Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File:                     1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier:          RuB7fbYOUmRQHo4qtvGL4RYLvKQ3nM+iKTRiRWSZsdg=
Subject key identifier:   62:9E:37:FC:31:3D:65:47:74:47:89:E5:EC:14:2C:9E:68:4F:E0:56
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer:       /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial:       0198906C07784E0B50B350968C5E6586A5BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number:          1373
Signing time:             Sat 09 Aug 2025 20:00:55 +0000
Manifest this update:     Sat 09 Aug 2025 20:00:55 +0000
Manifest next update:     Sun 10 Aug 2025 20:00:55 +0000
Files and hashes:         1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: tKHD4aXHPlRcKhYenQIE8qerKRwwGXNQ62Gx0EJbNBQ=)
                          2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=)
                          3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=)
                          4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:6c:07:78:4e:0b:50:b3:50:96:8c:5e:65:86:a5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
        Validity
            Not Before: Aug  9 20:00:55 2025 GMT
            Not After : Aug 10 20:00:55 2025 GMT
        Subject: CN=629e37fc313d6547744789e5ec142c9e684fe056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:58:9c:82:a9:f6:ab:51:c4:69:9e:82:b7:
                    64:82:8d:cf:d4:b5:7c:84:bc:89:79:a1:e3:c2:6f:
                    e4:98:c0:d5:f1:d3:29:e3:36:4d:10:76:6f:e4:e8:
                    59:a0:1d:b9:e2:e6:0f:4b:9f:26:64:f2:e5:0a:7b:
                    b3:ad:41:3f:30:db:13:9d:0e:2d:88:72:9a:3d:6c:
                    01:57:76:1c:d8:6b:35:4e:e8:6e:85:1e:58:28:d2:
                    0d:4f:4e:60:7b:a5:ad:10:7f:ac:57:10:52:3c:2c:
                    6d:44:7a:57:4b:27:45:d8:cd:f2:d6:43:cd:ac:37:
                    97:3e:6e:d1:07:c2:1c:07:ec:05:ad:b3:16:cf:3c:
                    e9:85:5c:ce:1c:18:47:a6:3e:ef:dc:85:9d:f4:60:
                    1c:50:b1:0d:fa:80:a8:32:3a:47:c2:b6:11:fb:b7:
                    f6:dd:af:e7:dc:91:17:10:f2:0a:4b:72:eb:63:8a:
                    d2:13:4c:ce:0a:19:50:ec:79:92:5b:d3:31:68:2e:
                    ba:55:6f:ab:48:fe:86:49:77:86:0a:1d:86:75:7a:
                    55:de:80:ee:d2:e2:a9:cb:58:57:ca:ee:26:e1:00:
                    01:51:3f:6e:de:c7:e6:8f:f5:49:c2:50:c8:a3:f1:
                    e1:98:f5:4f:d6:f9:5f:6c:4f:6e:0b:f6:56:14:ca:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9E:37:FC:31:3D:65:47:74:47:89:E5:EC:14:2C:9E:68:4F:E0:56
            X509v3 Authority Key Identifier:
                keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:19:41:28:e1:3f:04:ba:5c:09:7c:b5:06:33:cc:58:31:
         ef:68:96:54:59:ea:43:c9:b5:18:d8:69:0a:34:de:e8:68:e4:
         0b:1d:01:b7:b3:6d:d7:72:bd:0d:3e:d0:ef:5d:82:1e:3d:d3:
         1b:51:10:f6:6d:c6:e3:c2:83:a8:b2:f4:fd:c5:3d:95:4c:94:
         25:c8:b9:a7:48:a0:2f:ff:32:7e:83:f3:94:e1:28:43:67:32:
         42:87:00:84:b5:1d:91:61:31:53:4b:36:cd:d6:49:e5:87:76:
         6b:0d:cb:63:1a:2e:d4:e9:91:d6:85:dc:c9:80:2d:bb:c5:01:
         8d:82:3d:55:12:31:1b:20:da:d8:a6:38:15:e2:2d:83:2c:09:
         09:22:43:cb:6b:7c:ee:67:7e:95:db:cc:a9:57:23:e9:ce:bc:
         4f:79:68:7c:59:6b:bf:cf:d0:81:65:19:13:65:a5:ad:25:32:
         37:2b:9d:89:a5:f0:4e:ce:ec:e4:4a:38:94:dc:98:db:fe:38:
         82:d1:1f:e9:fd:15:8f:b7:0f:2d:99:fd:6d:93:dc:b2:af:bb:
         0d:30:92:18:11:c7:7b:c6:fc:04:8e:0c:e7:70:c3:d5:31:79:
         c0:04:45:9e:88:ac:ff:b8:c3:2f:02:9d:ef:4f:25:85:00:8e:
         38:69:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:06 2025 by rpki-client