Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File:                     tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier:          miuICzoAXo4GFzpNzOhkDVV4YzRkEsCaLEyltovHaFc=
Subject key identifier:   D1:AE:1F:35:A1:28:E9:E4:53:91:79:BE:71:D5:3B:54:0D:13:18:67
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer:       /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial:       019922C39F63FF9518C7AD2CD821C3329991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number:          0CD6
Signing time:             Sun 07 Sep 2025 06:01:09 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:09 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:09 +0000
Files and hashes:         1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=)
                          2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: m0VmnwPY2CZZLA4WfXw79rmx2aP9wG7kP4S3ZSOTfxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:9f:63:ff:95:18:c7:ad:2c:d8:21:c3:32:99:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
        Validity
            Not Before: Sep  7 06:01:09 2025 GMT
            Not After : Sep  8 06:01:09 2025 GMT
        Subject: CN=d1ae1f35a128e9e4539179be71d53b540d131867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:33:31:bb:d0:0f:cd:0f:9e:4f:51:1d:56:
                    3c:70:34:b2:df:cd:3a:22:4d:af:d5:1a:eb:66:46:
                    69:48:1d:e6:d7:29:e0:3f:b5:02:f4:64:94:ef:7c:
                    3a:61:d7:54:e5:ae:d5:4a:3b:8a:69:80:bb:aa:ac:
                    ec:a9:f9:e1:80:52:d1:50:cf:8f:bc:1f:9d:0c:7a:
                    91:ba:24:7c:32:82:19:01:ea:bb:1d:cc:26:f6:26:
                    34:84:43:4b:a8:3b:6a:57:d9:37:38:09:be:5b:6f:
                    36:40:5a:1a:0b:95:a3:7d:32:ae:b9:1e:20:87:e0:
                    6d:78:cf:b4:c4:38:7d:12:c5:8c:54:ac:8f:dd:f2:
                    23:1a:81:e7:fd:35:13:2c:7c:6f:6d:85:89:95:15:
                    a8:9d:ec:a5:95:20:b5:86:5a:09:e9:7d:32:f0:71:
                    63:e9:33:f1:8f:1e:2e:41:54:67:5b:9e:26:5f:70:
                    28:b5:92:d0:f1:e5:6d:cf:7a:fe:57:df:17:0e:32:
                    38:24:df:9c:26:98:0b:3d:d6:58:3f:af:92:f5:1e:
                    a4:c5:6f:a0:d3:d6:b9:b6:0e:2c:bc:a5:19:0b:24:
                    ea:33:8c:ad:dd:84:cf:0b:05:e2:ee:15:10:be:57:
                    d3:d6:41:ec:a4:4b:61:33:23:c9:37:76:10:b3:16:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AE:1F:35:A1:28:E9:E4:53:91:79:BE:71:D5:3B:54:0D:13:18:67
            X509v3 Authority Key Identifier:
                keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:42:02:b2:01:fd:22:72:f6:fe:fa:f5:d7:21:cd:1c:32:08:
         e0:b3:5e:3d:bd:46:4c:cb:6b:84:dd:e4:66:0b:02:c3:c9:c5:
         c9:0a:9b:8d:43:db:f1:c5:bc:e0:08:7f:ac:ad:76:71:47:c4:
         4b:9b:f4:87:0f:a0:55:2e:07:88:eb:1c:99:90:fe:67:ae:a9:
         82:0c:8d:cc:24:20:38:bf:26:4c:f4:3b:1d:25:9a:df:05:84:
         59:b8:ba:1e:03:a0:d1:d8:62:e3:9b:66:58:6d:9e:83:c2:e2:
         d4:e5:f9:85:4e:10:29:bc:92:34:ae:2e:e4:97:7a:39:57:dc:
         20:40:ee:9d:cf:8a:db:62:cd:53:2a:8c:ac:f7:d7:e2:70:bf:
         1a:9d:d2:05:7e:eb:ba:eb:ba:2f:37:9b:e0:84:c9:2f:df:31:
         7f:8f:19:39:1e:3d:5b:c0:ef:6d:1e:6b:af:f9:fc:94:79:fd:
         99:be:94:16:c2:c2:be:94:3c:a2:67:45:53:1c:97:55:b9:31:
         d0:94:26:bc:d7:3f:11:55:7f:6d:cc:48:c9:45:60:37:62:77:
         d2:1b:aa:d9:dc:1b:c6:50:c3:ba:4d:17:dc:ce:5e:ec:a4:76:
         5e:b8:cd:a0:8b:38:58:21:ef:79:bb:17:fc:e2:72:18:47:01:
         db:8c:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:40 2025 by rpki-client