Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          qKoS/g4Hzk9WcBfxTH4Q2wc2tDG4K8IbzLsqywEix40=
Subject key identifier:   44:39:70:E8:6C:64:22:57:0A:F8:EB:41:FA:E0:99:D9:11:87:2B:B2
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       019875D180F416BBCE9306D229425441AAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          1421
Signing time:             Mon 04 Aug 2025 16:02:00 +0000
Manifest this update:     Mon 04 Aug 2025 16:02:00 +0000
Manifest next update:     Tue 05 Aug 2025 16:02:00 +0000
Files and hashes:         1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=)
                          2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: DnTts3dzv+BPxguEmR+VwkBFsHwazrBkxkqromQOQ6o=)
                          3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=)
                          4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=)
                          5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:80:f4:16:bb:ce:93:06:d2:29:42:54:41:aa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Aug  4 16:02:00 2025 GMT
            Not After : Aug  5 16:02:00 2025 GMT
        Subject: CN=443970e86c6422570af8eb41fae099d911872bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:b8:23:04:39:d5:c3:c4:3c:38:20:32:4e:
                    02:df:30:ae:a7:7c:89:84:99:66:d8:f9:40:a5:40:
                    ef:09:4b:b8:9a:75:9f:1e:a1:3a:30:9c:24:10:d1:
                    e4:40:8a:76:db:7e:8b:f3:7e:3a:b7:b5:92:f8:fe:
                    50:e1:fd:5a:ef:cf:2d:14:a0:82:02:2b:67:37:bc:
                    07:34:49:ca:3f:2d:a3:24:0b:3b:c2:22:2d:c5:8f:
                    a8:1b:9e:ca:9a:48:87:8e:91:f1:0a:b9:91:0b:73:
                    b9:68:25:16:e3:41:d5:5a:0c:8a:4a:33:ec:13:24:
                    b5:2a:03:69:e0:9f:64:ab:0d:f6:d8:de:24:69:9e:
                    84:3e:45:d8:17:a2:7b:3a:28:63:75:69:5f:c4:44:
                    e1:d9:4a:81:d1:eb:1d:67:83:c9:11:cc:f0:8e:be:
                    5b:a7:d7:64:ee:a2:86:54:83:60:9a:61:c9:f0:93:
                    ef:16:c4:8d:52:1f:23:32:73:1c:d3:79:db:96:dd:
                    f4:55:48:6e:a3:72:58:34:8f:61:1b:e9:28:57:ae:
                    34:9c:cc:6e:b6:6a:4a:ff:ee:c7:03:2e:0a:9b:10:
                    da:e5:d7:3b:05:46:96:ed:cb:ce:f2:3e:db:49:c7:
                    ed:98:a3:fb:94:90:aa:53:8c:a5:16:29:2f:c5:f9:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:39:70:E8:6C:64:22:57:0A:F8:EB:41:FA:E0:99:D9:11:87:2B:B2
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:86:53:0b:ef:e3:43:cc:64:8b:2f:ea:85:36:32:59:e6:
         34:3f:12:23:e5:6b:ac:ef:c1:2e:c9:04:67:3d:52:d6:6b:18:
         1e:5b:29:14:98:73:83:b1:88:6c:33:7b:5a:31:3a:6a:7b:2b:
         bb:fd:93:45:4b:72:15:59:7a:e6:69:da:10:a9:56:e4:b8:3c:
         06:d4:a6:f1:2a:cb:cb:ca:e2:eb:14:69:88:79:70:8a:fb:ee:
         ba:9e:86:e3:e9:b5:1a:b9:3f:3a:15:52:8e:97:0e:91:ac:54:
         1e:10:d7:20:4b:a9:dd:81:57:a8:d4:41:5d:35:4c:0a:f0:3e:
         be:76:43:11:24:60:2f:9e:3d:5f:92:f4:c7:05:c1:ae:ce:ff:
         b1:e5:06:06:55:15:c6:45:5b:f0:28:ad:b1:42:9d:7b:b8:9c:
         69:02:c5:d8:48:68:c3:25:df:92:e8:c7:32:0c:12:a4:c1:5b:
         3a:60:cb:14:03:8a:5b:6d:a8:8f:fe:c2:f7:59:a2:47:26:9c:
         bd:c9:c3:94:6e:1f:a8:5f:34:c4:41:a7:0e:79:bf:a9:b5:76:
         d2:1a:ea:bd:66:33:10:3c:f9:87:e3:21:49:d3:54:ec:67:41:
         7c:2d:9d:0d:40:af:05:3e:81:f3:cd:5d:a0:fb:33:41:37:08:
         ae:ba:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:30 2025 by rpki-client