Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          hYjIF2/hXPjlQoj+NrxIbPRQhVditXL4deAO326TIE8=
Subject key identifier:   98:68:C2:E8:BD:56:F9:6A:7C:DF:4F:BE:2F:1C:C2:EF:8B:DA:22:ED
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       019953E82ED26DDF9A61B28435A1FCCD0391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          1494
Signing time:             Tue 16 Sep 2025 19:02:29 +0000
Manifest this update:     Tue 16 Sep 2025 19:02:29 +0000
Manifest next update:     Wed 17 Sep 2025 19:02:29 +0000
Files and hashes:         1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=)
                          2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: CS+ZKKz3uY+A0yhIz/kF40hdsWLbrMuDSnjkhskFeLQ=)
                          3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=)
                          4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=)
                          5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 13:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:53:e8:2e:d2:6d:df:9a:61:b2:84:35:a1:fc:cd:03:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Sep 16 19:02:29 2025 GMT
            Not After : Sep 17 19:02:29 2025 GMT
        Subject: CN=9868c2e8bd56f96a7cdf4fbe2f1cc2ef8bda22ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:71:9b:9b:27:02:74:6d:30:73:65:dd:85:
                    b4:4a:82:00:98:3a:f7:24:83:89:a9:df:c4:e3:86:
                    31:31:26:42:ba:f8:a8:31:a8:5b:11:1d:d4:33:f0:
                    54:c6:b9:70:9e:99:c5:d4:2e:25:dd:62:a8:ba:b2:
                    de:bd:2b:1c:d9:7c:0c:aa:0a:c8:4e:cf:a8:5c:00:
                    86:78:c0:37:5c:6c:de:6a:b6:23:b9:fb:4b:f3:87:
                    1f:d1:43:5c:80:e3:48:a2:6b:f1:69:f4:cf:ab:51:
                    d4:c5:f6:00:b9:ba:04:8c:dc:dc:2c:0f:b8:19:0b:
                    15:2b:bb:75:34:8b:84:21:f1:11:30:01:1c:c1:a5:
                    05:99:0a:4f:65:6f:5a:e3:d2:b8:0f:90:55:41:4a:
                    78:01:0a:e2:74:22:88:fc:51:47:ec:9a:dd:51:18:
                    b4:27:39:84:ed:7e:93:d7:13:71:0c:35:ea:8e:c8:
                    ec:f6:e1:2c:d5:ce:91:a8:1a:8e:59:d2:dd:36:eb:
                    0d:1f:a5:b3:8a:fb:03:5c:60:49:c6:1a:e7:e4:f0:
                    05:46:2d:ad:72:e4:88:ff:e5:43:62:db:d3:a3:bb:
                    6d:7b:33:86:47:ae:a2:f1:88:7f:49:11:4d:28:b3:
                    01:6b:f3:fd:d3:00:96:a6:cd:9a:dd:0b:65:a9:96:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:68:C2:E8:BD:56:F9:6A:7C:DF:4F:BE:2F:1C:C2:EF:8B:DA:22:ED
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:e6:4f:b2:49:dc:66:77:3b:e7:2f:d4:44:54:8c:f3:40:
         16:92:0e:dc:0d:2a:f2:8d:fb:f7:79:ba:79:ea:3e:ee:9b:7c:
         b6:6f:2c:e4:34:66:53:38:9e:2c:91:7c:41:82:25:ef:7d:4d:
         d8:c3:2a:29:be:2b:16:39:ca:95:94:bd:ae:95:5e:38:4a:30:
         d5:0f:d5:0d:e6:19:37:cb:87:56:80:46:5f:39:d3:cf:28:58:
         bf:87:ef:67:b4:28:c3:42:08:46:25:a0:f7:e4:9d:25:18:d6:
         d5:63:bc:09:38:ce:13:56:85:d0:bd:a3:95:fb:f7:cb:2d:a7:
         94:a2:f8:06:f9:5d:4c:b6:9a:da:ad:bc:88:ac:b3:ae:1a:ee:
         45:e6:a6:db:6a:45:c7:ad:aa:83:25:31:77:a2:94:b5:e6:4d:
         68:fd:0b:9b:a3:24:2c:d8:33:aa:7c:44:1e:35:33:45:17:66:
         4e:ae:0a:cf:bf:b3:de:34:9b:ee:04:37:f2:5c:06:16:46:0b:
         ee:d0:3b:d7:c0:98:5a:a7:01:37:56:7a:4b:f3:73:4e:61:63:
         0d:5d:19:dc:32:6a:e7:1c:7f:06:90:13:eb:a4:c5:f8:83:23:
         b0:c7:fe:20:56:82:cb:f1:70:f6:d2:7d:6e:29:b9:61:10:0f:
         bd:46:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:31:53 2025 by rpki-client