Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          l0g6tNGktsIt2BHeukP5mAO2ycwEjA2kRyvVXtnZ7b0=
Subject key identifier:   5C:3D:3C:33:F8:8A:8D:98:9D:1D:EC:E8:DE:05:42:E7:95:DE:BF:02
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       019876ACC9A3E63F0E5B1A394D3B7D83449D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0BC3
Signing time:             Mon 04 Aug 2025 20:01:31 +0000
Manifest this update:     Mon 04 Aug 2025 20:01:31 +0000
Manifest next update:     Tue 05 Aug 2025 20:01:31 +0000
Files and hashes:         1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
                          2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: MTYwXCv7eYdDi9ZPVos4dJtmX5UTwunzOKLjoA0L/HA=)
                          3: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
                          4: fTWM1zKEU10CvPHR7x8xLqGMmBk.roa (hash: SLdOjrmdsiTj6gBhRX9Fmq3urmuPys2J1yZIBUXb9kE=)
                          5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
                          6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
                          7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:ac:c9:a3:e6:3f:0e:5b:1a:39:4d:3b:7d:83:44:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Aug  4 20:01:31 2025 GMT
            Not After : Aug  5 20:01:31 2025 GMT
        Subject: CN=5c3d3c33f88a8d989d1dece8de0542e795debf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:69:7c:49:4b:a1:e5:67:1a:c2:7b:a9:fb:
                    3f:8b:bd:2d:fa:cc:00:a3:c0:72:f1:6b:e9:22:80:
                    2e:09:6f:3d:73:ad:49:89:2d:24:9f:fd:66:ab:82:
                    99:f1:fc:e1:51:ba:d8:63:5e:b0:f1:bd:55:62:39:
                    14:07:9b:3b:d9:47:92:ab:f3:62:55:99:15:85:9a:
                    ea:20:79:a6:93:57:8a:d6:f1:0f:31:12:45:e0:6c:
                    f2:47:17:9d:66:96:9c:1a:b6:59:4a:61:c7:99:3d:
                    01:15:6f:ff:ee:06:32:db:2c:e1:34:99:6b:b5:20:
                    17:fa:9d:69:ed:b7:d2:92:e1:53:2e:14:89:48:d6:
                    3b:9e:73:9e:69:78:2a:40:25:47:62:f9:50:4d:b4:
                    c2:cc:73:90:38:00:9a:21:fa:e0:c4:05:9d:07:ca:
                    c4:cb:d0:67:bc:2e:43:d9:8e:17:68:57:4e:53:75:
                    79:52:e2:d7:9d:a2:15:b3:4e:61:02:54:84:23:fd:
                    d2:d6:a6:9b:7b:29:7e:ec:87:1e:48:dd:32:d4:b8:
                    dc:a4:64:36:07:cc:b3:2a:d0:0e:92:04:4e:6e:5e:
                    c1:0e:fc:c2:5d:67:4b:21:a8:a8:21:06:51:28:36:
                    e8:aa:2f:bf:ae:55:ca:a2:b7:3c:4a:c9:cb:e7:ef:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3D:3C:33:F8:8A:8D:98:9D:1D:EC:E8:DE:05:42:E7:95:DE:BF:02
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:f7:cc:4a:61:68:52:c6:fd:8a:a9:b7:bd:d5:8c:e7:86:
         24:a8:13:6d:c3:c9:67:23:7f:6b:ee:f4:fb:0b:18:48:98:c7:
         b2:4a:37:6a:e0:8b:a7:7a:dc:61:66:7f:b8:0f:12:c8:4a:de:
         db:af:da:04:54:6b:91:dd:4d:24:a1:b4:d0:2c:62:dc:3b:9f:
         a8:09:dc:e2:2f:1d:86:bb:db:c7:92:a0:de:71:73:c9:0f:f8:
         1a:40:ad:a4:fa:5e:c5:81:75:93:26:c0:05:54:0e:2b:55:46:
         22:12:17:42:7c:87:56:23:76:57:d8:c6:90:03:8b:eb:67:3f:
         fe:54:7f:44:dd:e9:a4:28:88:71:55:97:59:c0:8a:d5:c1:7a:
         8c:c8:ae:46:04:f5:9d:46:7d:96:d5:e1:50:28:71:48:64:45:
         ae:9a:f4:c3:5c:66:c1:e1:d5:37:31:e2:7a:56:9e:cc:3f:18:
         db:de:cf:b1:be:3e:d9:89:fe:bd:91:5b:0b:d4:f8:5e:c5:16:
         48:d9:28:d2:df:62:24:ce:e4:6a:f9:a7:41:be:bf:9c:b8:96:
         15:1a:90:33:6f:a9:ca:89:ed:95:20:4e:9c:0e:bd:3b:18:a5:
         21:66:7a:75:33:42:f1:4c:cb:3c:24:39:be:b6:1d:30:90:7b:
         bd:3b:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:15:20 2025 by rpki-client