Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File:                     aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier:          mHq6ufRkpzCO6YuXmXzMRkRKuL1EDybeyB7h0GogK+s=
Subject key identifier:   80:E1:68:F7:4C:AF:A9:B9:C3:78:33:12:CD:9E:18:CE:CE:3D:2D:75
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer:       /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial:       019A2289CE2EA1375F735DD602FAF73F3D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number:          1228
Signing time:             Sun 26 Oct 2025 22:00:47 +0000
Manifest this update:     Sun 26 Oct 2025 22:00:47 +0000
Manifest next update:     Mon 27 Oct 2025 22:00:47 +0000
Files and hashes:         1: 4BPgPazxL-0_7TACTrAAB2vKcvM.roa (hash: ByHJvADYtVUpx6K/7n+qZ80ogn6pFEeZiZMcZkXwguI=)
                          2: DnTRig2ZHULz3p9wZNouYmsC9jo.roa (hash: t4VZBdK9Uss3nXT5qelMDtPowMN8UI5/vISGQexu/1w=)
                          3: FiGOQGJVQzUX0AI-kIcMSlyL5Jw.roa (hash: iNn6sg9mF+PuqzA3VDumFe63FkMkR+FoX25ZFTkc1KE=)
                          4: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: ic/v+oFCSMT0LXneuyOaAOURdOH8ppCxQkmxGLai6oY=)
                          5: psb7_FoF9tBnDB6tY5GqWOvVJFk.roa (hash: VNe9Mli14Tvo817wNnFl35Vg2+YLvG6cgRRigjOYMS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:89:ce:2e:a1:37:5f:73:5d:d6:02:fa:f7:3f:3d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
        Validity
            Not Before: Oct 26 22:00:47 2025 GMT
            Not After : Oct 27 22:00:47 2025 GMT
        Subject: CN=80e168f74cafa9b9c3783312cd9e18cece3d2d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:2a:94:4f:33:7d:a8:84:8e:30:01:3f:26:
                    b5:7a:fb:cd:81:c3:2e:bf:47:ec:1c:d6:bd:91:ba:
                    92:1f:59:de:ac:37:75:37:b9:29:4c:8d:a8:45:ed:
                    ae:c5:53:67:47:97:25:6d:95:c9:c2:48:4c:33:15:
                    08:53:ed:1b:3a:e2:f2:a6:a6:4a:a6:a5:55:a0:5a:
                    cf:1b:d6:e6:5b:7f:d5:6b:c8:aa:56:50:f5:94:cb:
                    e1:a2:e6:33:eb:e7:8e:17:9b:cc:0c:14:56:48:05:
                    35:01:37:84:e2:10:6a:11:f7:83:ea:d0:91:09:e8:
                    6a:70:c5:54:22:5a:d8:b8:21:5d:f3:82:98:6e:b5:
                    45:2b:63:f5:aa:bc:29:38:4d:be:78:f9:bc:26:4e:
                    23:43:68:45:2f:5f:39:2e:92:17:0e:4b:10:09:ad:
                    23:75:e0:e2:cb:94:92:79:53:79:7e:6b:fc:6c:73:
                    b6:89:cd:e4:71:48:be:0a:6a:39:dc:c8:73:43:d9:
                    be:80:cc:42:63:07:ec:ba:72:aa:12:dd:bd:60:db:
                    cb:04:71:b7:de:99:44:17:f2:c7:6c:b3:dc:86:d3:
                    9c:3e:b0:0c:25:74:9a:94:1f:0b:9e:65:f7:89:80:
                    08:48:59:7e:2c:d2:74:36:8e:00:b3:2d:48:74:ec:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E1:68:F7:4C:AF:A9:B9:C3:78:33:12:CD:9E:18:CE:CE:3D:2D:75
            X509v3 Authority Key Identifier:
                keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:77:2c:21:15:1a:63:42:4f:8b:76:40:ff:71:18:4d:3c:
         74:ff:31:09:0b:34:71:35:3d:5d:44:8b:36:73:cd:90:fb:40:
         6d:92:ab:99:87:11:7f:19:d9:71:80:06:13:e3:a8:f7:ce:40:
         a6:f4:3d:58:b1:27:64:24:30:1b:5c:a8:fb:6b:dc:e5:b6:23:
         63:fd:ca:f3:cc:7c:ca:b0:00:83:4a:35:33:03:c7:ac:b9:06:
         b4:5e:38:75:2c:8b:88:dc:72:43:3c:28:0b:17:f7:88:e6:e0:
         db:e5:a8:c3:67:1d:a1:c8:32:16:f2:8a:de:ec:4e:31:4c:7d:
         17:3f:08:a7:35:ba:53:c2:f8:aa:06:ed:b6:c9:ee:f9:0c:94:
         98:ab:ce:77:6c:8f:9d:9d:db:00:a3:7f:1c:af:92:fb:4e:ce:
         f3:9c:a5:ef:42:b1:dc:8e:60:4a:4c:6f:ad:c7:93:db:63:79:
         f2:0e:c5:3a:c8:d3:6f:48:d6:a2:f4:54:a8:90:4a:b0:f6:75:
         15:06:dd:59:ee:3a:71:de:9a:a3:06:7b:e4:84:4c:9d:5f:d5:
         44:81:f8:61:43:be:7d:e6:ac:c9:92:78:70:6f:61:c4:bd:d7:
         9f:cb:d3:12:4e:11:f7:9a:1c:f7:22:0c:9b:e3:2e:bf:87:c9:
         0e:1f:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:50 2025 by rpki-client