Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File:                     h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier:          qyu0rgPbOfcsTsrCO1Q4+GlbUvjzoNzXQqusCGZODCw=
Subject key identifier:   AD:75:13:BB:50:2C:87:34:C5:C8:4F:C6:80:16:6C:C7:83:6D:5F:52
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer:       /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial:       01989DF0E0DAEF70E5299310483DED935642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number:          0725
Signing time:             Tue 12 Aug 2025 11:01:05 +0000
Manifest this update:     Tue 12 Aug 2025 11:01:05 +0000
Manifest next update:     Wed 13 Aug 2025 11:01:05 +0000
Files and hashes:         1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: sgRJhWGBUFPVrCg+O/2PzurH9eUKZY5uhGCQUQoFEVk=)
                          2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:f0:e0:da:ef:70:e5:29:93:10:48:3d:ed:93:56:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
        Validity
            Not Before: Aug 12 11:01:05 2025 GMT
            Not After : Aug 13 11:01:05 2025 GMT
        Subject: CN=ad7513bb502c8734c5c84fc680166cc7836d5f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:49:c4:bd:b4:39:ce:2c:3b:dd:59:5c:d9:
                    08:59:96:34:ce:13:6b:1a:73:d2:09:19:eb:7f:82:
                    f7:95:c2:af:da:b8:b8:5d:1e:bf:ec:23:b0:ff:f0:
                    56:c3:b4:ec:9a:d4:c5:47:08:bd:d6:9a:c1:b3:0f:
                    0f:74:54:d5:7b:5e:83:ab:6f:c9:1b:b0:16:e6:c1:
                    8e:c4:5d:89:d4:4e:8f:ac:d1:ca:5a:20:1e:4e:be:
                    55:d7:09:c5:4d:a8:68:09:dc:d1:a1:ca:73:be:c2:
                    4e:5d:7e:89:d2:9d:88:20:f4:e3:ba:f8:c7:b6:a0:
                    3d:10:cf:fd:e3:67:ef:a5:31:87:97:3a:f1:32:2a:
                    8b:38:bf:3e:49:66:4e:ef:07:d0:c5:18:92:b4:ca:
                    93:85:5a:11:ad:16:e8:06:83:52:85:a0:57:b5:01:
                    08:e2:4d:94:e9:93:2f:a1:e9:c6:6b:47:f8:ba:4d:
                    18:ec:a2:84:56:21:79:d1:46:d4:1a:80:b8:e6:34:
                    e6:16:59:f3:f9:db:0d:13:24:28:2f:62:8c:f6:2d:
                    3d:e5:2c:4b:fd:e9:d8:da:2d:78:02:c7:88:68:26:
                    27:b5:cb:1b:02:61:39:f2:02:f7:38:bb:81:24:48:
                    20:26:94:a7:34:f3:8f:f1:21:3a:f7:8a:a0:6c:0e:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:75:13:BB:50:2C:87:34:C5:C8:4F:C6:80:16:6C:C7:83:6D:5F:52
            X509v3 Authority Key Identifier:
                keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:8f:e3:c1:c2:e0:0b:7d:d5:d9:6a:e8:4a:87:5f:2d:ea:
         1c:a7:fa:44:82:2e:23:78:c7:3e:65:17:9d:27:89:d4:d6:4d:
         fe:5c:82:5d:c9:27:3b:fe:55:56:22:d5:37:dd:e8:40:b7:53:
         ab:ef:b5:ec:89:c5:47:f9:b2:fe:67:54:fd:70:f1:0d:50:89:
         a6:fe:48:22:4f:5f:57:a9:01:2b:5f:9a:24:03:ed:db:6b:e9:
         1d:24:ec:19:be:2e:3a:cd:93:e9:fd:bd:74:77:6a:38:b0:6a:
         15:b0:bc:02:73:c6:64:6f:22:23:95:39:12:81:57:40:0a:e6:
         a3:13:39:77:fc:39:d2:24:77:f3:96:4b:18:02:41:ab:a5:07:
         b1:f1:85:c0:de:0a:8e:56:06:69:74:7d:31:c8:fd:ff:f8:f4:
         19:c9:3c:c1:c4:1a:45:60:92:81:55:03:7d:68:11:93:d5:18:
         b1:d1:69:17:6f:d1:01:fd:90:7a:91:42:3f:19:90:dc:0d:f0:
         9d:7e:f1:fd:3a:98:58:0a:25:74:12:61:97:04:fb:b1:10:b6:
         31:e7:cd:b6:39:6d:92:b3:96:7d:83:55:39:86:3a:67:c6:f4:
         8a:24:5a:96:15:14:74:72:87:b9:57:69:05:e6:c9:e3:81:49:
         14:ce:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:08 2025 by rpki-client