Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          U2eGPdFM0uErgvtx+jZvGQHg0mb5bB2Wx46lMoma+eM=
Subject key identifier:   E2:FA:90:30:58:C6:51:6A:C2:F9:60:0D:CB:3A:C9:5E:80:A0:86:8B
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       019882B10785CFEB2B836AE3035AF8371BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          1473
Signing time:             Thu 07 Aug 2025 04:01:36 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:36 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:36 +0000
Files and hashes:         1: 04qRvXpisAlJju5q3bLKILC0LVE.roa (hash: SMJIcHhYL5Jlgz2ZLu2vhAU/XWZpT+AXSJE69y+L74Q=)
                          2: LES-4NZ2gVtnFASVcYj5bV4jo4M.roa (hash: 2G3ShlRTsn405STqDwUmkyh047FRwXPBWPG0OI/1t/0=)
                          3: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: az3cuFsFhIiTsX0YisWhipKvR0ttAVGrws4qjlkM050=)
                          4: iOBndMAtRYjdd4nI6OQWrWkGyaM.roa (hash: AELuuM2xWBmQmKZq9h3C0xBIjOiYeyVIInHWWjjNIic=)
                          5: s8MofJ3kjxOEIcJCRG7XRBu9KS8.roa (hash: Pq2tE0OOs+hTFPNcOAxmOBUj8Uu1ECYXKDV5TZ3hyck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b1:07:85:cf:eb:2b:83:6a:e3:03:5a:f8:37:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Aug  7 04:01:36 2025 GMT
            Not After : Aug  8 04:01:36 2025 GMT
        Subject: CN=e2fa903058c6516ac2f9600dcb3ac95e80a0868b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:fb:0a:36:63:a8:72:e2:0b:1b:8b:ff:00:
                    03:d5:52:76:98:3b:03:30:cb:bf:85:df:2b:07:e9:
                    a4:2f:97:00:c0:71:bc:98:ef:7b:8e:6d:d0:3f:0d:
                    8d:1d:52:d7:8f:d2:03:61:88:86:68:b5:0b:1b:6e:
                    32:d1:42:13:64:d6:73:fe:50:54:e6:05:6d:f0:d0:
                    d2:1b:ea:04:35:05:ee:f8:e1:90:e9:66:a8:94:07:
                    d4:37:79:b1:fb:81:67:5c:54:63:86:58:2b:dc:21:
                    66:2c:f9:34:c8:f8:34:9a:1b:98:ed:aa:e4:b5:e3:
                    b0:83:e0:b3:be:96:b6:c6:12:00:6d:7a:26:f9:c9:
                    b9:e7:1c:a4:8c:0c:7d:82:8d:0e:73:84:92:af:ef:
                    b7:83:ed:85:8f:44:e0:87:e8:d0:66:53:cf:31:58:
                    1f:87:f5:00:3b:95:29:0b:5a:e9:cb:10:65:72:5f:
                    e0:8d:ec:01:95:27:fc:2b:48:28:f2:14:56:6c:a6:
                    87:28:cb:c2:4b:34:0b:50:85:e3:ad:b0:25:0e:49:
                    ad:2f:d9:f4:00:71:19:fe:e2:03:80:03:67:8a:74:
                    97:71:76:60:b3:68:9f:46:74:2e:8e:9a:c2:3b:bb:
                    8f:1c:03:5d:4f:eb:f3:cc:c4:2e:d0:e6:c7:22:ef:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FA:90:30:58:C6:51:6A:C2:F9:60:0D:CB:3A:C9:5E:80:A0:86:8B
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:24:40:0c:53:ef:55:72:e6:af:e9:f0:48:74:f8:29:f2:69:
         e4:67:87:fe:35:3a:aa:92:2f:db:c6:9c:41:1d:27:1b:6f:09:
         6a:3d:6e:7f:b8:8d:67:09:cb:dd:2c:c7:75:e9:0d:4e:fd:da:
         16:5f:14:c1:6c:d1:fb:65:76:b2:c2:af:db:fd:70:88:be:ab:
         11:81:fd:73:bc:0f:dc:8a:63:5e:e1:93:c7:49:fe:f0:59:84:
         ce:c5:a5:50:85:e5:94:9e:bb:22:43:dd:d1:45:2f:4c:c6:51:
         89:a0:a3:53:33:72:d0:a8:ea:d6:8d:0d:b3:a0:2d:0c:c1:8d:
         f0:8f:83:81:fe:40:16:19:2e:65:a0:53:9b:d3:d4:73:6a:d6:
         bd:ce:a3:cf:a3:f0:1d:7f:87:72:bb:d4:51:8d:83:11:4a:e1:
         be:4b:94:93:96:62:61:d8:dc:02:8f:12:a4:de:b6:02:e0:3a:
         14:66:5a:09:38:00:81:6e:5e:a5:43:f7:c1:1f:fa:a7:8d:0c:
         dd:7f:69:52:d5:38:bf:70:4b:04:ce:1c:ac:89:d3:d7:60:f1:
         f0:c8:31:f3:45:0b:5e:db:9f:77:1a:89:72:aa:d9:eb:ab:0b:
         5b:a9:19:6c:fd:6d:7c:61:bb:d6:b1:c5:f5:64:19:6e:94:d3:
         b8:2b:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:38:19 2025 by rpki-client