Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File:                     1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier:          akLuxF9Eso+PDxZXr/MGH0/SIzF/eGChK+JpFY8SMno=
Subject key identifier:   87:43:D3:A8:40:EF:CC:CD:A7:CD:9F:F1:7B:14:F8:D8:A9:FA:9F:0C
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer:       /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial:       019881678AF8915CE394559A0303ECE1B2EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number:          057D
Signing time:             Wed 06 Aug 2025 22:01:43 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:43 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:43 +0000
Files and hashes:         1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: Mm5cLfKZsw8bHPEA7JRv/N7W9xLK3Yq66IarbyewLOs=)
                          2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:8a:f8:91:5c:e3:94:55:9a:03:03:ec:e1:b2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
        Validity
            Not Before: Aug  6 22:01:43 2025 GMT
            Not After : Aug  7 22:01:43 2025 GMT
        Subject: CN=8743d3a840efcccda7cd9ff17b14f8d8a9fa9f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:9d:19:1f:17:75:59:ce:96:e6:65:d4:6f:
                    34:25:9c:7f:6a:2d:14:8b:c1:a0:db:16:df:3a:6f:
                    64:e7:f4:43:ec:1e:8b:88:ee:10:55:e6:cd:f9:16:
                    a4:46:c7:2c:8f:17:61:ea:26:42:1f:73:bf:c7:46:
                    a4:ad:71:cb:31:d9:37:4f:3f:25:5e:6a:de:d2:5f:
                    5a:c2:bb:cb:d2:3b:ec:5d:e6:fd:7c:ea:6a:ad:5e:
                    17:eb:a2:73:25:1c:ff:8d:ea:a1:85:d3:ab:b0:17:
                    ef:c2:3f:4b:af:f7:34:0a:f7:45:41:90:ca:0c:3f:
                    ef:dc:e5:11:c8:ae:d0:a5:42:f5:23:83:b5:e0:74:
                    dc:bf:04:7a:06:62:5a:dd:b1:a2:78:de:af:9f:38:
                    55:62:1f:d8:91:a8:ca:82:c3:d7:ed:52:fd:24:22:
                    e7:27:2b:dc:85:2c:b1:3e:96:9f:de:ca:72:73:5c:
                    c6:ad:7a:8f:3b:37:e6:de:7b:10:70:5c:f7:3d:1c:
                    85:77:e9:16:3a:52:02:c0:6e:fd:22:b6:bc:1d:a3:
                    bd:06:29:9e:ba:3b:ea:e7:a0:5e:8d:b4:af:b6:96:
                    83:a5:a2:b6:74:88:6d:a0:29:d2:dd:02:4b:20:2c:
                    c8:c9:4b:93:71:d3:e1:3c:a0:72:07:05:e8:22:bf:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:D3:A8:40:EF:CC:CD:A7:CD:9F:F1:7B:14:F8:D8:A9:FA:9F:0C
            X509v3 Authority Key Identifier:
                keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:0e:13:9e:e7:08:53:01:ac:bb:60:76:97:a2:8f:13:68:8d:
         4d:2b:31:e8:12:63:5b:35:10:47:c2:f2:58:53:cf:f6:a1:64:
         d0:05:1f:81:ed:8e:1c:9d:66:c8:6b:bd:ba:3f:65:a4:f4:41:
         03:bd:e4:ef:ac:2d:78:28:de:2f:06:6e:60:87:5a:66:7e:cf:
         8c:12:fc:d9:06:2a:7b:87:8a:c6:dd:c5:83:7a:1d:d2:ad:b2:
         70:87:82:77:3d:75:91:86:b9:1c:10:16:47:27:35:dd:a5:d7:
         04:6d:46:a5:23:28:a0:85:a6:94:00:40:60:ae:39:27:de:65:
         56:84:51:f2:4f:3f:41:4d:c7:83:ab:00:ad:90:dc:9e:16:06:
         4c:89:2e:7e:aa:f1:81:e1:0b:c8:98:0e:ee:6c:9e:69:2e:f0:
         1c:a7:52:b1:19:f7:b6:a3:07:4c:ea:da:41:b6:62:33:e2:98:
         6f:97:12:cd:71:1a:35:39:d4:fd:a1:14:9a:1d:6e:5c:be:14:
         7d:50:d2:14:bc:dc:d2:b4:da:2e:20:a6:97:22:d4:4f:a7:c4:
         60:19:da:16:bd:60:7a:4b:ae:19:29:52:c8:9e:62:2f:1e:07:
         73:46:66:24:8e:e6:88:d1:02:68:65:c6:98:28:4d:c5:c0:18:
         28:56:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:13 2025 by rpki-client