Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File:                     RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier:          bNdsb9RcbmrYafHzzeL+CzXSR0R8mm9Tj2y+AKUsIl4=
Subject key identifier:   0F:30:FE:DD:24:19:C9:31:1E:DD:C5:67:20:87:F0:E6:A1:14:19:DB
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer:       /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial:       01987F7985E2BD05CC4798F093DEF77163B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number:          111C
Signing time:             Wed 06 Aug 2025 13:02:07 +0000
Manifest this update:     Wed 06 Aug 2025 13:02:07 +0000
Manifest next update:     Thu 07 Aug 2025 13:02:07 +0000
Files and hashes:         1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
                          2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
                          3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: /xL+snQUrj1uXRwiUB5xkgnCtmTWN7W792weIIHYH9Q=)
                          4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
                          5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
                          6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
                          7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
                          8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:79:85:e2:bd:05:cc:47:98:f0:93:de:f7:71:63:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
        Validity
            Not Before: Aug  6 13:02:07 2025 GMT
            Not After : Aug  7 13:02:07 2025 GMT
        Subject: CN=0f30fedd2419c9311eddc5672087f0e6a11419db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:87:40:98:eb:96:ce:fa:8e:14:1b:18:31:
                    ca:8c:35:8a:f9:ec:1a:d2:8c:c3:ce:69:6f:24:80:
                    48:9f:cd:ac:a6:30:47:af:6d:d4:cb:a3:c8:5c:31:
                    15:fb:89:e6:3e:2f:83:19:6c:81:77:b3:97:2d:3b:
                    e0:61:47:84:2e:51:1d:da:cc:02:f8:be:c4:d6:06:
                    e9:e1:35:62:a6:bb:0a:f3:31:24:e0:50:66:24:d8:
                    09:3a:5c:a9:4f:d9:4f:ce:5b:02:a2:d4:02:98:33:
                    8f:de:b0:86:1d:f9:87:3e:6a:27:11:3c:02:c6:b9:
                    f4:0b:24:2b:03:37:8c:c9:b1:25:02:7a:d4:f9:5a:
                    21:aa:ea:b5:6b:8c:48:90:2d:7c:f2:92:89:1f:42:
                    f8:dc:8a:02:29:51:e5:6e:6d:d3:b3:68:36:8c:8c:
                    85:4a:9c:e5:d0:54:ff:2b:a1:82:08:f8:39:45:40:
                    22:20:c5:8b:98:2a:21:9e:86:11:57:bb:17:00:5b:
                    95:6c:a1:a2:11:34:fe:02:65:79:cd:ad:f0:b5:2d:
                    81:c0:67:4e:99:e1:fd:a1:e7:11:fe:d8:54:84:07:
                    bb:a7:7d:b8:5a:3f:11:07:4c:bd:fd:5f:51:93:cf:
                    61:ce:5a:47:bf:38:c5:04:42:90:b4:09:46:44:79:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:30:FE:DD:24:19:C9:31:1E:DD:C5:67:20:87:F0:E6:A1:14:19:DB
            X509v3 Authority Key Identifier:
                keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:c0:a8:f4:b5:02:9d:59:37:67:91:eb:bb:1b:48:42:59:
         28:d9:87:5e:05:bb:da:8b:cb:f9:79:b8:bf:f6:78:d4:b5:09:
         bc:3f:04:1b:a6:04:00:b8:0f:34:8d:b5:3d:66:5f:67:bd:c4:
         f7:01:e4:38:ca:0e:01:e6:38:b2:c7:0b:94:f6:63:38:fc:ab:
         7f:76:29:c4:70:8d:49:4c:82:35:12:44:9c:fa:7f:56:44:2c:
         2c:01:29:14:e4:00:39:53:af:d6:48:90:99:44:24:1a:67:34:
         2c:e4:33:f9:83:8e:ff:48:0d:92:67:97:e5:2c:3b:c3:90:ff:
         ba:1c:81:16:f2:e8:09:5b:22:6f:04:d3:41:36:af:48:dd:08:
         b0:ed:af:34:8e:0c:40:10:27:ae:d7:66:24:1e:b7:2c:ff:2f:
         f0:8e:f0:b6:f2:07:e4:c4:4b:fe:11:ea:33:a2:ae:9f:2b:a7:
         8d:41:fe:66:51:c1:b4:15:93:66:3f:6e:9e:62:68:58:7d:4f:
         19:ff:20:3f:ea:de:cc:05:b7:55:a6:88:44:7f:11:a1:90:8e:
         92:67:c8:cd:10:07:5d:a4:df:f4:a6:80:fb:2d:2d:16:c6:7a:
         ab:f1:94:3b:97:00:cb:08:9f:93:17:07:29:83:5b:f4:96:32:
         a3:97:14:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:23:42 2025 by rpki-client