Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File:                     hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier:          ycddGY3U8HIcsc/uW5DmKRliqfGBRihXD/SqqujL97s=
Subject key identifier:   0D:88:E6:80:09:C1:6E:97:58:93:D4:47:E7:0B:5C:2D:D9:D9:8F:8C
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer:       /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial:       01988CFE1FA654E8359F1CBC52F53C01E485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number:          114C
Signing time:             Sat 09 Aug 2025 04:02:01 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:01 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:01 +0000
Files and hashes:         1: FYfGapYZgv1rSx7oxjUTR0AEqSI.roa (hash: /yS9+tjgVqFWik3KkW3YA5pzZoZBBA4Y+IeN8zVnoxw=)
                          2: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=)
                          3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: icAjKCZbokCPb2zE69UxjFwzDcRmlFOOQEWlT6QCn5Q=)
                          4: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:1f:a6:54:e8:35:9f:1c:bc:52:f5:3c:01:e4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
        Validity
            Not Before: Aug  9 04:02:01 2025 GMT
            Not After : Aug 10 04:02:01 2025 GMT
        Subject: CN=0d88e68009c16e975893d447e70b5c2dd9d98f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:a3:30:68:00:b1:6e:64:15:31:d5:56:ce:
                    35:b2:63:d7:84:af:d9:ee:18:32:bd:c6:88:f4:89:
                    7b:be:ac:76:d1:17:a0:2b:38:3e:4d:26:90:f1:fe:
                    8c:38:1d:35:8c:c1:13:9a:29:70:75:72:26:6c:87:
                    c2:82:97:85:59:42:09:88:61:9e:65:9b:e9:34:40:
                    f3:c9:f0:e8:44:e4:20:c1:4e:f6:6a:ee:36:55:28:
                    79:62:a1:6e:68:ed:0e:4e:78:96:c4:42:2c:d0:08:
                    25:cd:a4:99:2d:9d:8a:8b:a1:b2:08:bc:f5:e5:fd:
                    da:a3:49:00:2f:85:58:e6:cc:ae:ab:d6:62:f4:3e:
                    c3:72:9b:bb:60:bb:a6:aa:b5:77:70:be:13:8a:f5:
                    0a:09:b8:87:e1:d3:11:ef:bb:8e:bc:32:b8:cf:4e:
                    d9:a4:78:e7:4e:0e:58:8b:ae:cc:42:9e:01:8f:9d:
                    44:9f:b2:08:64:1b:57:00:46:66:39:25:09:28:15:
                    08:d3:c7:b1:e1:67:65:66:41:d1:a5:d5:7c:08:f2:
                    ea:6e:8d:b6:cc:11:68:d2:84:9b:66:77:2f:fe:ca:
                    0c:b0:61:f8:78:df:e6:de:64:13:28:d2:ba:c1:4c:
                    3a:8a:7b:f4:a7:b5:39:0c:5f:f7:9e:ba:8e:ca:fe:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:88:E6:80:09:C1:6E:97:58:93:D4:47:E7:0B:5C:2D:D9:D9:8F:8C
            X509v3 Authority Key Identifier:
                keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:39:0d:f3:58:75:7b:df:60:82:c4:e5:c3:71:07:f6:dc:63:
         07:73:ae:e3:d5:dc:74:23:55:46:04:d0:f6:4b:77:6c:b7:1e:
         73:2d:4b:4b:7f:2a:c0:41:9e:85:a8:02:36:01:12:97:ec:1c:
         4e:1b:1e:73:49:ef:b9:ec:f6:b7:6e:50:fd:c0:8b:97:7c:4f:
         7b:51:60:e1:6e:91:67:9c:04:e9:a2:4e:81:56:56:1b:59:0b:
         0c:59:97:ee:bc:b3:16:51:dd:5b:45:14:63:99:77:c8:cb:22:
         04:7a:59:71:6e:f1:1f:ef:4c:da:0d:ce:7b:8f:70:89:05:d5:
         03:ba:2c:23:0f:f4:6a:70:a0:d3:26:4a:ce:c8:e2:f6:6f:3a:
         89:6c:9a:23:24:07:78:6c:7e:4f:dc:45:5b:98:0a:bc:1b:50:
         dc:2c:0e:9b:56:a8:4d:a9:83:e5:9b:9d:a7:a6:06:dc:bb:6e:
         88:be:93:08:44:19:4a:51:b6:e1:6a:23:44:d3:1e:4d:df:78:
         38:48:36:f0:93:99:a5:4e:b0:99:48:23:19:c0:f9:1d:07:28:
         ba:da:fe:1b:22:c4:42:96:e3:8a:d8:65:12:c5:92:f8:75:8a:
         a3:12:db:a6:67:d1:3b:df:29:2a:23:bd:5a:5d:35:28:e1:d6:
         ea:17:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:35 2025 by rpki-client