Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          zOH0964rAqIGCMbaFWHBWUf7JO9LiPLcK4QFaxT4TZ4=
Subject key identifier:   97:63:AC:05:4C:3A:A4:31:A4:5F:6B:41:9E:4C:D6:2D:B5:EE:D0:F4
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       0199172C9EBB57510FD289684E803D61A68C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          0729
Signing time:             Fri 05 Sep 2025 00:00:24 +0000
Manifest this update:     Fri 05 Sep 2025 00:00:24 +0000
Manifest next update:     Sat 06 Sep 2025 00:00:24 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: dU7pdi37Mal3Hj/ZEc7AF8rqRmrS7lEyL7iBImZPaBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2c:9e:bb:57:51:0f:d2:89:68:4e:80:3d:61:a6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: Sep  5 00:00:24 2025 GMT
            Not After : Sep  6 00:00:24 2025 GMT
        Subject: CN=9763ac054c3aa431a45f6b419e4cd62db5eed0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:d5:62:15:07:65:5a:1d:c8:e2:9a:d3:ed:
                    f1:7d:de:47:c7:ab:15:41:c4:3b:8b:db:1d:68:1a:
                    26:ca:22:2c:6f:6f:bf:1a:29:9b:37:3c:3a:59:2c:
                    12:64:93:f0:a5:ac:f8:51:94:35:3a:0c:a5:4c:66:
                    4f:29:75:5f:e4:53:c6:eb:ef:95:b0:d3:ee:f8:cc:
                    ea:04:bc:86:82:e8:96:a8:af:d0:48:ce:57:2f:3a:
                    f5:98:ca:83:66:75:42:30:3a:7a:dd:24:cd:55:4d:
                    d1:54:f2:11:a9:76:ff:fb:00:74:27:08:85:86:d0:
                    46:c0:9d:69:3b:18:4e:94:c1:76:ef:56:6a:26:79:
                    48:51:14:0e:56:41:94:09:a0:7f:c1:65:11:58:f3:
                    ab:32:58:b6:25:38:18:c2:07:cf:96:4e:fe:ab:d0:
                    79:42:f4:f8:74:bf:61:7f:aa:9f:96:24:a8:fe:1f:
                    6f:ff:42:e1:08:86:f7:1e:1f:8b:5c:2d:c3:67:2a:
                    a4:86:ca:9f:10:0c:6f:e0:ef:49:69:39:d6:5a:39:
                    61:1f:fb:6d:75:cd:2b:1f:11:d0:69:ab:69:aa:9b:
                    24:8a:93:3c:9f:31:57:58:0f:b7:ca:9b:9e:5f:4f:
                    b9:35:d1:b4:06:1b:bb:b2:73:83:79:33:a6:d8:6e:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:63:AC:05:4C:3A:A4:31:A4:5F:6B:41:9E:4C:D6:2D:B5:EE:D0:F4
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:e1:7c:3c:12:76:ab:83:b3:57:33:96:59:ba:5b:a8:b0:
         df:7e:73:24:98:74:e8:13:05:50:85:e8:94:f2:ef:4b:5a:5f:
         1f:46:f6:d5:fa:e6:de:76:48:65:d4:2b:c2:88:7e:6b:a5:14:
         57:13:50:99:c4:eb:e8:a0:b3:36:24:ca:cc:41:72:5e:3c:51:
         85:09:41:44:46:7e:da:7b:84:b3:7e:1f:96:8b:15:e2:71:29:
         41:75:88:08:3c:96:8e:be:a0:91:90:08:57:58:d4:01:e1:a8:
         3d:bf:3e:cd:dc:be:1f:ac:25:18:9c:8d:49:b9:c6:c3:c0:c6:
         9d:70:3f:31:8a:e3:e7:c0:48:6d:28:a7:79:2e:08:14:6a:47:
         97:74:c3:77:06:44:34:19:41:62:cd:7d:59:d8:50:87:42:f1:
         c5:25:40:46:cd:ac:62:ec:e5:b3:c8:4f:26:c9:a2:14:79:4c:
         07:55:2a:dc:fd:b8:1b:3f:5e:28:d3:34:82:da:5f:bb:29:66:
         49:24:e2:49:5d:eb:d9:eb:f2:39:ff:d9:5f:78:2a:c3:de:01:
         0c:ed:4a:bf:bf:78:30:84:82:f6:51:e7:5d:72:9b:9e:00:b0:
         bc:4a:7d:01:69:80:39:5c:8e:5b:4a:11:0e:53:c1:27:c0:2b:
         cd:ce:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:32 2025 by rpki-client