Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
File:                     H0n8ab9uujufoFF9AGKSchDk6Mo.mft (raw, json)
Hash identifier:          +CoEqfljhjJo5TS2CCIuqDLxp3Qyz5GCAix+RKXt3QA=
Subject key identifier:   7E:84:D6:0F:71:E3:47:2C:14:70:60:CB:78:BB:78:25:EE:F1:1B:F5
Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
Certificate issuer:       /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Certificate serial:       0199239FE6CB778A7E769B84366E2967D657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
Manifest number:          053D
Signing time:             Sun 07 Sep 2025 10:01:45 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:45 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:45 +0000
Files and hashes:         1: H0n8ab9uujufoFF9AGKSchDk6Mo.crl (hash: o4IB0Rh8q9iocEH45A4doNvKFlxLBM31hZXWEn2IL5k=)
                          2: Uer55Veb_ut1JsDk-7JNWBypePA.roa (hash: mFvrHyTdVgwfq1zEyZ5X8BtK4+uJoolM6yDZ19bRhfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:e6:cb:77:8a:7e:76:9b:84:36:6e:29:67:d6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
        Validity
            Not Before: Sep  7 10:01:45 2025 GMT
            Not After : Sep  8 10:01:45 2025 GMT
        Subject: CN=7e84d60f71e3472c147060cb78bb7825eef11bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:ef:1d:68:9a:27:e1:50:95:88:8c:20:97:
                    68:93:3f:ee:14:f6:9a:ce:b2:f7:b0:3c:18:88:7d:
                    84:e0:90:bb:dd:25:22:4c:e3:2b:37:b7:b6:35:17:
                    c6:59:bd:20:fd:80:00:c8:cf:26:a4:fd:64:a0:a3:
                    11:55:a6:a7:3a:c0:fc:ab:f9:44:46:b6:a7:1a:1d:
                    62:de:99:a3:d2:ae:42:2b:9f:1f:7b:8b:ac:63:d7:
                    aa:05:ce:f6:7f:fb:94:9b:90:3e:d4:2c:87:e2:cb:
                    af:32:e4:60:f2:c7:92:a3:04:ed:06:21:36:ef:de:
                    06:fb:cd:ec:cd:40:c6:1d:d5:b3:f8:68:c9:84:ab:
                    81:c7:b6:3e:7d:79:38:b7:a4:1a:06:72:05:57:38:
                    b6:df:cd:ba:c8:d5:c2:de:67:bd:eb:a8:1c:a6:69:
                    f9:b8:7e:bf:d9:66:06:90:d6:0c:65:0c:8c:78:cf:
                    ae:fe:6d:78:70:cc:40:3a:45:a6:05:28:2e:ed:76:
                    c6:5f:e4:d9:19:e4:0b:fc:27:ed:04:54:41:5d:1f:
                    c4:4c:a1:31:3c:a8:22:1f:0d:1f:ee:63:0f:5c:bb:
                    c3:a9:d0:e8:a3:b3:63:58:29:27:bb:d7:99:20:2c:
                    b8:55:ac:f4:13:f2:23:e3:a5:56:2e:de:4f:e1:0c:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:84:D6:0F:71:E3:47:2C:14:70:60:CB:78:BB:78:25:EE:F1:1B:F5
            X509v3 Authority Key Identifier:
                keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:11:c0:c6:1d:26:0f:6c:59:28:d3:55:c0:fe:03:2b:6f:
         ee:53:14:cf:1e:09:29:00:9a:25:19:f0:0e:0b:c8:36:01:79:
         d3:80:0f:09:d1:b4:dc:00:63:b6:f1:ac:c1:ec:ac:4c:c1:85:
         e4:b3:58:93:18:4b:00:47:95:e3:bb:9e:9f:98:05:98:78:00:
         24:32:4f:81:42:4f:10:59:e7:64:75:24:f7:c8:2e:0b:62:1a:
         d3:8e:32:b8:55:8f:c2:fb:36:a3:1c:c4:5c:34:85:93:8f:66:
         67:61:3b:d4:da:9e:22:a3:6b:90:f9:bb:c4:17:b7:96:7d:49:
         af:24:d8:c1:cc:7c:9d:3c:cd:68:d6:9c:25:93:00:b5:19:00:
         1a:59:00:16:95:28:fd:7a:d0:a5:e0:f9:af:2e:05:4a:7e:d7:
         24:ad:7c:2f:d3:82:5c:33:25:7b:35:95:16:72:57:66:ef:7d:
         af:2a:90:f9:6f:b4:f5:62:bb:45:59:3d:17:56:09:ea:71:30:
         6f:14:2e:83:7b:f6:3c:de:e9:5f:f3:b4:c0:c5:23:7a:e5:f5:
         d1:a5:dc:21:99:ad:94:ca:50:55:c7:e6:9e:dc:8f:91:04:e6:
         d7:51:ef:ff:32:8e:da:ee:36:7c:82:50:00:5b:8c:61:8e:15:
         40:d1:d9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:16 2025 by rpki-client