Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File:                     hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier:          I+WI7PtbCq3ER/ZjjSE4DDl8NXdWF+WkJx6iw4oPy4A=
Subject key identifier:   4D:DF:94:CE:16:DE:74:25:89:7E:8F:31:9F:C2:19:40:76:37:E2:00
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer:       /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial:       0198846851555D49E0B7D4EEFF8F7E0B2C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number:          15F4
Signing time:             Thu 07 Aug 2025 12:01:25 +0000
Manifest this update:     Thu 07 Aug 2025 12:01:25 +0000
Manifest next update:     Fri 08 Aug 2025 12:01:25 +0000
Files and hashes:         1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
                          2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: J3YQsqfGMeNCao7i0Amq8nyrBk8e9cqUh7ry4zTQRXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:68:51:55:5d:49:e0:b7:d4:ee:ff:8f:7e:0b:2c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
        Validity
            Not Before: Aug  7 12:01:25 2025 GMT
            Not After : Aug  8 12:01:25 2025 GMT
        Subject: CN=4ddf94ce16de7425897e8f319fc219407637e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:bc:79:58:84:58:df:2b:2b:f4:e6:88:ea:
                    dd:25:a3:bd:f5:25:4d:0b:c1:7c:06:6a:96:92:c9:
                    50:80:07:13:71:4e:57:ef:d9:f9:97:c6:a5:af:8b:
                    03:d5:60:3a:d1:b0:29:fd:58:4b:17:56:27:5f:76:
                    94:46:43:01:09:04:42:df:8e:a5:b7:b5:dc:cf:ed:
                    c4:09:1f:a0:af:e1:88:19:3b:72:a2:3f:92:a8:c1:
                    63:0d:a3:8a:6b:e9:4f:1f:e8:c1:6e:09:ae:cf:33:
                    88:bc:93:51:b7:d3:83:1b:38:f8:b4:a6:0c:8f:d5:
                    ae:a7:43:ec:4f:d7:cb:b0:61:1c:93:bd:1f:7d:02:
                    5a:16:c5:a4:de:87:9c:97:00:98:9a:34:0d:5d:16:
                    91:9e:c5:64:bf:5b:c3:08:55:10:00:1c:c9:fa:f3:
                    8e:ce:10:66:bd:65:b1:df:24:e8:ee:2a:56:95:f6:
                    27:f9:1d:c9:54:37:a1:2c:6f:e7:15:06:2f:81:d0:
                    bc:c0:0b:4d:d1:32:2c:0b:27:0a:4d:f0:0c:52:b9:
                    ca:4f:9a:f4:7c:86:a8:ae:51:b3:f1:9f:b1:dd:47:
                    3e:21:db:8e:7f:80:4e:c6:30:e4:b4:42:f1:34:25:
                    e8:b7:f4:50:3f:e1:85:d0:33:23:15:21:0d:e9:3f:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:94:CE:16:DE:74:25:89:7E:8F:31:9F:C2:19:40:76:37:E2:00
            X509v3 Authority Key Identifier:
                keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:81:4a:b2:1f:ff:79:d5:9c:25:8e:b3:df:6e:f5:76:65:
         f9:f5:21:14:0b:90:ad:cb:24:51:45:62:3e:84:01:2f:ae:f3:
         f1:74:6b:0c:f4:76:36:73:e4:2f:c4:05:fa:3a:50:4e:58:d9:
         3f:db:00:f9:22:09:3f:8e:c0:24:1d:b3:52:83:64:9a:d0:b8:
         68:ac:c3:d4:e7:50:2d:cc:e8:4d:40:29:12:d8:00:5b:1b:fe:
         a3:5c:86:9f:07:85:32:05:5a:f9:7b:73:5d:b0:15:a0:65:74:
         1a:43:bc:6f:fb:9c:27:30:d3:17:ca:90:38:dc:0f:0a:ff:34:
         39:0f:82:93:84:32:ee:21:e9:e4:9b:a5:05:ed:ab:dc:14:8f:
         6d:e0:9d:52:e4:73:47:7e:80:c9:7f:ad:2e:71:96:14:4d:34:
         14:99:65:bd:55:c3:50:0b:3b:cd:fe:f4:3b:c7:a0:30:a8:65:
         cd:50:19:66:5c:28:37:51:15:7d:a5:a7:48:9e:38:0e:a3:12:
         f2:41:68:2d:be:e5:70:28:c6:ab:a4:a7:ef:49:88:ac:86:d2:
         f9:33:ea:4b:bd:1b:de:6f:5a:88:d9:44:fd:92:12:63:85:ac:
         5e:ac:7e:39:16:6b:12:66:01:57:f1:44:fe:a3:d2:08:22:6b:
         ae:f3:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:31:11 2025 by rpki-client