Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
File:                     nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json)
Hash identifier:          sP8upOsEsBMiqWurp+IdECeYk1HAXF3VkntQAoJn1Ng=
Subject key identifier:   17:E8:28:3C:49:01:33:C9:B6:FE:4C:8E:DD:3C:2E:33:7D:74:94:58
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Certificate issuer:       /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial:       0198933632CC6D0A6D97486CE992ABEC5621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
Manifest number:          032F
Signing time:             Sun 10 Aug 2025 09:00:59 +0000
Manifest this update:     Sun 10 Aug 2025 09:00:59 +0000
Manifest next update:     Mon 11 Aug 2025 09:00:59 +0000
Files and hashes:         1: Jf1OKx1njasgUepF7NPQjYFePjY.roa (hash: +FbY8K3ltw3fRzjGzqv270MBVQe3sjgedLIQtn2lOs0=)
                          2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: Cq5ekNtUm/X85VFHeo37tjAgy0BJGXs6Ulz0fI/FqZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:32:cc:6d:0a:6d:97:48:6c:e9:92:ab:ec:56:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
        Validity
            Not Before: Aug 10 09:00:59 2025 GMT
            Not After : Aug 11 09:00:59 2025 GMT
        Subject: CN=17e8283c490133c9b6fe4c8edd3c2e337d749458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:73:a4:c6:e3:9f:9b:38:67:fc:c2:7c:47:
                    29:12:93:53:ac:2d:c4:c3:7c:1e:b5:84:ec:a7:0f:
                    b1:bc:a1:33:46:fd:e7:6a:e6:f8:b4:b4:21:f9:23:
                    65:58:04:07:fd:91:58:3f:3e:13:96:a1:bb:40:ea:
                    57:58:b3:75:28:7d:46:60:ac:7e:e5:20:18:14:ff:
                    fe:44:1a:dd:05:d5:9d:f6:54:0a:aa:f2:50:10:24:
                    1f:32:01:91:5c:2f:73:d1:af:0e:72:c1:f0:3b:75:
                    3f:13:12:37:6b:fc:cf:b8:3a:0a:a6:94:bc:10:4f:
                    3f:fa:47:cd:d3:ca:cc:0a:d0:0b:85:45:22:21:99:
                    5e:58:d7:b6:8a:6c:d6:96:3f:3b:d4:76:f1:d4:ba:
                    e2:fb:85:c1:72:4f:40:95:32:27:d4:ef:5c:0a:35:
                    34:c2:9e:2f:1d:dc:d4:b6:02:d9:94:85:42:11:3f:
                    7a:df:d0:46:5a:ee:f3:50:91:e8:50:89:e2:fe:98:
                    f0:d1:3a:8c:f0:22:c7:48:96:a9:2a:a7:18:0c:b2:
                    ab:11:e6:83:98:9c:14:54:e3:b9:a8:e2:7b:aa:38:
                    b8:ee:2b:e9:16:52:88:f1:f1:90:b4:cc:22:6c:2a:
                    d9:f5:67:24:dd:64:fe:50:05:2e:00:e5:95:0a:45:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E8:28:3C:49:01:33:C9:B6:FE:4C:8E:DD:3C:2E:33:7D:74:94:58
            X509v3 Authority Key Identifier:
                keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:26:62:a5:67:bb:ac:93:b2:26:50:bf:e0:0d:34:f2:a0:
         29:40:ca:f6:9d:9c:18:11:32:fb:e3:a4:3f:1d:fc:7e:6d:b3:
         e2:43:b4:a8:92:44:8d:b4:2b:3a:a7:8f:60:6e:89:82:dc:27:
         53:09:92:b4:82:a3:a3:3c:f5:03:08:8c:12:de:8e:49:1f:bf:
         e5:80:7b:e3:4d:8d:a9:a4:c0:b1:74:6b:38:92:b4:ae:ff:bf:
         85:be:25:28:5f:a3:4b:51:df:d1:df:98:39:d7:55:63:b7:cb:
         ac:60:c8:45:39:68:ea:26:e8:ef:11:21:32:f6:37:0e:10:46:
         2b:5f:a8:8b:94:12:d0:73:9f:42:b7:e5:7c:6f:e1:6d:26:64:
         6f:01:0f:45:d3:97:1e:d0:b2:2b:8e:0e:79:71:f7:fa:b2:e9:
         46:0d:ed:fd:9e:4e:7e:11:fe:44:24:02:92:ae:1d:d6:4b:db:
         1f:8a:5a:5f:c4:e1:02:0f:4d:69:05:20:ca:92:e6:e9:55:87:
         78:b7:27:a9:1f:30:47:92:2b:17:89:57:4c:b6:32:37:26:53:
         ec:60:5c:dc:2d:26:ad:7a:2d:4f:53:b2:15:4d:eb:74:7d:0f:
         4b:be:f1:20:49:14:1c:46:ee:67:30:9b:e0:c7:b3:39:7a:cb:
         93:84:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:23 2025 by rpki-client