Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
File:                     RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json)
Hash identifier:          6I7m64RF28XwREKJWWnJWpal9BnEvbtZM7Ul/Zl8eoQ=
Subject key identifier:   1B:1B:5A:A0:AB:A0:3E:D9:D3:27:AF:25:05:94:4C:FE:FD:09:F1:DD
Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
Certificate issuer:       /CN=447c52d81edc1249644ad794be028af90e024a16
Certificate serial:       01984A09EFE2DC1509505F689077D620D0A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
Manifest number:          09AD
Signing time:             Sun 27 Jul 2025 04:00:21 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:21 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:21 +0000
Files and hashes:         1: 0RTmTUPTdqVwMU5i8iRqJZA86F0.roa (hash: eIjsDcha7FolfU5e8Eelou/OO0UBzir5atE5Gevb/B4=)
                          2: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: ieBkqgb4QT8xdtJ6mlsaiN3xIfTAg2oXoSnaUufTb4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:ef:e2:dc:15:09:50:5f:68:90:77:d6:20:d0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447c52d81edc1249644ad794be028af90e024a16
        Validity
            Not Before: Jul 27 04:00:21 2025 GMT
            Not After : Jul 28 04:00:21 2025 GMT
        Subject: CN=1b1b5aa0aba03ed9d327af2505944cfefd09f1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:a4:89:7d:25:c0:74:af:c6:1f:fa:60:9c:
                    bf:ee:ed:c3:e5:95:bf:35:39:6a:bd:c9:37:ca:7f:
                    14:c3:78:dc:0f:a6:57:46:7a:63:b4:df:da:e5:39:
                    9b:35:b2:43:2d:5d:6b:f9:3d:a1:5b:db:40:4b:1b:
                    04:a8:4a:64:18:7d:a2:37:e4:8f:c7:90:59:52:f2:
                    40:b0:db:d6:1d:c1:02:43:92:58:ab:46:7d:f9:f6:
                    0f:e1:52:c6:7b:1e:8a:fc:a2:6f:99:36:6e:ed:97:
                    4d:6f:60:04:47:dd:1c:aa:9f:02:5d:b4:c3:a6:2e:
                    47:d4:74:f2:49:24:a0:6c:cc:22:f1:eb:7c:c4:29:
                    cb:6f:9a:f8:0a:c8:83:d4:b5:d8:53:f1:e2:c9:51:
                    a9:a8:3c:5e:1f:6d:83:10:a0:b5:7c:75:89:fd:d6:
                    1b:fe:68:4f:36:1e:c3:e5:b6:b3:6b:92:24:50:39:
                    1d:74:34:cf:d8:8f:f8:23:b5:43:1b:9d:17:68:39:
                    ad:88:20:b7:99:c1:0b:9a:ca:e7:b4:5d:c0:80:fb:
                    8a:41:47:fb:3b:98:41:52:ae:a2:07:06:fc:4c:4f:
                    2e:27:65:6f:0a:80:61:56:e8:f3:c4:cf:ba:f3:d9:
                    08:28:98:52:21:c4:6f:13:e5:59:10:68:75:3c:dc:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1B:5A:A0:AB:A0:3E:D9:D3:27:AF:25:05:94:4C:FE:FD:09:F1:DD
            X509v3 Authority Key Identifier:
                keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d3:1f:4b:bc:ef:24:21:96:11:45:c6:fc:63:27:5f:20:b1:
         22:dd:df:5a:87:a3:46:a5:a8:d5:47:7d:72:aa:a0:8e:3b:ed:
         ec:e9:d6:02:06:8b:36:ab:49:80:1a:91:cd:ea:16:44:00:2c:
         3b:38:90:8c:1f:fc:09:3d:40:8f:40:ac:91:a0:13:f0:f0:11:
         8f:bb:8d:6a:de:b9:72:82:01:77:05:1a:25:1c:15:49:53:41:
         d4:bc:d6:e6:4d:a0:54:58:da:4e:27:e5:88:a4:30:b5:0c:e6:
         f8:9b:4d:8a:3f:b7:7b:05:81:e4:d7:97:0a:bf:50:c6:de:70:
         52:92:09:21:46:ff:68:6d:5c:db:f9:f8:4b:b0:ba:6f:51:93:
         12:9f:77:3d:cf:42:0b:84:4b:07:d1:e3:9b:e5:ed:91:72:ac:
         c2:6e:10:8b:ac:12:f1:2a:80:e5:ad:a1:71:cb:df:bc:c5:b2:
         02:37:18:c4:52:e3:53:94:61:66:4e:bc:7d:a2:80:85:a6:f4:
         b4:c2:62:18:79:54:a8:94:69:6a:6e:1a:4c:b5:8c:27:13:07:
         0e:0b:f5:bc:67:0c:c6:47:a7:14:10:f6:81:5b:11:b7:84:ef:
         e6:5b:d2:1c:03:86:b9:65:cf:94:28:c4:2b:ae:e4:cd:be:c8:
         91:f8:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:29 2025 by rpki-client