Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File:                     DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier:          If3AqbgBCC1fkdh4oGDT6UIUQsxK12kxVmXPHF7AdEU=
Subject key identifier:   D0:8B:4E:59:97:6A:51:EE:1A:4C:BF:5E:73:A6:AD:52:7A:DA:8C:7B
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer:       /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial:       01995B3219906F193C56AE79D3E128D778A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number:          0274
Signing time:             Thu 18 Sep 2025 05:00:33 +0000
Manifest this update:     Thu 18 Sep 2025 05:00:33 +0000
Manifest next update:     Fri 19 Sep 2025 05:00:33 +0000
Files and hashes:         1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: 54u19h0k0CoRyXv/gsrPqHgR85ji/lWKPdjJk9GiePA=)
                          2: S2jgawU4O4lAQY3k_J8atrvplk0.roa (hash: Gu1Ybtp4wCgWfzQBSFjC6We3LxlOwc2bmLBX7Ly8Y7s=)
                          3: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (hash: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=)
                          4: iX_xELZoVhjZx2tmfK6PH-R4qfg.roa (hash: 8Md57/s7g7icy63N7gSiYrFS0c7WsDeTkry4vuIPhFc=)
                          5: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=)
                          6: t3nqbHqlBscnUaxPHLGUE-2J54c.roa (hash: DLN+/ViLRwOrpJx8eI4FGnodUeH9BYoGpSEgrUIipy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5b:32:19:90:6f:19:3c:56:ae:79:d3:e1:28:d7:78:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
        Validity
            Not Before: Sep 18 05:00:33 2025 GMT
            Not After : Sep 19 05:00:33 2025 GMT
        Subject: CN=d08b4e59976a51ee1a4cbf5e73a6ad527ada8c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:36:bc:55:8c:88:d7:b1:3b:87:b1:3c:8f:
                    07:57:11:ef:30:c1:63:82:1a:b0:7e:e4:59:19:48:
                    88:aa:40:d0:75:80:11:67:4f:74:94:b4:30:49:d5:
                    b0:f4:e7:15:c9:40:54:67:ba:4c:e4:41:6d:4e:0c:
                    b2:c1:ed:b6:b9:d7:e5:f1:95:84:86:04:fe:48:39:
                    9e:45:3b:94:6b:ae:c3:49:3b:74:c6:ee:03:0b:a1:
                    03:31:b2:f6:f7:3b:ca:5b:cc:b1:3a:b8:e5:df:aa:
                    d1:bf:71:01:db:18:57:03:07:83:70:6c:9d:c6:95:
                    7c:46:fd:f4:ea:51:0d:e5:6a:65:2f:85:f8:c5:05:
                    d9:84:32:fe:36:a6:2a:1a:3f:ef:6f:1b:d5:d8:60:
                    b6:50:e3:b1:52:5e:97:19:cf:fa:7c:15:df:31:e0:
                    58:76:91:cc:91:b0:ed:0d:7d:7f:7f:9c:04:94:7b:
                    5e:56:ab:82:67:c1:1b:03:a4:7b:1b:d4:61:30:d1:
                    85:93:ad:f3:e3:4c:23:0b:c9:19:58:fc:f8:3a:6e:
                    fe:5f:d2:58:91:f7:e1:ad:a4:a5:71:b9:90:5a:96:
                    30:a9:c9:90:bd:1d:9e:58:38:dd:75:1a:89:04:7b:
                    3b:41:ec:11:b3:9f:e8:e0:79:74:eb:5f:af:03:6e:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:4E:59:97:6A:51:EE:1A:4C:BF:5E:73:A6:AD:52:7A:DA:8C:7B
            X509v3 Authority Key Identifier:
                keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:48:75:2a:3b:cb:83:0d:d2:eb:ba:8b:51:7d:56:72:50:a4:
         0d:f8:69:f8:bb:e9:ef:61:dc:9f:6f:6b:20:e6:b8:63:a1:b7:
         cc:b2:e8:42:3e:5e:bc:c0:11:62:79:31:78:72:0f:ca:45:94:
         6c:68:ed:d4:d2:68:5c:23:ae:38:cb:0d:52:50:2f:93:f6:13:
         63:29:66:11:7a:f0:6e:65:a1:e8:f6:f1:1f:75:89:91:89:7f:
         be:08:91:a8:e8:cb:30:f4:6e:52:49:6b:a4:bc:e8:ed:39:fc:
         4f:fa:b8:39:3c:e9:0c:03:73:0d:28:36:58:15:86:5a:36:e1:
         11:54:21:10:36:69:f6:9a:1b:55:c3:e0:69:e0:de:84:56:77:
         3e:a9:0e:2e:dc:12:ee:1a:bf:92:94:a0:b8:d2:bb:bc:8d:c4:
         3e:61:20:aa:90:f8:25:7e:d5:66:85:1e:b1:9a:46:a7:98:09:
         c6:ce:40:ff:06:09:29:31:98:66:34:24:75:f7:b7:b0:22:ef:
         89:24:33:b8:94:c3:bb:ce:e2:98:ac:a8:ba:cc:7e:b6:97:38:
         b9:4b:db:9e:7b:f4:9b:a4:cb:cf:d2:3a:42:8e:e4:76:5d:ab:
         55:dc:a7:6b:dc:60:06:b3:a0:c1:34:1e:a1:97:16:9f:57:ee:
         d0:00:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:23:34 2025 by rpki-client