Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          wGS35Mwrmwl7/wossYuMy911HE+j24oeNZqh+6249vg=
Subject key identifier:   DB:CA:A8:92:EA:4C:B8:96:88:0E:F4:E9:2B:C0:90:01:FE:76:57:82
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       019922559F04E8306AEF3419A1598997E6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 04:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:00 +0000
Files and hashes:         1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
                          2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: YHcRC10CjRQfZjDbAzoKNlBvo6n6s/6hUKKZu0LsNMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:9f:04:e8:30:6a:ef:34:19:a1:59:89:97:e6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: Sep  7 04:01:00 2025 GMT
            Not After : Sep  8 04:01:00 2025 GMT
        Subject: CN=dbcaa892ea4cb896880ef4e92bc09001fe765782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:23:87:c3:c4:f5:65:78:2b:b3:07:04:17:c1:
                    e5:88:3a:49:d4:5f:16:f7:20:a3:7e:0c:e1:d1:e3:
                    cb:61:e1:d7:a8:3a:f4:d8:29:19:6e:14:96:4c:80:
                    c3:43:40:69:1d:2b:9d:b4:d8:5d:2b:72:c1:57:4f:
                    14:26:be:c8:26:ea:a1:2e:5f:cb:38:58:f7:7f:95:
                    84:2d:f4:06:78:6f:90:09:04:e6:af:e3:c3:4b:cc:
                    76:3c:82:67:41:44:d9:5b:d8:b0:2c:a4:75:68:78:
                    03:92:8c:2d:1b:75:ad:88:c9:59:26:bc:c8:88:13:
                    95:6c:a2:d7:7f:b0:4d:af:cd:e1:f0:15:f1:dc:7a:
                    07:8b:4e:ab:7c:0b:47:ae:8b:4c:45:d5:93:ad:da:
                    56:0a:01:78:7a:8e:95:17:67:9d:f7:9f:11:54:bf:
                    b0:36:60:5d:90:c4:02:3f:51:83:19:09:70:ec:c3:
                    ff:3b:a1:99:1f:9b:b9:d4:18:a2:0f:44:50:0d:4e:
                    f3:71:8a:c8:f7:74:fd:af:a6:02:97:79:5f:87:ae:
                    de:e9:d3:39:ef:9d:89:ad:4a:31:f3:fb:b2:dc:1d:
                    60:33:6a:16:42:d3:ff:80:6d:9c:43:e0:42:84:95:
                    a8:03:09:fe:c4:6c:e4:ac:b4:93:c5:60:f7:33:da:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CA:A8:92:EA:4C:B8:96:88:0E:F4:E9:2B:C0:90:01:FE:76:57:82
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:80:48:6a:6f:14:22:c7:a5:89:36:ca:12:2f:c8:f1:02:1e:
         5b:67:c4:7f:38:40:5c:ce:0a:37:a0:7a:85:aa:02:76:bc:a8:
         ff:03:61:16:7b:14:ee:f7:26:3a:c4:21:d3:c1:54:29:59:51:
         94:2f:bf:05:c3:a7:36:80:f2:8b:f5:b1:e3:e3:95:05:ec:d7:
         9d:19:69:d7:9c:65:99:42:52:de:fe:85:e1:ff:87:ae:02:5e:
         d2:af:19:57:fd:ba:82:5e:b3:8e:59:bd:f2:8c:c9:b5:7c:54:
         84:6a:dc:87:af:b2:cf:a7:44:55:2f:83:45:21:29:dd:d9:41:
         fb:2c:dd:cd:23:03:4d:cd:3d:e5:af:f7:47:67:0a:e0:05:2d:
         eb:1d:db:0f:8c:c9:2c:5c:6c:65:47:d9:29:56:2e:d6:60:13:
         ce:a4:ab:21:0b:73:e1:91:05:0f:5d:d9:08:da:5c:49:97:71:
         55:1d:88:a1:78:72:e6:84:a7:c8:38:e3:47:89:58:a7:f0:89:
         03:1d:62:a3:cc:62:30:fa:9b:48:61:60:ec:11:31:15:61:08:
         0b:cc:3e:c0:40:12:7d:a2:f8:e9:47:f8:8b:34:19:34:c5:b2:
         52:b9:83:62:ad:e8:bc:59:b2:f0:ca:12:28:c0:af:88:4e:46:
         f0:88:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:30 2025 by rpki-client