Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File:                     H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier:          nq+d9uEPKm9c3VEQF51Ngz7nFFkw+aM5wcIf31/tdT8=
Subject key identifier:   8A:A8:59:35:1B:B3:B4:91:DE:12:F8:A0:27:80:E6:06:E6:73:55:86
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer:       /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial:       019898259DCD310B61684B2DAC0B5EEEFC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number:          162B
Signing time:             Mon 11 Aug 2025 08:00:58 +0000
Manifest this update:     Mon 11 Aug 2025 08:00:58 +0000
Manifest next update:     Tue 12 Aug 2025 08:00:58 +0000
Files and hashes:         1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
                          2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: viifTJsvGkw/LZ2eVAxQDpQLCmUF+XTRyvMEAk1Wtic=)
                          3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:98:25:9d:cd:31:0b:61:68:4b:2d:ac:0b:5e:ee:fc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
        Validity
            Not Before: Aug 11 08:00:58 2025 GMT
            Not After : Aug 12 08:00:58 2025 GMT
        Subject: CN=8aa859351bb3b491de12f8a02780e606e6735586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:aa:7d:b7:68:2c:96:eb:f1:23:44:64:ae:
                    02:ab:23:d7:87:29:30:a7:bc:61:d8:03:1b:c6:f5:
                    61:81:ce:1e:6a:13:ca:ce:70:10:e9:56:96:4c:3b:
                    95:78:ed:05:4e:30:16:82:90:96:33:b5:21:d2:08:
                    99:67:01:28:97:92:87:dc:c0:14:6c:7e:74:ff:66:
                    04:43:c2:dc:2e:6d:fc:19:f2:60:eb:68:80:04:e2:
                    7e:af:2c:11:1c:ff:f5:8a:46:71:2c:98:be:31:09:
                    09:12:80:b0:8c:06:f1:c1:45:f2:bf:8f:a4:f5:ed:
                    d5:1e:1b:72:fa:67:b1:a3:be:2c:ef:c0:14:96:b3:
                    23:44:f0:9a:50:87:c0:1a:7a:ad:7d:32:7e:cd:11:
                    ff:af:af:01:4d:63:32:e6:2f:5e:3f:31:a2:c9:f2:
                    6c:13:78:b4:20:ef:4f:d4:40:67:77:ac:39:13:63:
                    67:27:78:ec:13:e6:73:b3:cc:07:1e:a7:f9:f3:c0:
                    1a:eb:1c:b5:a4:9f:9c:8c:18:5c:e6:69:0b:65:9b:
                    39:3b:30:77:8e:44:0e:55:83:df:11:f1:d6:9a:42:
                    66:3f:42:b9:ad:99:1f:c8:72:0f:2e:10:7f:0d:30:
                    76:12:b1:2d:fc:96:75:c4:77:4e:78:31:4b:c3:0a:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A8:59:35:1B:B3:B4:91:DE:12:F8:A0:27:80:E6:06:E6:73:55:86
            X509v3 Authority Key Identifier:
                keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:c8:a4:2c:ce:d5:72:10:a5:12:4d:ad:17:c4:9d:f0:66:
         24:aa:fd:20:50:d6:55:28:8f:de:4d:69:0a:ed:4a:11:61:09:
         e6:d5:39:ec:8a:a2:c5:fa:7e:28:2c:98:79:19:ab:83:ad:27:
         67:c6:d0:43:77:61:4e:12:e9:8b:a5:89:ea:c1:e2:7c:f3:f5:
         08:d1:26:63:ff:8c:45:17:6d:5c:ef:d5:16:37:0d:67:8e:69:
         82:32:55:9c:ce:f8:f1:fe:6f:34:d3:e1:53:5d:ab:c7:7b:00:
         3b:9b:61:6d:90:5a:b5:42:e8:bf:13:60:f1:27:04:c6:14:43:
         9a:1f:a8:1a:c7:6c:f8:6f:d5:c0:e0:ab:84:60:ca:b7:ff:2d:
         47:8a:68:ab:f3:d8:1f:7a:a5:7e:db:84:71:fe:e2:90:b5:1d:
         8e:87:60:bf:6c:c1:b3:a4:ee:74:76:f7:8e:53:c5:3f:00:48:
         61:d2:34:df:a2:1e:1a:33:85:2b:36:3f:fb:a0:f7:2d:82:65:
         92:ad:9d:e9:17:1e:bd:2a:8d:13:52:d8:eb:03:b2:5e:6f:d6:
         c1:93:91:fb:c1:38:f0:f1:52:b7:6c:d9:ed:b8:4f:03:67:e8:
         40:4b:cc:3a:df:26:17:84:44:38:64:a9:e3:dd:d3:1a:53:98:
         1d:0b:d1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:49:54 2025 by rpki-client