Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          jPxhM+Sz/dquc4a3L3HRKQ2ybYlH6nYhMMPdXw03h4o=
Subject key identifier:   D0:5C:A7:7B:D3:A9:49:8F:4F:58:BC:75:BA:22:64:B9:A4:64:43:F4
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       01987C404B6DBB2A550BF3897F1824D951F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          132B
Signing time:             Tue 05 Aug 2025 22:00:45 +0000
Manifest this update:     Tue 05 Aug 2025 22:00:45 +0000
Manifest next update:     Wed 06 Aug 2025 22:00:45 +0000
Files and hashes:         1: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
                          2: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: BhGsUSxg98G69wCNiq5zXf8G6NGL5DWmgl6DktQJEGw=)
                          3: IK01XRjBPLd-6jbRM6WX3KlYFaU.roa (hash: hpMtGTgtQBn7QaBbprX3PlSpi2a4sNEtbAx00Rc21hI=)
                          4: u1_Gd7VlEhZ3QqgjEg2OEC7gm14.roa (hash: NHFnan+4Era3/L1csOitqJI62J77zZalfXkxncagMSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:4b:6d:bb:2a:55:0b:f3:89:7f:18:24:d9:51:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Aug  5 22:00:45 2025 GMT
            Not After : Aug  6 22:00:45 2025 GMT
        Subject: CN=d05ca77bd3a9498f4f58bc75ba2264b9a46443f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:9b:0a:7d:2b:77:da:cf:08:73:a8:b4:ab:
                    85:aa:51:02:93:c0:be:54:52:88:e4:fb:19:46:dd:
                    fc:b0:24:4f:86:5b:0c:af:31:b4:0a:9a:2b:a1:eb:
                    1e:59:8d:45:18:36:94:e5:42:3d:6c:53:85:3c:ed:
                    38:d8:c0:63:cf:19:a1:12:a0:c8:c5:70:48:09:57:
                    93:09:b0:fb:22:95:76:ca:fe:53:f9:84:ac:87:58:
                    a7:69:90:27:dd:21:5e:5b:d9:b0:e0:3b:0b:97:04:
                    c6:cc:b8:c5:9c:b6:37:f0:b3:94:2f:81:74:e6:89:
                    92:ea:91:84:2b:19:f9:ca:7a:22:b8:af:7d:c2:4f:
                    59:a1:4d:72:74:a3:68:31:47:a9:81:ed:d5:15:7c:
                    20:66:bf:57:a3:72:8e:a3:18:63:20:5c:b0:50:c6:
                    82:a0:a0:17:4d:df:d5:ce:a5:f6:f3:d6:3c:8f:66:
                    28:46:b2:e3:69:44:34:93:43:47:5c:9e:7b:c2:4e:
                    7b:79:5e:63:c6:a0:52:1c:6c:28:9c:ad:5d:fc:a2:
                    d0:47:68:18:00:88:6c:08:eb:fe:ae:c7:1f:92:a3:
                    42:ac:7c:1c:fe:84:60:4b:5b:9e:f3:97:df:89:fb:
                    a7:30:08:3a:5c:48:8f:ce:a8:3a:be:56:f9:78:3e:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:A7:7B:D3:A9:49:8F:4F:58:BC:75:BA:22:64:B9:A4:64:43:F4
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:1b:56:7a:cc:d1:74:0a:11:5f:03:f4:39:38:39:e6:7d:
         38:8b:83:4b:e8:d3:77:f1:7b:6d:32:55:ae:e7:20:c2:f0:1f:
         99:a6:77:98:58:38:eb:76:6b:69:e5:66:dc:41:bb:b0:eb:9b:
         73:fe:3b:2f:d0:cf:92:44:87:93:9d:ae:f6:27:b6:a0:22:9b:
         9e:eb:ca:a2:c6:0f:b3:c6:1a:11:3a:2d:bc:5e:7f:9f:ab:1c:
         4b:ae:0d:ce:fe:bf:81:95:fa:2a:07:6d:c5:ca:d5:81:9d:32:
         9b:56:e6:1c:ac:92:e4:b1:36:1b:58:c0:d2:bf:7a:e4:cb:4e:
         37:6f:bc:ad:1c:b3:11:ca:34:c1:ac:60:2f:9b:63:0d:f3:42:
         15:df:f6:26:e9:53:a8:31:68:b1:bf:11:44:d4:69:13:a1:46:
         d0:00:6c:24:b4:cb:3f:1a:f1:f2:b5:c1:3b:8d:01:94:8b:04:
         96:e4:ef:f7:0f:3f:c2:7a:51:4f:63:4a:4d:a8:47:7e:32:00:
         cc:90:5e:78:5b:b7:1b:65:c0:6b:8e:49:39:94:59:4b:9a:67:
         d5:9b:90:46:1a:02:14:54:3b:d0:34:35:b0:ac:2d:51:a6:7d:
         0d:c6:d0:6f:f3:44:b3:43:d4:4c:0e:e9:2e:18:42:39:e1:67:
         9d:a0:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:04 2025 by rpki-client