Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File:                     H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier:          RT73zlrs3n1fa+f9LEShzUKbYhNHjaoRAZohvcf0pgQ=
Subject key identifier:   7F:7A:FD:31:F1:8F:91:12:FD:BB:4B:01:C6:9C:01:EB:18:86:A2:FD
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer:       /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial:       019874BD7D232300A037BC5E7350C34904DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number:          0860
Signing time:             Mon 04 Aug 2025 11:00:31 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:31 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:31 +0000
Files and hashes:         1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: Q4BRjB+z5OAiN7rg24o1FFSjo7LNx8BcG0j2IyPTo3Y=)
                          2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:7d:23:23:00:a0:37:bc:5e:73:50:c3:49:04:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
        Validity
            Not Before: Aug  4 11:00:31 2025 GMT
            Not After : Aug  5 11:00:31 2025 GMT
        Subject: CN=7f7afd31f18f9112fdbb4b01c69c01eb1886a2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:03:e5:32:ac:e6:05:fb:c3:3a:dc:3c:3c:
                    e1:b1:6d:23:9c:fe:46:a4:14:99:3e:d7:54:93:e6:
                    f0:56:45:eb:3d:27:6a:ff:f2:69:24:1a:9a:a8:73:
                    0d:89:16:e2:f7:01:d3:a0:ac:f4:6c:7c:cb:4e:fa:
                    0c:0d:9b:4b:95:ec:ff:98:75:b1:ad:bd:e2:a7:43:
                    5b:c8:89:4f:32:4b:7a:66:c1:39:32:91:34:8c:fd:
                    a4:1e:77:d0:9a:75:e9:92:46:42:4f:55:54:4c:2f:
                    4b:da:83:70:5b:85:91:5d:74:6f:87:5a:b5:87:5a:
                    53:26:20:c0:cf:5d:04:aa:e3:bd:53:a6:cf:79:7f:
                    56:cc:53:d1:6f:95:8e:29:7a:a3:1e:56:e0:9f:6a:
                    62:42:9c:3e:49:d9:9f:4e:80:af:37:37:dc:31:9c:
                    19:f3:e6:3c:a3:96:4d:aa:7b:e0:6c:12:df:ac:8a:
                    3b:91:ff:6e:6a:31:71:c3:56:fe:f3:76:c1:2d:22:
                    ce:af:ed:7c:13:d2:50:76:ec:61:29:75:b2:b0:9a:
                    2f:60:20:23:96:db:e9:33:0b:bf:31:fb:ec:ea:d1:
                    43:e1:4b:4a:10:3a:b5:af:d2:5c:26:81:e9:b3:1c:
                    e2:3a:3d:b0:a2:c1:02:36:3c:64:ba:04:16:b4:f5:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7A:FD:31:F1:8F:91:12:FD:BB:4B:01:C6:9C:01:EB:18:86:A2:FD
            X509v3 Authority Key Identifier:
                keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ea:a0:59:3e:37:79:fd:77:28:f1:b8:a8:e1:94:e3:18:ce:
         76:72:0c:20:76:80:73:fc:f7:88:8c:a5:5d:a4:88:e2:18:eb:
         0d:8f:be:3b:5a:00:06:77:1b:5c:75:93:23:6f:fb:fa:68:b7:
         84:63:8a:4e:f0:08:d5:5e:8a:86:3f:c3:7b:37:6f:55:7e:a7:
         8c:7c:9f:26:84:19:05:52:d3:5b:a7:10:35:1a:72:37:43:2f:
         b4:f9:7c:53:50:ad:81:5a:92:44:f9:af:f0:9b:4f:17:ae:1e:
         52:6c:4f:c4:ce:a8:5a:cf:2d:44:a6:26:f0:fd:7f:c9:b0:52:
         9a:46:04:c1:ba:41:7b:86:7d:e4:83:ee:ae:76:b7:4d:40:0e:
         32:25:5a:d2:b2:90:ce:e5:92:4b:e9:f6:8a:5a:39:b0:fd:2e:
         7d:67:72:e4:41:28:66:76:87:c5:b6:9e:aa:87:89:49:05:0a:
         01:a2:58:e6:66:41:d3:1c:27:89:85:b4:08:ef:ea:cc:b8:9c:
         7c:6b:37:a9:2f:2a:c6:96:12:8c:b9:6c:b1:7e:35:db:9f:40:
         a1:be:09:86:59:75:9e:72:00:f9:50:fd:90:66:8b:c7:4a:d4:
         06:2e:ef:bd:c3:20:b9:f0:68:41:4f:4a:f4:a6:b2:8c:5c:0d:
         41:27:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:22 2025 by rpki-client