Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
File:                     hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json)
Hash identifier:          eSAttOF6S8giwCaG/Hq8f/0SS3sFaFRda0hcqNdBcbs=
Subject key identifier:   BE:D0:4F:42:04:6D:B3:FD:8A:DA:F5:C8:B8:C3:F2:36:59:54:8A:A2
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Certificate issuer:       /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial:       019924B18EA3762942A6919CB8C6A72536FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
Manifest number:          0C71
Signing time:             Sun 07 Sep 2025 15:00:40 +0000
Manifest this update:     Sun 07 Sep 2025 15:00:40 +0000
Manifest next update:     Mon 08 Sep 2025 15:00:40 +0000
Files and hashes:         1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=)
                          2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: 2L/LRcjZh0EZ8NR8r1xjCnxCCqjBfO7xuYT8sFg17e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:b1:8e:a3:76:29:42:a6:91:9c:b8:c6:a7:25:36:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
        Validity
            Not Before: Sep  7 15:00:40 2025 GMT
            Not After : Sep  8 15:00:40 2025 GMT
        Subject: CN=bed04f42046db3fd8adaf5c8b8c3f23659548aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:39:74:2e:25:62:c9:be:4f:8f:bb:56:56:
                    af:2e:0d:6f:7f:93:7d:66:b4:28:f2:7a:d2:2f:f9:
                    3f:99:16:de:7d:4e:22:8c:7a:2c:4a:dd:e6:3d:5e:
                    68:8d:9d:fa:86:d8:25:9e:79:9d:29:69:54:16:11:
                    5b:9f:fd:a3:c8:c6:4f:5a:43:8b:62:56:ee:cf:1a:
                    09:7a:86:3b:c4:ab:c3:d3:0e:bf:bf:c2:4d:d4:d4:
                    a2:b1:70:9f:1c:1b:e8:ba:19:45:07:56:fe:ce:28:
                    7f:6e:a7:99:d2:52:fa:ed:88:e4:53:46:b5:c3:e3:
                    c7:bd:8a:ec:86:73:35:98:49:f9:04:26:38:21:22:
                    77:73:60:27:e1:e2:3b:81:e1:c7:55:59:63:6a:c8:
                    dd:6b:e2:2d:89:89:00:0c:e1:55:ba:42:a4:98:0d:
                    3c:bc:86:6b:81:43:3e:d0:77:a5:6e:07:14:06:bc:
                    18:52:4c:51:42:07:fb:3e:62:e7:ef:6e:e6:ce:f1:
                    a0:ab:98:87:eb:e9:33:6f:5a:bb:e6:e1:9d:64:e5:
                    b8:25:72:73:01:26:cd:10:21:ee:a3:3c:69:1a:a1:
                    58:e6:65:c1:2b:a3:ae:f4:ce:3a:93:1f:fd:8f:42:
                    1d:cb:f3:39:70:9f:e2:ce:9f:0a:cc:94:56:8e:97:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D0:4F:42:04:6D:B3:FD:8A:DA:F5:C8:B8:C3:F2:36:59:54:8A:A2
            X509v3 Authority Key Identifier:
                keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:79:42:bf:ad:0b:2f:7c:d6:a9:d3:89:13:f8:e5:3b:ea:
         ca:5c:93:c0:cf:73:e9:36:69:37:26:6b:e2:cd:50:1a:b2:eb:
         bc:a3:1c:fe:07:ff:2f:eb:c8:fa:01:54:ec:da:e1:9b:71:74:
         54:2f:91:55:50:5a:6f:53:40:51:eb:bb:9e:49:d7:88:61:d6:
         b3:b0:82:d0:ce:f4:0b:0b:a8:e2:3b:08:d7:4d:84:46:4a:1f:
         32:c3:e2:11:e8:01:3a:92:f6:85:79:22:0d:11:f0:7c:e5:61:
         4b:95:3c:97:2c:a2:24:c7:87:e9:66:fc:71:88:a9:8e:b5:8c:
         0f:3e:1a:41:90:33:f0:f0:c5:7a:ea:5a:c1:c7:7d:d3:b8:bc:
         30:13:98:e8:9f:ab:fd:86:86:f5:cf:08:46:2e:49:57:ba:36:
         c6:1d:4d:5c:09:b3:0a:c9:2a:7f:95:28:16:49:46:77:54:6b:
         9c:f8:c1:e3:e3:99:06:80:52:ab:32:7a:e6:f3:4b:5c:54:69:
         5a:71:10:a5:13:ee:e8:80:68:1e:1d:b7:2b:33:45:33:0f:dc:
         f3:b4:5f:44:34:e1:c5:c7:6b:cd:17:38:74:b7:9e:15:a7:7e:
         ba:15:6f:f9:95:cd:88:2f:9b:b0:b2:fa:8f:91:30:e5:51:ef:
         0b:d1:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:39 2025 by rpki-client