Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          SL0b065H9reudZQbfQp3mOc4cy7lgBoELd6TyoPKRfE=
Subject key identifier:   C2:F5:EE:5B:0E:2F:52:77:12:94:75:B7:3A:19:3E:4E:22:E6:27:37
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       01989335D6908BAF87222C8D9B5AAFED591D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          1367
Signing time:             Sun 10 Aug 2025 09:00:35 +0000
Manifest this update:     Sun 10 Aug 2025 09:00:35 +0000
Manifest next update:     Mon 11 Aug 2025 09:00:35 +0000
Files and hashes:         1: 09kK1ESpBv8LiYB9wN6M6ItCuW8.roa (hash: knJCckrITclIVMheMGK5cxyj8YBBf+peiHkDGIWIF80=)
                          2: EqTLLrStWQ1_lYgYRBgmgDPtF_4.roa (hash: VTc+tW3JK91nfNjIEDHdLe+grDG6p0570ue39trIFTw=)
                          3: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
                          4: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
                          5: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: 2NKngKpreI3CmEpdHR4HGX6VzMr+/7VMbKRWweMqUAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:35:d6:90:8b:af:87:22:2c:8d:9b:5a:af:ed:59:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Aug 10 09:00:35 2025 GMT
            Not After : Aug 11 09:00:35 2025 GMT
        Subject: CN=c2f5ee5b0e2f5277129475b73a193e4e22e62737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:70:77:e8:ce:43:eb:a2:9c:ce:35:d6:1e:
                    6d:fe:41:19:ae:a4:f0:6a:4c:e9:09:27:1d:3f:4e:
                    47:d7:fa:0b:1d:37:d9:24:39:58:34:9a:37:c6:6e:
                    5c:ea:ff:64:d8:92:3d:26:1a:9c:6a:29:90:1e:18:
                    96:45:39:5c:80:2c:07:88:1e:e2:d0:97:03:98:04:
                    23:df:75:ce:0c:97:46:a2:9c:7a:e0:92:50:59:4e:
                    1f:b5:3a:82:12:aa:8a:89:06:ba:7f:86:c2:cd:bf:
                    8b:16:d8:29:d5:4b:d4:78:7b:be:62:43:5a:41:0f:
                    e1:6a:42:e7:2e:8a:d0:fd:37:10:9d:04:94:d5:1c:
                    72:b6:55:07:a3:b8:b0:f6:25:14:36:fb:09:02:37:
                    26:60:21:8e:ee:45:40:27:5b:cb:e7:85:a0:95:f7:
                    83:28:81:35:f3:d1:27:57:c5:d1:77:8a:ca:22:f4:
                    63:f3:56:31:51:15:a0:aa:97:06:e7:5e:03:4f:d9:
                    7e:c1:8c:e6:ba:0d:6d:76:65:62:61:0c:36:2a:e7:
                    d6:89:e7:69:bd:d1:af:a7:53:12:2c:ee:e3:46:8a:
                    e8:cd:d5:55:41:8d:97:a0:1e:18:38:75:12:bf:d3:
                    a1:5b:46:9f:15:e9:ad:2a:53:10:eb:f5:e0:5f:df:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F5:EE:5B:0E:2F:52:77:12:94:75:B7:3A:19:3E:4E:22:E6:27:37
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:68:5e:99:ee:dd:09:2d:58:6e:c4:1f:71:1d:59:5a:76:
         5c:da:62:12:fa:bb:6f:3e:35:84:d6:b3:ec:bf:ae:e8:6e:3e:
         0f:36:3a:99:43:0b:15:e8:08:dd:cc:55:a5:63:57:e8:24:f1:
         4d:d2:aa:9e:d2:2c:c0:81:8c:62:45:2a:08:18:f8:af:10:7d:
         83:68:e7:2b:89:d7:74:c0:45:87:9e:dd:ac:bc:df:38:56:6a:
         bc:68:62:d7:56:37:66:1e:77:b7:65:07:4d:cf:d1:2c:00:69:
         a0:01:cf:9e:e6:1b:e1:28:97:ca:1f:44:64:18:c2:d3:2c:e0:
         a4:c1:a5:0a:07:3b:ee:09:72:dc:fb:9e:5e:13:9f:17:48:b1:
         85:7c:51:a1:76:69:09:b9:81:91:70:d8:77:cb:8a:9b:c9:95:
         d7:e5:53:4f:6b:f3:73:5d:dd:b4:b4:84:a0:86:f5:b4:ca:c5:
         c1:87:12:c9:71:4c:22:38:7c:18:bd:45:c6:e9:60:1f:8f:fc:
         28:f5:62:2f:f3:41:19:d1:b2:f9:c6:9c:18:89:d9:98:41:11:
         cc:fd:14:83:cb:fd:be:1e:09:8f:e5:e7:34:88:c2:30:7a:09:
         04:4e:6f:98:dd:0e:18:7c:25:26:29:df:5d:1c:2f:3b:01:0f:
         ae:c7:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:49:17 2025 by rpki-client