Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          CeoJcXm6DrDG7XaqkjKmIO/ijMEYqXrHa4ajprVCXGs=
Subject key identifier:   B2:FC:AD:92:3F:99:98:5E:FF:7C:7A:FB:28:6E:16:16:44:61:1F:15
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       019923A078AD8FA01A11A3E7F64B4A934E6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          B7
Signing time:             Sun 07 Sep 2025 10:02:23 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:23 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:23 +0000
Files and hashes:         1: PW2sWVJ9FFBsjfGLnP2cm8afOE8.roa (hash: 6jybPU5tVXkCjx5dz+V7ya485HszpB6dPF9HmYkhSqM=)
                          2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: AaiuoAr0Obbgh0BvfVZc9aj3tzYlXKGkfxuoA+ZyM04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:78:ad:8f:a0:1a:11:a3:e7:f6:4b:4a:93:4e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Sep  7 10:02:23 2025 GMT
            Not After : Sep  8 10:02:23 2025 GMT
        Subject: CN=b2fcad923f99985eff7c7afb286e161644611f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:e8:4d:4a:bb:be:92:f9:d1:de:e8:dd:65:
                    6c:85:63:a0:22:03:65:0e:35:c3:07:de:48:bf:2e:
                    de:73:98:96:a4:8f:47:63:12:2b:61:3e:c7:f7:60:
                    3c:f6:d2:98:8d:c7:75:d6:32:b3:e7:60:13:c3:ba:
                    fd:6f:9b:5d:5c:f1:f7:60:48:7c:3b:68:0f:8f:bd:
                    da:9d:01:6d:e7:6c:f8:50:c5:bb:f3:3e:4f:7e:a6:
                    6c:76:57:69:c9:df:62:02:0e:cb:14:23:e1:56:de:
                    d4:d0:96:8d:5d:01:9a:34:b7:4a:e1:4e:ea:47:b0:
                    42:7b:e8:78:51:1c:db:c1:94:4c:08:9c:02:c7:f2:
                    ec:1d:61:97:47:1a:8a:17:b4:e2:e1:24:34:4a:31:
                    da:58:a4:30:72:ed:6a:cb:c7:10:92:a7:29:cb:83:
                    42:24:54:cf:d2:b3:88:bd:63:82:e7:fb:2d:76:51:
                    87:eb:2c:8f:85:8e:48:7c:9f:c5:de:bc:d8:0e:c2:
                    6e:3a:00:95:a0:7a:16:c4:ac:01:39:d9:3b:df:bf:
                    6b:0f:74:68:12:53:14:e5:60:21:ef:50:4c:de:77:
                    b7:20:cf:92:b0:d6:1d:a5:4f:dd:b5:6c:91:9a:cc:
                    67:6f:fd:e2:b8:0d:f8:db:3c:b8:d0:eb:fb:ff:bb:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FC:AD:92:3F:99:98:5E:FF:7C:7A:FB:28:6E:16:16:44:61:1F:15
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cf:ed:e9:b8:fb:81:4d:7c:6e:5b:2d:5d:92:43:d9:a0:15:
         a5:07:60:69:94:66:f1:c5:a6:b5:c2:f6:4a:be:32:77:39:ba:
         8d:54:bb:7c:be:c6:93:7e:6a:e8:63:9d:96:20:5d:d5:c7:d4:
         3d:44:e0:bf:c5:71:83:20:4e:7f:81:78:a2:27:8b:3a:02:b7:
         d6:f1:52:e5:f2:aa:ce:cf:a4:81:dc:aa:7f:c8:14:e9:fa:75:
         ae:d9:dd:8b:19:51:b4:2a:91:36:fd:91:36:92:b2:47:8b:4e:
         d7:1a:bb:b0:6b:07:59:e7:94:63:9a:79:f5:1f:1b:54:44:4e:
         14:16:10:9f:ee:4b:68:79:c8:48:06:46:e0:4c:b7:e4:90:4f:
         e2:e9:7e:94:49:1f:57:bb:01:79:26:e2:82:77:22:eb:cc:1c:
         7c:cc:ae:64:f7:c1:49:85:21:83:4d:4c:ed:3f:aa:6d:5d:21:
         41:82:29:79:2c:c2:f4:50:09:ad:08:35:87:6a:63:36:92:29:
         1c:0b:72:a9:2e:84:91:dc:8c:d9:d3:1d:85:e1:88:bb:a0:bf:
         b7:3c:f1:65:4f:2c:e9:c3:01:05:43:fa:8e:58:aa:f4:82:0a:
         f1:30:72:bc:e3:cc:9a:2a:4e:f0:e1:f6:7c:d7:fb:99:f7:8e:
         b5:a7:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:06 2025 by rpki-client