Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File:                     dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier:          ihRsvcyOezTSOF2y+Bw6RCSwQGGaNPlIQAhOCqQD4Dg=
Subject key identifier:   89:F6:68:54:02:5F:F1:2F:22:92:FE:22:B6:8C:2E:40:41:9A:31:FC
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer:       /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial:       01989524D35D7B18EBF7F4F25FA6B6ED95B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number:          0646
Signing time:             Sun 10 Aug 2025 18:01:15 +0000
Manifest this update:     Sun 10 Aug 2025 18:01:15 +0000
Manifest next update:     Mon 11 Aug 2025 18:01:15 +0000
Files and hashes:         1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=)
                          2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: XmJz2dOKu01WXjJLWFRO8X+oZ3CVg5sg75707qjX1z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:24:d3:5d:7b:18:eb:f7:f4:f2:5f:a6:b6:ed:95:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
        Validity
            Not Before: Aug 10 18:01:15 2025 GMT
            Not After : Aug 11 18:01:15 2025 GMT
        Subject: CN=89f66854025ff12f2292fe22b68c2e40419a31fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:df:75:d4:a8:fc:64:0f:7b:f7:90:0a:5f:64:
                    02:39:dc:0c:47:b8:99:a2:30:86:4e:9e:89:5b:3d:
                    f1:4d:50:02:f4:cc:b9:57:92:19:ff:87:1e:03:c4:
                    05:21:35:ed:b8:f2:c3:1e:95:3a:e8:7c:b1:e9:d8:
                    d8:c8:96:08:be:70:ce:a9:16:1d:a9:94:8e:ac:d9:
                    7f:04:0e:e3:4a:95:2e:e4:58:27:c9:81:69:11:4c:
                    e0:1f:fa:01:77:ec:8d:cb:73:c0:da:b3:64:e7:6e:
                    79:83:17:90:c0:ba:e7:ac:98:8e:39:bd:18:c3:03:
                    0a:1c:3b:99:45:70:27:c7:8b:a7:92:dc:a2:31:8a:
                    1f:96:c3:0a:8d:93:bf:49:25:33:99:00:c7:6b:cb:
                    20:96:54:83:83:bd:b9:04:09:14:0a:16:6b:1c:02:
                    dc:b3:77:3e:2a:b7:eb:ee:a7:b9:5c:60:c9:87:7d:
                    6d:5a:27:84:e9:05:93:aa:e1:c5:c9:6b:ed:1d:26:
                    8f:bd:e5:f1:a9:a2:98:ef:cd:47:e9:c3:1b:11:18:
                    35:0f:ba:fe:6e:07:0f:80:c4:6f:28:c5:8c:b5:3d:
                    71:88:ab:90:68:75:1b:c0:63:8a:41:6d:e8:0a:49:
                    e0:05:5a:75:f7:54:94:29:d3:a3:a2:9d:43:9d:6e:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F6:68:54:02:5F:F1:2F:22:92:FE:22:B6:8C:2E:40:41:9A:31:FC
            X509v3 Authority Key Identifier:
                keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:eb:d0:43:41:d5:9d:cb:fd:aa:c3:28:2a:f7:d1:dd:eb:59:
         d9:d3:de:bf:8e:d6:79:32:ab:3d:57:2b:31:ef:a0:05:82:62:
         ca:7c:6d:40:4f:51:1e:8d:86:92:66:6a:02:14:44:e1:3a:25:
         44:17:b3:8d:f3:cb:e7:61:dd:99:5a:2a:21:13:a1:6f:1c:f1:
         f5:4c:2e:8e:05:71:d5:29:61:39:ad:6e:4a:7e:4d:2d:6b:bf:
         05:e2:ea:ac:4f:67:f7:cb:7b:4f:08:e2:b0:5c:2c:1c:2a:2c:
         34:ec:d0:7e:9f:85:4b:1f:27:05:53:83:17:b9:10:0a:c5:ed:
         ab:cd:6a:38:ee:ec:fa:17:6a:82:cf:0d:62:6c:91:3f:2b:76:
         49:28:39:06:5b:b4:75:61:33:3e:17:60:e3:8e:97:80:1f:e2:
         5c:9f:57:e1:e6:b0:c8:d1:f1:b9:03:64:ef:5b:58:bc:29:e3:
         77:8a:81:da:40:84:4f:08:91:1d:fa:ac:3f:80:78:c6:37:a1:
         12:0c:d0:a8:7b:3e:8d:b5:65:b5:8a:0e:08:05:47:e2:2a:d3:
         1e:6a:1b:17:a1:46:f0:cf:88:29:0f:f1:16:e6:0a:a2:a4:4c:
         1a:e8:7c:e8:02:7b:46:17:a7:0b:40:41:77:ff:81:ca:05:ee:
         eb:2a:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:41 2025 by rpki-client