Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          Y5QAOjD2mv33cPxLoJ3B+usEIUESkkffMDSPqlTER2U=
Subject key identifier:   7B:8D:8A:F8:F0:DA:3B:D7:A7:E9:C7:13:32:7B:17:47:74:BA:39:E9
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       01987A88DBE24DA2C4728524F77F88573888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 14:00:46 +0000
Manifest this update:     Tue 05 Aug 2025 14:00:46 +0000
Manifest next update:     Wed 06 Aug 2025 14:00:46 +0000
Files and hashes:         1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=)
                          2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: UVMDS83jw169Co8CdwsesIMcPuswj5clZQR4TqOvGoM=)
                          3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=)
                          4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=)
                          5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:88:db:e2:4d:a2:c4:72:85:24:f7:7f:88:57:38:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Aug  5 14:00:46 2025 GMT
            Not After : Aug  6 14:00:46 2025 GMT
        Subject: CN=7b8d8af8f0da3bd7a7e9c713327b174774ba39e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:fa:25:5f:76:6b:9e:d7:a7:1b:36:22:f6:
                    0c:cc:ae:a7:f5:c8:cf:d2:b5:b2:64:cf:f9:a6:69:
                    4e:5e:11:0f:ee:38:e6:c4:c0:d2:61:9e:58:14:f3:
                    5d:d1:25:55:09:0e:be:2c:46:6f:e4:da:6e:7b:cc:
                    2e:12:b7:6a:24:de:a3:03:61:01:1a:24:ea:b8:f1:
                    fa:c1:85:8c:29:da:8f:49:58:c2:c9:b5:bc:b8:fd:
                    1e:74:ff:e4:63:e7:b2:43:2f:c2:2b:52:c8:f3:d8:
                    1c:80:db:ce:d4:35:88:0f:4a:6a:ab:e1:f1:72:73:
                    04:dc:14:60:d2:8f:a0:aa:5d:db:65:31:c9:ce:77:
                    5b:b7:be:86:6a:15:42:00:a2:0f:4f:79:47:b7:f4:
                    fb:a6:32:b8:d2:7f:4b:02:5f:88:98:d6:2c:5f:e4:
                    de:df:2d:ce:b2:75:d6:c3:ad:4d:80:26:bf:3a:74:
                    b8:b4:20:dd:98:e2:87:d6:da:47:df:89:5b:bc:a5:
                    ab:1b:7d:aa:d1:b4:9e:0c:9a:24:bb:1b:02:cf:c2:
                    6c:a0:80:67:cc:8f:61:24:91:00:8e:d3:41:62:72:
                    3d:ea:32:c1:c4:4c:0e:34:f7:31:e2:e8:e4:50:91:
                    b4:37:ce:73:32:b7:46:58:e0:33:25:15:85:14:c2:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:8A:F8:F0:DA:3B:D7:A7:E9:C7:13:32:7B:17:47:74:BA:39:E9
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:28:97:ab:67:c8:f9:2b:a7:f6:a5:33:eb:05:3f:8b:35:4b:
         6e:a3:36:92:41:77:8b:41:3d:7b:8a:59:2a:cd:98:cc:90:8e:
         63:1a:4e:63:21:58:80:29:bb:9f:78:58:d0:87:bf:7f:c8:79:
         5e:77:09:0b:ac:8c:4f:99:87:fe:6b:14:34:a3:20:c8:75:8f:
         76:6f:3a:8f:d8:6a:46:b1:19:8f:1c:52:6b:ac:f7:5b:f2:77:
         42:e6:1c:d9:f2:8d:de:33:67:06:d6:96:1c:8a:76:96:dc:6f:
         7a:c6:13:1d:06:a5:3f:a5:97:3e:ff:13:ce:10:32:36:db:65:
         53:95:65:f7:2b:b1:69:ac:11:a7:43:e9:50:9f:93:f2:ff:9f:
         d4:68:d0:eb:21:fe:be:a1:4d:b0:ee:97:f7:a9:75:bb:56:39:
         53:2f:2d:2a:0f:86:de:6f:9b:92:7b:c9:74:a5:8e:dc:9b:a6:
         34:3c:b2:15:0f:9c:52:d4:a9:0c:c4:34:5e:31:84:a9:1c:e3:
         b0:65:e9:fc:ed:98:e2:b2:b9:1c:e7:ed:12:c4:01:6f:36:ce:
         38:34:fe:23:3b:bf:88:c2:b3:e3:c7:99:99:c9:38:28:5c:26:
         09:a0:70:17:9f:3d:a1:84:93:e2:74:85:5b:54:60:d3:de:f9:
         58:b8:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:46 2025 by rpki-client