Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File:                     DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier:          0mF3rMUfhi5d96EPvQQDFbZL6/w/T84deFLP58APUgY=
Subject key identifier:   E7:05:72:C0:74:E4:BC:AC:F5:42:26:24:E5:B6:D3:D3:8F:C5:BB:72
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer:       /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial:       01987419521F0609650B1E88AA91A853F84A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number:          01FB
Signing time:             Mon 04 Aug 2025 08:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:13 +0000
Files and hashes:         1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: JQjtgSjWS8Wzk5JuEQ1SpZYIr6JnkV4PNet51kuyxJY=)
                          2: F8pRiEheQa10SQdkNWvS99cZXUQ.roa (hash: ECJYqiZw6ZmZtQ04HHTXu/7XAKbIZCgVHRvo7AY0E6A=)
                          3: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (hash: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=)
                          4: iX_xELZoVhjZx2tmfK6PH-R4qfg.roa (hash: 8Md57/s7g7icy63N7gSiYrFS0c7WsDeTkry4vuIPhFc=)
                          5: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:52:1f:06:09:65:0b:1e:88:aa:91:a8:53:f8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
        Validity
            Not Before: Aug  4 08:01:13 2025 GMT
            Not After : Aug  5 08:01:13 2025 GMT
        Subject: CN=e70572c074e4bcacf5422624e5b6d3d38fc5bb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:4e:fb:7c:36:58:dd:5b:44:19:ad:21:09:
                    24:5b:57:44:95:8e:d3:80:de:44:8a:da:c7:35:bc:
                    dd:dc:de:6e:fb:2c:c8:bb:21:26:67:eb:d5:96:a6:
                    af:3c:4f:40:28:72:2e:2d:56:14:08:03:4d:89:e2:
                    2f:e4:de:d9:23:45:72:51:7b:66:e4:dd:c9:43:61:
                    68:8e:01:ff:af:11:a2:09:29:8e:37:e5:54:d2:42:
                    dd:1f:23:af:e8:f0:3b:52:a8:c1:af:76:be:cf:a5:
                    e3:f8:58:1b:49:d5:5c:a9:12:5b:36:96:57:98:fb:
                    83:d7:51:53:d3:7f:d8:30:b7:a6:a7:ea:89:fc:6a:
                    f7:d2:1a:c5:e1:5e:b0:24:19:25:96:cb:83:25:61:
                    3e:3c:5d:c7:0f:eb:a5:61:bf:c2:05:a1:da:6e:59:
                    ec:b5:95:de:5b:5f:50:88:ec:e8:10:13:71:f7:f0:
                    2b:49:8f:17:e5:a5:3e:30:c4:9a:3d:7d:4d:d0:a7:
                    4d:d2:c3:7a:6d:97:e9:7d:62:ef:c1:c0:72:60:c1:
                    df:19:d1:81:40:eb:47:ef:9a:ef:50:60:e5:77:50:
                    dd:20:e2:d2:68:87:bc:54:05:f2:77:ad:a5:c2:8c:
                    2c:42:d2:14:33:6d:80:08:96:30:7e:f5:9c:9f:a4:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:05:72:C0:74:E4:BC:AC:F5:42:26:24:E5:B6:D3:D3:8F:C5:BB:72
            X509v3 Authority Key Identifier:
                keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:8b:24:70:50:ef:cd:7f:dd:f0:9d:d1:73:35:5f:3e:a4:
         a0:11:35:e0:47:f2:dc:f8:f5:07:08:b1:b1:e0:a4:c4:7d:09:
         83:12:ce:32:7a:95:3e:dc:1c:8b:01:ae:69:ad:d4:b1:bb:15:
         fb:2f:09:2c:e1:3c:84:fe:ed:da:c8:02:87:35:bf:11:5c:d1:
         74:84:17:de:32:41:f3:b1:23:0d:8e:32:9c:2d:8a:8c:fa:4b:
         27:5a:db:e2:c0:4c:ea:2d:25:8b:bb:97:a0:73:77:c4:c5:3c:
         f8:70:50:d5:99:ab:69:25:64:79:03:f8:3e:ec:ba:d0:78:d9:
         64:fc:46:f3:e9:51:4c:35:84:2f:2b:36:05:34:04:5e:27:77:
         c3:01:5e:d1:e3:4d:60:48:db:88:c7:7a:d0:57:f4:35:50:75:
         b1:1f:56:3c:b6:3e:f9:3c:6b:b1:9f:f5:09:10:e8:1d:db:ac:
         e4:14:97:e3:99:d2:8e:28:e2:61:f0:d0:89:c0:8d:c5:ba:d3:
         83:00:80:04:7d:7c:28:9f:5d:c1:55:0d:63:c1:47:d0:3e:87:
         5c:c5:71:79:74:fd:7b:9a:89:eb:91:58:c1:26:5f:d7:37:b8:
         55:f4:31:f1:ee:22:82:66:e9:78:e8:9b:29:cd:95:c3:e6:7f:
         2a:0c:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:30 2025 by rpki-client