Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
File:                     h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft (raw, json)
Hash identifier:          HnDWoKmMB44MMCHmXIWJkZfViDqb7FxxdrSg7FH7vjE=
Subject key identifier:   54:4A:DC:1E:2D:2B:99:14:C7:42:F3:B6:B8:26:8E:CA:36:14:C0:7D
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Certificate issuer:       /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial:       0198A1CD4292618409B0F4130AA718812FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
Manifest number:          1631
Signing time:             Wed 13 Aug 2025 05:00:40 +0000
Manifest this update:     Wed 13 Aug 2025 05:00:40 +0000
Manifest next update:     Thu 14 Aug 2025 05:00:40 +0000
Files and hashes:         1: P-yGIcgr3IfthLgzfM98T6lGbKU.roa (hash: 7HVjYAoSUQuVeE2cpmTGfmBl3cuM7py9I5dDG8/Cz1U=)
                          2: h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl (hash: v937/KNPXqlE0Jr+VekrPMZUBOY43Emsj9EnTqSzUMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 Aug 2025 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:cd:42:92:61:84:09:b0:f4:13:0a:a7:18:81:2f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
        Validity
            Not Before: Aug 13 05:00:40 2025 GMT
            Not After : Aug 14 05:00:40 2025 GMT
        Subject: CN=544adc1e2d2b9914c742f3b6b8268eca3614c07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:4f:7a:d7:51:f2:a4:71:1b:e7:21:8a:75:
                    77:26:bd:25:4e:13:fe:bf:9e:3c:ce:b8:22:8e:71:
                    f0:6e:66:03:a2:d9:2a:1e:30:09:da:d2:ed:e8:88:
                    4c:18:b5:0e:6e:d6:bd:df:4b:25:9f:53:e4:fc:c5:
                    4c:9a:d5:1c:5a:35:b4:2e:a1:75:8a:37:d7:8e:27:
                    ae:92:00:8f:70:a4:67:14:0e:e2:a1:d4:73:07:1a:
                    33:83:9c:30:86:a0:7c:8b:36:97:5b:3e:d5:1b:05:
                    a1:88:09:6b:d6:f1:e8:71:84:d5:14:c4:15:80:e6:
                    1f:1b:41:71:76:96:9b:ae:6a:9c:c6:7e:02:ad:80:
                    50:36:ea:07:64:de:ce:7e:85:bc:f8:86:f1:be:82:
                    f5:e6:81:cc:81:3f:89:22:37:df:3b:d8:73:2d:55:
                    f8:91:71:75:aa:64:0b:8c:e6:28:40:5a:fd:c0:69:
                    1a:a1:f8:bf:14:11:5b:66:2e:83:6a:d2:e4:e2:7d:
                    a7:89:f9:58:14:b5:c0:3c:90:5a:cd:01:1c:39:37:
                    ae:64:94:c5:80:b9:cc:fa:cc:b9:87:35:97:ee:da:
                    19:f1:ac:5b:1c:65:c1:bf:40:b2:e4:ea:d8:f4:df:
                    3c:ac:bd:84:f8:91:6a:59:cb:86:54:26:62:67:3a:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:DC:1E:2D:2B:99:14:C7:42:F3:B6:B8:26:8E:CA:36:14:C0:7D
            X509v3 Authority Key Identifier:
                keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:2d:95:73:cf:ed:63:3a:45:b6:d4:72:13:6a:99:29:63:5b:
         79:65:7f:8a:79:b6:03:ec:1c:8a:c9:a4:36:40:ac:62:6e:14:
         64:ca:e1:24:8d:41:c2:33:1c:98:91:64:1c:55:aa:69:90:5f:
         f9:cf:37:21:09:3c:16:40:91:59:34:e3:87:c6:b4:35:5a:f6:
         d7:36:24:42:73:19:89:51:41:91:08:36:92:45:b8:b9:bb:a5:
         ca:0d:fe:aa:34:95:a5:7a:25:9d:48:9a:a0:b8:c7:51:05:16:
         21:ec:ef:f3:10:1c:5e:7b:a3:b4:16:e2:4b:fd:df:ff:ab:93:
         37:21:9a:f0:16:13:19:0a:1b:59:31:e5:e3:5f:2b:f1:91:fb:
         07:e3:07:d4:5d:f6:35:db:96:32:f5:8d:c0:08:a1:4b:ee:f4:
         81:e1:b4:38:5b:3e:9d:3e:81:dc:02:78:0e:d7:1a:2b:c6:fb:
         d1:d7:e1:aa:71:ff:fd:9e:32:1e:b0:3c:37:a8:bf:fb:29:3d:
         de:17:a1:77:86:fd:5c:aa:78:7e:fa:ce:6d:77:3d:e4:9d:96:
         af:b2:57:ad:46:b4:8c:50:67:0e:5b:3b:37:eb:01:ef:e2:45:
         ab:5e:22:dd:21:bc:1b:f3:ef:4c:75:0b:e0:39:72:29:87:33:
         12:52:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:10 2025 by rpki-client