Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          SY4SwZByVjbzgjDo1wQ8ET5SqmoGKsySYmi3h9jWH98=
Subject key identifier:   F3:FF:69:CA:27:E6:70:32:09:7B:66:A2:D8:45:E5:84:47:07:5C:39
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       0198CB01548FEFE1DE00CCA51AE0C80643DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          12A4
Signing time:             Thu 21 Aug 2025 05:01:58 +0000
Manifest this update:     Thu 21 Aug 2025 05:01:58 +0000
Manifest next update:     Fri 22 Aug 2025 05:01:58 +0000
Files and hashes:         1: JnBeNm2rTKYmdlnV7LD4ratnhIY.roa (hash: 7sx6YVexwt/Dz3KSILgflEf6IXU43pKeioOkcXpsk1E=)
                          2: S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa (hash: 2BiJYWVWD7Ka4R5rnZ5XfPiTTBaJVD05DB1Gn6ZZCus=)
                          3: dGsyJ7jM6KvOdugHv606GHJw2t8.roa (hash: T1+/lyFZuo6NN3DPCdQyKfzTAN48j9zk6Jj/XS5Es/U=)
                          4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: GKh7zOe57L41CF83hVK3bPfmH5/bCHoDYQ5ZNj9Tyys=)
                          5: nIfzUJtgT3TC148NhCHT3nc3TU0.roa (hash: k8UMtfG8SYavn2YwaHNZ1aeJ1v6JZQQf4ItuUMWhh4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:cb:01:54:8f:ef:e1:de:00:cc:a5:1a:e0:c8:06:43:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Aug 21 05:01:58 2025 GMT
            Not After : Aug 22 05:01:58 2025 GMT
        Subject: CN=f3ff69ca27e67032097b66a2d845e58447075c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:97:54:0f:6a:bf:46:12:33:52:64:ed:fc:
                    eb:78:bd:ad:46:91:56:d4:25:b2:99:f2:9e:ad:6b:
                    32:7c:0f:2f:c8:60:ca:4c:0a:01:06:50:d1:cc:56:
                    3c:37:33:7c:ce:a4:2f:2a:13:77:61:99:c0:6c:c8:
                    44:68:2b:d8:c1:ec:4f:32:de:d1:94:25:15:7d:77:
                    f2:f3:ae:75:0a:1f:68:c1:48:e4:00:95:db:f0:70:
                    d5:e8:e2:de:e8:55:d7:33:e7:cc:c1:8a:b3:80:ad:
                    e7:29:36:b1:51:fb:c3:69:f8:cd:b0:56:21:2f:98:
                    d9:5d:8a:18:89:03:3a:14:50:14:47:79:2c:69:f9:
                    12:3c:be:c3:35:35:b1:92:e7:07:fe:76:6d:e9:c1:
                    c5:6f:b4:e6:63:46:07:5f:b5:ac:17:d8:9b:61:8c:
                    34:8a:f3:1f:a6:f3:f9:0b:30:14:a6:2f:48:02:ff:
                    b8:09:e9:79:9d:88:27:3b:26:3c:96:84:a6:2a:86:
                    26:57:6d:70:64:dd:15:51:a5:fb:83:18:28:52:2d:
                    08:c8:53:42:e6:0a:1e:d7:e1:6e:8a:76:81:df:87:
                    d8:f3:c9:ec:16:ad:68:fc:75:20:f1:17:f8:20:c8:
                    3e:c6:94:48:2d:eb:aa:2d:c7:06:8a:93:05:24:ba:
                    77:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:69:CA:27:E6:70:32:09:7B:66:A2:D8:45:E5:84:47:07:5C:39
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:58:6e:8e:cb:3e:80:7a:c0:1d:ea:98:6c:f2:39:b7:4c:
         4b:04:7a:cc:93:e6:ad:6c:6f:e6:3a:48:5c:00:12:87:9b:8d:
         e4:ee:d0:3c:85:7a:b9:74:6b:91:46:7c:96:2a:47:a1:c9:7b:
         ab:e8:b1:69:76:10:8c:6a:45:72:96:70:14:1b:86:ff:66:ed:
         8e:1f:c3:c9:96:33:a2:7a:36:7b:68:25:a2:c5:94:3c:5b:4b:
         70:eb:53:86:05:92:9f:1e:38:50:0f:f1:16:d3:a0:45:24:33:
         06:54:af:7b:6e:8f:fc:08:29:f5:4b:1f:54:10:59:d0:fe:ad:
         5b:37:cb:18:9d:e3:a7:7a:38:64:30:df:63:7c:24:eb:e5:f8:
         38:cc:c0:9f:1f:91:4f:fa:c3:98:28:69:69:47:c2:50:ff:22:
         c2:36:85:f8:37:45:b0:7e:f3:66:5e:72:17:29:fa:12:98:b2:
         be:12:a0:6e:29:99:64:fd:8f:54:56:b3:19:b5:1d:74:11:e8:
         64:de:57:29:9d:2c:ef:cb:63:e0:3f:e1:0d:5d:05:9b:85:d6:
         69:39:4c:6e:ff:4d:1b:96:f5:e0:8b:af:b5:ad:b0:66:b6:36:
         f7:ad:d5:ae:ec:40:1e:62:e8:3f:c2:6d:c6:90:93:69:85:ee:
         f2:84:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:19:00 2025 by rpki-client