Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File:                     Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier:          y2RTWjyBkh+VZGN+7u+ojleRPCWPIUSTtKKtf//oRXE=
Subject key identifier:   26:CA:AA:14:5F:CF:A1:39:80:31:BB:F4:7D:83:31:C3:A2:63:52:DC
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer:       /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial:       0198733CF23EE765074BB53CC652856E8C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number:          14AB
Signing time:             Mon 04 Aug 2025 04:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:30 +0000
Files and hashes:         1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=)
                          2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: IjyezH2gb4Yq5fsT4wQp5IDSL3ZVUVhUQM77t+c8j2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3c:f2:3e:e7:65:07:4b:b5:3c:c6:52:85:6e:8c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
        Validity
            Not Before: Aug  4 04:00:30 2025 GMT
            Not After : Aug  5 04:00:30 2025 GMT
        Subject: CN=26caaa145fcfa1398031bbf47d8331c3a26352dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:0a:b8:f2:db:e5:2d:f8:7f:15:f3:40:36:
                    70:96:ba:a2:8c:e7:ca:b5:96:dc:8b:6b:91:f4:6d:
                    dc:1d:68:59:c9:49:fe:2a:f6:7b:dc:0d:43:e8:de:
                    fd:d1:a8:8d:08:1a:cc:14:38:d0:7c:1e:aa:f0:0a:
                    24:7b:46:ff:9e:f4:8e:a3:f1:b3:41:03:04:70:24:
                    8f:d7:9e:2b:c7:c6:2d:94:b5:31:59:9c:f4:01:f0:
                    a3:ad:83:2e:d9:65:11:10:3b:e9:6c:1f:bb:82:55:
                    17:65:72:c7:7a:8b:78:6c:89:b6:61:e7:86:94:7c:
                    d4:a0:5c:85:82:20:da:a1:d4:9c:1a:bd:93:42:5b:
                    36:71:29:7b:5d:b2:d2:b2:79:7a:4f:aa:70:bc:e1:
                    23:a2:2d:db:30:28:e1:8d:2a:0f:a3:c7:ce:a1:0e:
                    71:8d:a3:38:fc:9d:f8:92:aa:6f:35:0f:bf:a5:42:
                    93:97:16:e4:90:f7:22:ee:c9:fd:4d:80:c0:75:7f:
                    93:96:91:74:c1:8e:42:6a:fe:74:3a:25:c6:8b:41:
                    2a:6e:d3:5b:65:ac:d3:67:41:14:48:df:e4:f9:84:
                    da:61:77:d7:fd:b8:91:40:ce:71:cb:6e:ef:ec:f0:
                    75:a5:82:30:83:a4:32:6c:b1:b8:44:ce:ca:f9:5b:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CA:AA:14:5F:CF:A1:39:80:31:BB:F4:7D:83:31:C3:A2:63:52:DC
            X509v3 Authority Key Identifier:
                keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:39:d0:eb:3f:61:3e:66:22:c2:b5:ad:40:0a:69:59:ea:c6:
         87:ca:d3:08:d7:16:56:9b:f7:81:f2:ca:15:f4:b3:62:0e:24:
         74:78:a6:a5:02:8a:d9:dc:f8:e4:ae:12:86:4d:fe:8b:a7:4d:
         2e:cb:2a:be:69:77:fc:af:13:1c:ae:be:f0:8e:4e:b3:37:ac:
         7c:42:9d:6b:36:2d:12:59:ef:86:f2:df:5f:42:bc:5b:3a:b3:
         a2:03:1c:5f:ce:e3:ac:46:fe:20:35:70:56:5c:b1:0e:c2:e1:
         4d:f0:ab:6f:64:1d:90:54:67:fc:1c:43:93:c8:ae:25:ae:0f:
         a4:ea:f3:bf:c0:88:e3:e3:b1:cb:80:95:bb:f1:b4:2b:f7:51:
         99:da:48:97:a0:4a:51:cc:4c:a9:f4:b5:98:02:30:bb:67:af:
         b8:4d:91:51:e9:1d:a4:98:91:45:e2:1e:09:43:d1:d9:85:22:
         9e:b4:e4:ae:a5:78:eb:73:d2:33:b9:fc:92:31:0d:33:f2:c1:
         06:f3:24:17:15:bd:88:64:d6:92:6b:e8:90:13:cc:6a:13:2f:
         c5:3b:10:25:54:32:16:3d:01:33:77:0e:9d:4d:ce:a1:6e:a2:
         47:f7:22:01:27:b2:fb:10:9e:04:ba:39:98:21:2f:ca:ef:93:
         70:37:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:05 2025 by rpki-client