2o=
Subject key identifier:   2F:8E:B3:AF:6D:49:EC:64:CE:F0:2E:96:91:28:81:59:13:A3:E4:A9
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer:       /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial:       019847781CB89A6470791D9159E8191EB107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number:          0753
Signing time:             Sat 26 Jul 2025 16:01:50 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:50 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:50 +0000
Files and hashes:         1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
                          2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: SWXbrKj9s7Lpu5SlmpYyZfkzAIZ/c4ELwkzkKhh6hzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:1c:b8:9a:64:70:79:1d:91:59:e8:19:1e:b1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
        Validity
            Not Before: Jul 26 16:01:50 2025 GMT
            Not After : Jul 27 16:01:50 2025 GMT
        Subject: CN=2f8eb3af6d49ec64cef02e969128815913a3e4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:79:e0:33:46:32:ca:05:06:11:c4:2f:77:
                    f0:71:aa:ea:d4:92:b3:1d:fc:f4:42:73:8b:d6:c3:
                    5b:5d:3a:82:2a:5a:d6:ab:f2:b1:97:82:39:d3:86:
                    c2:5a:e6:a0:dc:6d:53:c6:ac:fc:ad:d6:59:6d:ab:
                    4f:d5:20:5e:a3:28:fb:fd:ba:da:db:ed:88:76:69:
                    48:7b:08:67:6b:93:61:be:08:b6:1e:52:84:d4:33:
                    33:2e:40:07:f9:b0:28:a7:97:bc:37:65:3c:a6:56:
                    c9:72:24:8f:8d:8e:e4:6c:4c:21:f4:46:0e:6a:60:
                    b2:33:5e:80:92:34:f1:8a:2c:76:bf:1b:7c:6e:f7:
                    3a:f3:9a:04:4f:6d:0c:d7:59:b1:07:fb:6f:67:73:
                    22:89:e0:eb:cc:ea:3b:a8:d4:7f:5e:f9:25:4d:91:
                    61:8a:ca:31:a7:bc:e4:7b:5a:fc:76:ef:fb:03:58:
                    d8:0f:3d:51:7b:6c:b9:e6:de:83:ba:2c:5a:45:d5:
                    29:d1:dd:00:53:f7:41:87:a2:f4:85:72:51:0b:90:
                    ad:f4:2d:52:7b:01:cd:5a:53:1a:ae:35:e8:39:94:
                    0a:95:a7:48:20:79:de:67:8e:1e:01:3d:09:7a:52:
                    19:02:11:7f:85:19:d9:f7:38:d1:4e:46:4b:d4:b2:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8E:B3:AF:6D:49:EC:64:CE:F0:2E:96:91:28:81:59:13:A3:E4:A9
            X509v3 Authority Key Identifier:
                keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:97:c3:5c:f6:33:da:06:20:34:da:c4:eb:c0:2b:71:f2:67:
         a5:7f:80:79:4f:9e:69:37:38:3e:13:0d:ad:20:29:09:ca:3b:
         1b:3b:c3:72:d3:c7:99:12:b5:39:ef:cb:1d:c2:6c:0f:78:8b:
         4d:02:3f:2f:02:82:81:72:b9:30:63:b1:b3:d3:96:5c:ba:6a:
         8a:0b:60:92:12:6f:06:a5:d4:bc:2d:29:b3:aa:6d:26:81:24:
         d0:fd:fb:cb:03:a0:a9:4b:8b:9b:94:94:c7:76:e2:79:7d:9a:
         a7:70:2b:4c:e7:e3:15:39:67:7e:fe:71:d5:9c:40:18:85:69:
         72:98:60:ab:f2:61:fe:c5:c6:9e:4a:3e:83:1c:83:99:d9:e8:
         91:fc:ae:ce:ff:e3:a1:b2:15:dc:c7:4a:5c:2b:5b:59:45:42:
         93:a8:7a:9f:be:65:9e:6d:6f:8e:1a:d5:cb:47:79:c4:ef:75:
         77:00:61:4d:9a:e4:fc:08:b8:71:b7:7b:b7:e7:4a:02:24:ac:
         c2:2e:1b:5d:db:44:e1:d3:58:a5:6e:4d:94:1a:7f:6f:8a:69:
         8d:93:55:e3:80:81:b6:02:39:14:33:e7:9d:ab:58:1e:3c:44:
         b1:92:4d:cd:74:6f:15:f4:34:30:3d:dc:15:68:dc:90:af:37:
         a3:d1:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:34 2025 by rpki-client