Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File:                     hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier:          xGszsDTXIh/P74G0cQJGfaBj7OwS0b3SOe+DNljxedI=
Subject key identifier:   0C:D1:4C:CA:F5:46:70:9F:33:33:4D:69:F1:7D:44:D7:62:9B:BA:65
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer:       /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial:       0198879F7D4407001F9001F0334ADE0B62DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number:          14B8
Signing time:             Fri 08 Aug 2025 03:00:33 +0000
Manifest this update:     Fri 08 Aug 2025 03:00:33 +0000
Manifest next update:     Sat 09 Aug 2025 03:00:33 +0000
Files and hashes:         1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=)
                          2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=)
                          3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: cKsyXEKKp9U6wtoBLMLfDXLh/xSN6s8f+/+c3Pjyuu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:9f:7d:44:07:00:1f:90:01:f0:33:4a:de:0b:62:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
        Validity
            Not Before: Aug  8 03:00:33 2025 GMT
            Not After : Aug  9 03:00:33 2025 GMT
        Subject: CN=0cd14ccaf546709f33334d69f17d44d7629bba65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:fe:a6:a5:84:6c:ce:af:f9:24:c2:fb:bc:
                    61:d9:56:bf:48:20:a2:4f:31:23:1f:75:be:2c:45:
                    d4:ec:f3:53:19:19:45:ae:72:c4:c6:e3:d0:c1:26:
                    22:da:7f:e3:bc:02:d3:d3:a4:e8:f8:61:9c:ab:e0:
                    6d:82:92:52:e5:a4:a2:de:63:5b:90:74:70:5f:8e:
                    40:91:4f:d0:ec:4b:89:99:31:4c:0c:9c:a6:2b:cd:
                    7c:bb:af:6a:0a:ed:20:29:99:f1:3c:52:2e:7a:e0:
                    d8:d2:9c:c2:db:f2:8d:d9:b6:f3:d3:e9:c4:8c:75:
                    46:41:33:5d:a3:8a:1f:30:52:ad:5b:d0:66:7e:34:
                    a6:93:2a:cb:ef:71:20:17:bb:45:14:0a:b2:ef:9c:
                    eb:73:72:52:55:e7:d2:42:0b:ab:af:50:d8:96:d6:
                    d6:b8:55:01:5a:2e:e2:87:d5:7a:17:95:a8:4a:91:
                    a8:c3:c1:fb:1c:82:32:3c:4f:46:82:30:bf:11:bb:
                    c5:e3:e0:5e:9f:be:0f:77:d7:85:eb:04:b7:7a:05:
                    72:85:70:24:58:a6:91:1a:7d:5e:28:db:09:4d:52:
                    c9:96:75:ff:ea:4d:23:20:2a:e1:7f:cc:16:66:f6:
                    74:5a:89:f8:e9:99:13:cc:8a:ce:98:b3:3c:8a:81:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:4C:CA:F5:46:70:9F:33:33:4D:69:F1:7D:44:D7:62:9B:BA:65
            X509v3 Authority Key Identifier:
                keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:36:61:c5:f0:67:aa:25:b9:99:19:ea:28:ee:4e:71:83:3c:
         0f:d4:dd:ec:95:f1:c4:c8:40:a2:95:d4:7a:77:2a:0b:d4:c1:
         b4:99:56:ed:1a:95:cb:a9:86:c2:ef:c4:da:39:c4:bb:ff:c4:
         05:ca:9d:bd:cc:8c:97:0d:49:0a:ea:04:26:67:d0:8a:39:77:
         03:32:63:ac:0e:48:be:26:db:9d:5b:8f:6c:45:43:58:b6:7f:
         60:9f:51:57:17:59:65:d9:c2:74:55:6b:f9:a5:2b:9e:fd:7b:
         3a:5e:03:57:e4:6f:3e:68:61:7b:eb:7f:5e:86:02:e8:df:f0:
         21:01:4a:ad:60:6d:16:b2:3d:37:79:54:ee:db:e6:53:51:8e:
         bf:0a:92:ae:b5:ef:5f:ac:04:b0:1f:be:6d:29:f0:b3:83:1a:
         95:0b:8a:b9:6f:2a:72:18:84:f3:2f:72:a4:31:a4:82:9f:6f:
         44:f4:56:ce:b8:03:3d:f5:16:7d:18:c7:a9:a3:7a:03:f4:bc:
         04:8c:5d:0d:f8:20:00:d7:69:2c:2a:6c:f8:e3:b0:63:60:9e:
         9d:9b:10:13:e5:4c:3c:60:40:c6:dc:ea:a0:e1:e5:b1:85:78:
         f5:95:dd:85:f6:16:04:9f:f9:d4:02:c3:14:3f:f8:55:96:31:
         69:43:57:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:02:11 2025 by rpki-client