Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File:                     Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier:          TdJqtU//myn78RxsRzbBqOxdtCABzpBnzNcNJZQw+v8=
Subject key identifier:   34:9E:B5:CA:47:F8:0E:18:A6:0D:09:8D:1B:08:B4:BE:39:D6:93:FF
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer:       /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial:       01983FBE471D0CDA75D84A0395BC990F2C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number:          01F1
Signing time:             Fri 25 Jul 2025 04:01:31 +0000
Manifest this update:     Fri 25 Jul 2025 04:01:31 +0000
Manifest next update:     Sat 26 Jul 2025 04:01:31 +0000
Files and hashes:         1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: CNCFABKf9dkwjFANqeQ1UmasPbLxoL2nJT0fePMJ+b0=)
                          2: M29MZHaUVWtK3najarc1yezWgKc.roa (hash: DgsfcRzAIkNIxHuMwWB3b5pmyNDgSLwh6M/sC1bq7QQ=)
                          3: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
                          4: g6q7q2HLmrL68PDSTTyRIYBNcJY.roa (hash: eTY6Q+eiIrBv9YE0+f1h1CVgS/oOAfzZcA42kSmU6+0=)
                          5: tVe9NnJO2Z95ZTZ1L61RChKUAa0.roa (hash: f4jqfRGm53uIrMSNBpcr7YiVL+9kyYDEvd948D1JBYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:be:47:1d:0c:da:75:d8:4a:03:95:bc:99:0f:2c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
        Validity
            Not Before: Jul 25 04:01:31 2025 GMT
            Not After : Jul 26 04:01:31 2025 GMT
        Subject: CN=349eb5ca47f80e18a60d098d1b08b4be39d693ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:12:74:99:9f:7f:d3:ba:d0:72:f1:c1:22:
                    93:fe:9c:93:de:18:d9:50:24:33:23:de:47:48:90:
                    25:7e:22:16:2c:f6:2d:b6:02:0d:c5:19:aa:b6:54:
                    67:a9:96:fd:1a:a0:54:af:2e:05:22:25:c7:6b:6b:
                    cc:87:70:c1:5f:59:ed:0a:7f:94:e2:01:bb:d4:a5:
                    45:32:e4:3b:51:0c:48:f4:44:e7:d3:0e:90:b8:26:
                    f2:80:c5:97:71:95:64:b6:fb:cf:e7:df:f3:b1:cc:
                    12:d5:aa:c2:86:53:fb:9a:5d:a8:74:0f:9a:a0:07:
                    98:c7:bc:37:a3:69:ca:6a:d8:15:5f:5c:8f:03:8b:
                    4e:f9:b7:69:b1:15:a8:5d:0c:d0:46:d9:d7:9a:6d:
                    4a:d8:ac:17:e1:85:f8:ed:eb:3f:cb:dc:25:0e:68:
                    72:45:f4:a2:d0:9c:11:f9:d0:c9:f9:bd:6c:1f:81:
                    d9:a5:38:63:9f:4f:cf:1b:f2:d3:08:98:da:64:6e:
                    50:d8:6e:4d:e6:4d:a8:0d:bc:ff:18:dd:cc:4e:0f:
                    d8:dd:a7:90:8d:ac:44:dc:70:a6:3b:cd:6a:03:97:
                    02:24:e4:2e:d0:fd:3b:b0:16:c1:23:42:86:7d:1c:
                    61:38:42:88:2c:16:ed:1a:04:bb:4d:66:69:02:e3:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9E:B5:CA:47:F8:0E:18:A6:0D:09:8D:1B:08:B4:BE:39:D6:93:FF
            X509v3 Authority Key Identifier:
                keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:ab:97:54:d7:63:50:0e:70:fe:b5:4d:97:9d:f6:83:10:
         46:e0:3f:f6:35:14:9b:f7:8c:10:22:1f:26:fc:ea:4e:b5:34:
         61:4c:d5:22:2b:5a:51:23:81:18:70:c7:99:66:22:db:2d:07:
         b3:72:ea:6b:ce:e5:1b:d0:46:4b:6b:e8:7a:1d:b0:7b:12:62:
         69:46:b6:39:b8:34:2b:16:a6:ad:1c:69:f2:89:ab:62:55:f7:
         ac:bc:79:d8:ce:5c:24:72:37:23:6b:85:ca:dd:a2:7f:97:b4:
         ed:a9:e6:2e:a7:5c:41:0e:bb:d4:1e:67:dc:d4:b8:ce:24:f2:
         ef:f1:d6:9f:50:3f:67:0f:ff:3d:f0:67:51:ad:04:e6:2c:2d:
         17:8e:d3:db:bd:1f:07:b1:df:0c:4c:19:0f:55:11:5a:c7:e5:
         fb:b2:f9:ef:50:13:5b:35:d4:22:04:ee:c0:f3:62:e2:46:e4:
         00:8b:8d:55:7f:7b:da:ff:f0:2c:c4:59:ad:2b:31:0c:11:3c:
         94:c6:ea:db:f7:7c:72:11:48:ce:52:21:21:4e:5e:27:35:d4:
         f4:a8:10:01:61:22:83:e8:7e:7b:c5:0f:5f:ca:7a:c5:5b:ea:
         72:30:14:f9:65:a9:ed:bd:18:11:7f:53:6d:a4:2e:09:df:1a:
         b9:a6:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:08:10 2025 by rpki-client