Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File:                     Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier:          4gfgbow7UU0dl2SuvX3S5WHUzexX4KM+8eduXnclj6g=
Subject key identifier:   36:E1:D6:F0:88:A4:11:8B:70:D5:64:45:27:1F:E2:93:37:6A:E4:4A
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer:       /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial:       0198733D9F355706BCB754597DDB6C633E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number:          0E60
Signing time:             Mon 04 Aug 2025 04:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:14 +0000
Files and hashes:         1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
                          2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: JpqPD+w0yJKzc3/nLcuQgAl5jMQ9XbJFKR29vhQ9u3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:9f:35:57:06:bc:b7:54:59:7d:db:6c:63:3e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
        Validity
            Not Before: Aug  4 04:01:14 2025 GMT
            Not After : Aug  5 04:01:14 2025 GMT
        Subject: CN=36e1d6f088a4118b70d56445271fe293376ae44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:16:75:e2:86:b9:44:15:1c:7d:29:92:ff:
                    ef:e7:7f:c5:70:63:72:2a:b0:19:f6:1a:d6:b7:b5:
                    b8:9c:13:54:ae:87:43:cd:ea:1c:71:a7:02:aa:31:
                    ae:d7:d6:fc:a6:6f:40:cb:ba:e0:fc:ec:a6:57:d2:
                    a2:e0:a3:e9:a6:f9:29:1a:b8:79:54:8e:8c:90:62:
                    ba:34:a9:4e:c0:39:f3:33:a9:d4:a9:57:dc:2d:97:
                    b6:a1:d9:ee:60:b7:a5:d1:0a:8f:22:3e:b2:c2:5a:
                    6e:17:e6:8f:56:76:19:8a:60:9e:ed:ab:df:cc:c5:
                    50:da:a8:d2:3d:4e:4d:e5:ce:7a:1c:65:fd:ec:56:
                    82:27:c2:47:b7:2d:44:bf:55:d7:9e:38:51:3f:08:
                    1d:b9:2c:d4:a6:c3:52:a5:51:f8:8d:cd:9f:4c:93:
                    d4:db:b7:3e:16:98:89:c6:70:0e:7c:96:3d:55:f6:
                    4e:fd:b9:e9:41:43:39:bb:d4:ca:c2:24:c3:34:bd:
                    c7:1d:af:e3:f3:29:4b:fa:5c:6f:2f:a8:63:e4:a2:
                    4e:e7:9a:c9:92:71:e1:6f:be:66:c6:10:36:92:97:
                    82:18:68:88:61:c5:ff:25:26:e1:1d:44:9d:8d:9d:
                    0b:2e:97:08:cd:f4:5b:db:23:dd:60:e9:b3:63:3e:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:D6:F0:88:A4:11:8B:70:D5:64:45:27:1F:E2:93:37:6A:E4:4A
            X509v3 Authority Key Identifier:
                keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:65:86:29:65:94:16:90:2c:3c:b9:5c:4f:e6:a9:2c:1b:75:
         46:6b:13:05:51:82:7f:d1:a0:d9:4a:67:0f:a7:f5:a4:62:ab:
         2b:4c:56:b3:54:f3:6a:f8:3d:f2:3f:27:af:d4:48:a4:26:c8:
         5f:a7:05:ee:8c:6b:86:52:ef:0d:55:b1:23:97:8d:a5:df:00:
         02:07:34:5b:e0:c2:5f:da:a3:6f:7d:b2:ac:ee:1a:df:68:85:
         6e:24:17:cf:5e:d6:1e:06:48:0a:76:dd:5e:87:e9:07:8f:bc:
         5d:a5:c1:76:16:2d:3b:3d:24:3e:f0:15:e9:df:69:cf:55:18:
         98:49:11:ab:f2:3b:50:3f:8a:20:33:49:01:ce:f1:2e:38:df:
         29:7d:24:85:4d:ea:94:b8:54:ac:fe:c6:71:7f:c1:d5:e8:02:
         1f:3a:5e:93:c6:10:4e:48:46:9a:30:2b:45:1d:80:bb:69:87:
         7a:b8:48:58:dd:29:04:37:35:75:91:16:92:25:b2:df:94:fc:
         f1:60:3a:a3:5f:f4:80:f6:fb:39:32:bf:56:0e:86:b1:49:21:
         ec:16:31:b5:22:e5:45:ab:21:f8:12:e2:95:bb:bc:0a:4e:10:
         6b:a0:5a:8c:e2:0a:85:80:87:69:58:ed:dc:f0:da:c1:02:10:
         9b:3d:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:43 2025 by rpki-client