Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File:                     Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier:          AgeimDfa7WloRgVbUTtzdEPnDRWgW/WwHqX9Of7Y0mo=
Subject key identifier:   8D:52:80:97:AC:14:2F:E2:27:38:98:C9:B5:FD:39:38:03:EC:62:E9
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer:       /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial:       019935A4D41A9D1D1602896F010028DDBB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number:          0D5F
Signing time:             Wed 10 Sep 2025 22:00:18 +0000
Manifest this update:     Wed 10 Sep 2025 22:00:18 +0000
Manifest next update:     Thu 11 Sep 2025 22:00:18 +0000
Files and hashes:         1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: UBV0mgIvpwuTTFCazV2bNA/vbYCAMyuoO+LvxMJsiQ0=)
                          2: lE0Hn99x0fhwc2jXac5uga-vHXs.roa (hash: iA0oHrpgL6CqGZiYUNOViB4cOKniJ8+iyJSulMgnLyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:a4:d4:1a:9d:1d:16:02:89:6f:01:00:28:dd:bb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
        Validity
            Not Before: Sep 10 22:00:18 2025 GMT
            Not After : Sep 11 22:00:18 2025 GMT
        Subject: CN=8d528097ac142fe2273898c9b5fd393803ec62e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:3f:c9:ff:12:08:4e:21:89:f5:21:41:e1:
                    7d:98:da:44:0c:23:e3:cd:28:1b:74:bf:94:b5:44:
                    10:7e:c9:eb:4c:3d:3e:69:db:f3:ed:70:17:75:67:
                    59:fc:fe:51:67:d3:3d:ff:01:68:e8:b0:fb:73:ee:
                    4f:b0:cc:e5:b4:fe:c0:ee:26:9c:af:35:27:78:20:
                    79:22:b9:7b:69:58:f4:f8:dc:4b:3b:ac:4d:22:59:
                    8c:88:5c:e1:d4:93:73:2e:b0:29:28:b8:94:fd:79:
                    b0:0b:3f:bd:bc:ba:33:6b:d4:bd:38:0c:56:22:16:
                    94:23:03:02:a8:1b:a2:b4:bf:a9:b3:a1:75:a9:39:
                    5a:ef:e8:9f:78:d9:fa:41:8e:18:05:45:25:53:88:
                    b1:e7:7c:53:16:69:df:8d:fb:3c:6e:e0:33:15:fa:
                    b5:ff:57:b1:fc:c9:a4:d9:bf:73:65:9a:4a:6a:26:
                    31:cb:cd:bd:9e:4a:9b:95:28:01:81:33:3a:e9:63:
                    03:8a:c6:5b:16:ce:be:ea:56:c8:70:5c:70:86:df:
                    2b:f1:5c:96:ac:fa:71:99:ba:fe:5b:7e:e2:62:0d:
                    da:7d:e8:07:6f:2c:79:de:38:7b:70:f8:41:f9:95:
                    25:5d:bd:dc:1a:0a:80:2b:8c:23:5e:2a:5e:62:4d:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:52:80:97:AC:14:2F:E2:27:38:98:C9:B5:FD:39:38:03:EC:62:E9
            X509v3 Authority Key Identifier:
                keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a0:49:07:d9:a4:6e:ad:88:07:fd:bb:b3:d9:97:d3:e2:1f:
         01:4c:7a:81:8d:ba:23:aa:e2:d3:e1:45:f0:55:20:fc:a3:7b:
         44:b8:68:f1:bd:ed:50:17:07:d0:9e:8f:1a:6c:bc:54:ac:90:
         2e:f3:35:d9:d4:85:dd:1e:a0:44:4d:b2:c9:a1:e5:03:ae:ec:
         b0:4e:08:d1:9f:c2:cd:58:b6:81:7d:5f:1c:ee:80:e4:8e:31:
         0b:1e:db:e2:04:e8:1c:8a:d1:1b:3c:1d:f2:44:02:87:49:0f:
         0c:ea:77:85:cd:ee:12:64:c4:32:4a:00:2d:59:bf:26:6c:3d:
         9f:8c:1e:82:e0:9c:19:0b:f7:ea:33:63:2e:12:21:55:64:13:
         67:27:05:48:2d:1c:c3:2e:81:e9:e0:4e:89:e1:d4:d3:0c:42:
         6d:23:43:f7:d1:d1:44:8d:94:74:30:db:ad:2e:f3:6e:fa:1d:
         c3:9a:49:5f:1f:8c:e5:bf:5f:0b:1e:db:79:e2:bb:41:b3:29:
         10:94:76:2b:57:c3:7a:52:9b:4a:66:b0:93:08:35:af:59:42:
         2f:9c:56:62:ab:92:78:b4:3d:13:a7:45:96:bb:f0:be:55:fe:
         96:4d:12:95:70:6e:28:03:bf:a2:23:f5:58:69:8a:09:eb:dd:
         0a:b1:0d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:45:03 2025 by rpki-client