Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File:                     pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier:          UxRYUSjaZmfpg2uAquuWASrHQUaNWt+IVQlkFXEc7qA=
Subject key identifier:   05:76:77:84:F4:EF:D3:A8:AB:A5:F0:34:D2:D8:5F:FB:33:9A:7E:3B
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer:       /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial:       01988FFE8B12AC82C0A28E722E97C6125C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number:          14DD
Signing time:             Sat 09 Aug 2025 18:01:20 +0000
Manifest this update:     Sat 09 Aug 2025 18:01:20 +0000
Manifest next update:     Sun 10 Aug 2025 18:01:20 +0000
Files and hashes:         1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
                          2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: A6MGDT/aZw1ls9EpGaVFJ4CWgYoSmuK00vPYmsH0chM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fe:8b:12:ac:82:c0:a2:8e:72:2e:97:c6:12:5c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
        Validity
            Not Before: Aug  9 18:01:20 2025 GMT
            Not After : Aug 10 18:01:20 2025 GMT
        Subject: CN=05767784f4efd3a8aba5f034d2d85ffb339a7e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:81:96:ca:82:7b:39:47:36:3e:3d:03:69:23:
                    fd:91:0e:99:5c:6e:a3:53:22:c2:65:c7:a2:d1:ec:
                    85:91:dc:19:7e:18:3a:5e:77:07:0b:41:f8:79:fb:
                    a9:ab:74:89:e5:91:37:c3:23:53:dd:c0:49:85:b9:
                    1e:73:e8:cf:23:46:2d:07:71:4c:15:d9:9a:46:c1:
                    f1:aa:73:c6:db:09:2b:58:19:c5:33:bd:52:f5:cd:
                    b0:16:36:0d:5c:19:8f:b4:1d:9e:56:24:bf:69:99:
                    4e:79:0d:77:92:06:3c:7d:35:88:e5:a8:d8:68:22:
                    6e:97:8b:6c:d6:96:3c:07:1c:ff:3a:82:6e:3f:66:
                    0d:b9:2e:53:bc:d1:c0:9a:23:af:e1:e1:40:c6:ce:
                    51:a1:d9:81:b0:e2:7e:e1:80:87:ba:fa:a4:92:09:
                    bb:29:39:1e:94:df:97:6d:e0:fa:46:1a:67:33:d3:
                    79:1b:bd:6c:58:8c:72:0c:8f:2b:b3:a6:75:16:ba:
                    39:45:4e:3c:ab:7a:bf:3b:4a:25:d0:8c:40:c0:2a:
                    45:5f:4c:b5:22:57:4a:bf:c0:42:f7:cf:c5:84:0d:
                    04:f4:e1:fd:89:a3:cf:94:08:d5:0c:e8:63:83:11:
                    c6:3f:7d:e7:24:0d:65:ad:28:06:9d:32:90:32:cd:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:76:77:84:F4:EF:D3:A8:AB:A5:F0:34:D2:D8:5F:FB:33:9A:7E:3B
            X509v3 Authority Key Identifier:
                keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:56:d4:42:3c:9f:ee:1c:a4:5b:56:cb:fe:f7:2f:ed:a9:
         68:38:04:ec:30:6e:c0:7e:90:32:f9:5c:e1:64:a6:7f:80:61:
         e8:50:85:68:00:8b:5a:6f:ca:99:cd:8e:bd:5f:e7:e6:ef:c8:
         0e:3b:c5:87:b3:bd:4c:37:ad:aa:23:9e:37:33:25:8c:e8:a8:
         e4:74:c7:12:d8:42:9f:18:d7:d6:f3:82:64:6d:f0:29:cc:bd:
         2c:3e:dc:49:88:ef:04:de:d1:2b:3e:7d:a0:c7:c4:9e:50:61:
         39:96:48:c3:cd:b1:53:b5:8b:ca:30:f4:7c:29:64:a7:2b:6d:
         6f:43:83:0b:2e:11:bc:94:87:81:2e:96:d2:8a:d3:85:a0:63:
         c4:c6:ec:b5:17:49:3f:e8:77:13:1e:31:e4:4b:40:ad:01:67:
         a5:aa:ae:34:b2:de:1e:8f:4a:3f:2c:d2:02:5a:a5:45:4c:09:
         f8:80:b0:cb:0e:89:c8:cf:cb:57:3d:c2:83:a5:92:44:57:c5:
         eb:fb:92:17:e4:01:76:53:b3:1b:9c:68:9c:4e:5e:1f:88:ee:
         ff:74:2d:85:80:d8:5b:b5:1a:e1:c6:a8:54:a1:82:5b:66:8b:
         06:3b:8e:e0:1a:ce:e5:1b:3b:12:12:3d:82:d0:f9:1d:6e:01:
         5c:49:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:34:57 2025 by rpki-client