Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File:                     H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier:          vEmc1BQwyOZB6OZ71r4Ts4Rntml7l3/FC1ZqWHpomE8=
Subject key identifier:   73:73:ED:3E:80:2F:14:3C:89:B7:F9:2C:45:36:50:10:12:4A:93:8A
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer:       /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial:       01988054AB4BF388C3BE2B76C69FF0DBBCE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number:          0E52
Signing time:             Wed 06 Aug 2025 17:01:29 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:29 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:29 +0000
Files and hashes:         1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: 3Gs13WzubN2bZWd4f2DKaUib1oNob2pEu3dea9EqpKk=)
                          2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:ab:4b:f3:88:c3:be:2b:76:c6:9f:f0:db:bc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
        Validity
            Not Before: Aug  6 17:01:29 2025 GMT
            Not After : Aug  7 17:01:29 2025 GMT
        Subject: CN=7373ed3e802f143c89b7f92c45365010124a938a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:9b:2d:36:8e:83:6f:28:38:60:84:a8:63:
                    76:68:d7:44:b4:8d:56:c1:41:72:bb:57:0c:f1:65:
                    b6:a3:31:86:96:a9:f8:c3:67:6c:e6:a9:ba:19:d1:
                    63:90:8f:93:46:39:df:52:9b:c0:95:cc:c7:83:30:
                    a8:d6:0f:26:7d:e9:2d:7d:d6:05:a7:db:6b:d6:07:
                    b1:61:c3:fe:e9:23:f2:0e:82:4e:07:92:ca:e5:2b:
                    f2:0b:c4:4a:68:20:f0:cb:96:23:69:9a:4f:3e:da:
                    fb:6f:46:02:70:16:6b:a5:b7:c5:1a:66:72:0b:69:
                    62:30:6e:8e:d9:b0:98:07:f7:af:19:b0:99:87:c6:
                    86:99:38:ad:7c:c5:dd:32:08:e6:13:bb:8e:88:19:
                    20:83:17:53:6a:3c:7d:47:d7:06:7f:6c:a5:ec:61:
                    aa:9c:94:a0:89:4d:4a:90:7b:c8:ff:92:58:bd:95:
                    e7:8d:16:c0:52:1a:9b:5a:71:e4:71:1a:87:1e:c7:
                    ff:fe:b3:b5:cd:eb:07:d2:25:1b:47:17:8a:bc:ff:
                    0e:02:67:c5:3e:5f:7a:ad:68:96:f0:28:96:72:65:
                    af:5e:3d:27:42:28:a6:ef:47:0e:a6:6f:76:03:b9:
                    8e:e9:04:00:a1:81:15:e9:45:ed:bb:80:92:d9:12:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:ED:3E:80:2F:14:3C:89:B7:F9:2C:45:36:50:10:12:4A:93:8A
            X509v3 Authority Key Identifier:
                keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:10:b8:a8:55:bb:50:0d:ba:51:0e:7b:03:a7:a2:ef:4b:
         a8:1d:dd:e0:ce:3c:c9:f2:2d:dd:08:0e:7b:13:cd:e9:0f:18:
         83:ba:41:4e:d4:32:38:97:09:61:47:a9:9c:52:b6:a1:56:c7:
         fd:e3:8b:7d:11:69:c1:77:b0:7a:99:f3:f9:63:a1:b9:c6:56:
         3c:15:b8:ee:e3:2e:a3:50:05:d9:ce:84:b1:23:75:db:f6:eb:
         96:ae:68:0d:9a:dd:5c:04:aa:5f:70:b3:3c:bf:ad:13:91:80:
         08:dc:cb:83:18:c7:d1:8d:36:ef:63:1f:4b:cc:4f:eb:f9:c4:
         94:88:cf:28:45:bb:69:ca:74:eb:b4:b7:73:60:86:c4:e1:17:
         9e:5a:d9:56:d7:88:53:93:84:e4:24:3a:95:f1:94:6e:03:81:
         e3:e4:80:07:74:a4:ca:cf:fe:18:13:23:cd:98:c8:90:81:99:
         92:fd:ac:85:0e:d2:4d:0d:8a:e2:d9:53:b5:f9:d6:58:e8:b5:
         a5:3b:fe:d5:be:8e:fc:de:54:12:33:13:0a:e4:cf:4e:01:c2:
         b2:a1:8a:97:f9:7f:89:c6:2c:cc:e0:1c:c0:51:09:45:59:f6:
         f4:f0:f5:83:83:c9:dd:a4:f6:70:08:21:7b:61:fa:d2:b6:3e:
         bc:82:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:20 2025 by rpki-client