Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
File:                     HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json)
Hash identifier:          LMbTIIkxKUG457MjGFlbDU7XQpDVwppLrDOjgE3KW1M=
Subject key identifier:   51:E4:E7:EE:61:52:83:9E:75:52:40:25:33:25:A9:AA:FD:D1:23:77
Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
Certificate issuer:       /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Certificate serial:       01987D8BA5AC170DD279ACE70CBCE6ECAC5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
Manifest number:          0B76
Signing time:             Wed 06 Aug 2025 04:02:40 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:40 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:40 +0000
Files and hashes:         1: Bh5IC48JAR5FB63v2dnakNOTX34.roa (hash: FMLGNxpZDrf8rppZSMEnpJR9pt6oa5eJBxowJrkMq7o=)
                          2: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: 3ChwThGJuCa441/HM0FLgfRrFNNs5L2Gejdbbk2GAF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:a5:ac:17:0d:d2:79:ac:e7:0c:bc:e6:ec:ac:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
        Validity
            Not Before: Aug  6 04:02:40 2025 GMT
            Not After : Aug  7 04:02:40 2025 GMT
        Subject: CN=51e4e7ee6152839e755240253325a9aafdd12377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:d1:6a:e2:34:ac:d4:d7:67:38:73:a3:ef:
                    2f:d3:aa:8c:62:29:3c:28:de:30:89:d5:a0:73:63:
                    ff:d4:41:24:dc:18:b7:99:1f:da:db:ab:f3:23:c0:
                    7f:81:d4:06:b1:6d:3e:0f:32:80:65:3d:9c:89:d1:
                    bb:9c:06:76:1f:93:ce:d2:2c:81:e3:3a:be:46:a5:
                    af:c1:de:44:53:e3:55:6e:92:9c:4c:dd:5b:eb:8e:
                    88:c3:1b:35:7e:6e:a9:3b:bc:23:ca:cd:5d:4d:25:
                    75:20:2b:fb:5d:e7:ad:aa:2c:e5:d4:d3:5e:fe:ff:
                    83:66:d3:ce:34:b9:58:6a:11:d2:a2:fa:cb:c8:6d:
                    82:b9:0a:74:f3:c2:11:50:42:02:24:17:ea:17:33:
                    08:b6:35:d3:6b:83:f0:b8:a2:50:ad:7d:0e:7c:64:
                    dd:b4:3f:ee:99:bc:db:76:a7:eb:ad:80:18:57:23:
                    3b:ea:9f:5f:fa:28:55:55:fd:b3:29:56:b0:01:44:
                    87:0d:be:fc:4e:ba:a2:cf:fc:60:7a:8e:30:65:c6:
                    88:a6:22:47:43:62:fb:86:dd:6b:93:1a:b5:e7:81:
                    7b:e1:c6:4f:57:0f:ad:d5:77:62:c0:da:8d:da:a9:
                    54:65:87:69:bf:94:e1:c0:df:98:80:1d:bb:0d:0b:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E4:E7:EE:61:52:83:9E:75:52:40:25:33:25:A9:AA:FD:D1:23:77
            X509v3 Authority Key Identifier:
                keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:79:20:78:52:a6:45:07:43:1d:28:36:9f:72:22:b9:dd:
         bc:9a:a0:3e:be:c3:39:d0:c1:f2:1f:8e:38:08:4a:08:2a:41:
         14:f2:ac:e3:f3:37:f8:13:e6:f2:07:a3:1c:51:fe:c2:98:98:
         5c:3e:f6:25:7e:59:b3:03:5b:4c:97:49:61:c5:da:5b:91:7a:
         76:5b:ba:63:b7:49:a0:6c:bf:7f:6b:05:1a:82:37:52:3e:26:
         6a:45:c1:5b:58:a1:0f:b1:e9:44:ee:14:40:fc:c2:09:e3:62:
         6d:a2:07:2c:ff:2f:25:0b:08:a1:d7:4c:48:de:81:ff:07:fa:
         a2:54:13:a7:04:33:cf:b0:31:03:b8:43:b5:ba:ce:9b:32:64:
         8f:24:1e:61:38:50:13:d8:ed:73:bf:4e:8f:65:e2:e8:a5:59:
         a0:08:96:70:a3:33:52:91:fe:58:b3:23:9e:fb:17:47:ed:01:
         0d:06:f0:67:62:09:44:9e:4b:00:59:a3:9b:09:60:63:9c:09:
         66:b8:c8:24:52:4e:65:24:41:0b:be:7d:93:de:dc:e5:42:04:
         f2:34:e1:93:c8:5c:6d:29:67:20:1a:fa:e9:38:93:ee:8f:e5:
         59:bb:97:62:94:5f:0e:51:01:d3:86:cd:94:86:a1:24:73:28:
         0b:df:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:11 2025 by rpki-client