Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
File:                     mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft (raw, json)
Hash identifier:          Y3YvLN4ZQ6fL8EMt+MZXEJGDZQtAyXgeB6YyYIC7hCU=
Subject key identifier:   12:C3:99:4C:89:21:E8:BE:AE:54:5E:B4:9A:4E:50:90:C7:DB:5E:A2
Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
Certificate issuer:       /CN=98752d18667dbff8422f97e1e3890e99381d09d4
Certificate serial:       01987C774BB8D36A2D1A14C9D91FB9301B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
Manifest number:          06B1
Signing time:             Tue 05 Aug 2025 23:00:49 +0000
Manifest this update:     Tue 05 Aug 2025 23:00:49 +0000
Manifest next update:     Wed 06 Aug 2025 23:00:49 +0000
Files and hashes:         1: eEuL986vzdl5Ue42JMTwEjrhHL8.roa (hash: sD06A9ioFyTX7xWQwS5R0iqBwd3oxcUKyjznK7FeoF8=)
                          2: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl (hash: H5tkblVww21LU9QrnhoLiogzE30pyvxXeAMLnHdrdZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:4b:b8:d3:6a:2d:1a:14:c9:d9:1f:b9:30:1b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4
        Validity
            Not Before: Aug  5 23:00:49 2025 GMT
            Not After : Aug  6 23:00:49 2025 GMT
        Subject: CN=12c3994c8921e8beae545eb49a4e5090c7db5ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:a5:d0:8b:76:9e:00:ea:aa:f3:38:ba:69:
                    a2:4f:b1:d9:64:dc:15:29:65:8c:87:03:6f:9c:f3:
                    ed:8c:8a:83:96:71:18:36:00:72:c6:88:41:65:ce:
                    78:9e:ed:82:cd:4b:19:88:09:ca:44:fa:bb:42:82:
                    ba:17:26:ef:bf:47:d5:a9:b4:3f:b0:0f:05:81:d7:
                    fe:71:5c:f2:c8:f3:fb:32:12:f5:85:29:25:be:f1:
                    8f:a5:0e:7b:fe:a6:53:87:7e:f4:9a:cd:bb:ed:dc:
                    7c:07:f6:81:97:e4:cd:7a:62:8c:fc:a7:de:8f:7b:
                    16:a4:3a:47:6e:dd:da:fb:85:a1:67:2a:3e:0e:f9:
                    86:39:02:cd:d6:8e:4f:c9:62:15:d0:5d:6f:74:73:
                    03:27:44:49:ca:8c:53:43:bc:3e:e7:20:a1:39:a5:
                    b2:b9:7c:74:0a:31:c2:99:59:2b:dc:d5:2c:9f:e7:
                    9d:6d:c5:a0:1f:d5:48:5c:35:ae:16:e6:02:f1:ff:
                    0a:dd:f9:3c:d0:d1:21:24:21:86:30:6e:79:ca:a4:
                    1f:70:9e:88:05:6d:78:2b:9a:ad:43:89:7b:3e:b9:
                    f2:b3:ff:ee:cf:3d:95:6e:a3:65:48:d2:83:84:42:
                    75:e6:a2:20:59:48:93:20:99:08:f0:14:bf:6c:49:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:99:4C:89:21:E8:BE:AE:54:5E:B4:9A:4E:50:90:C7:DB:5E:A2
            X509v3 Authority Key Identifier:
                keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:04:3f:02:eb:d3:c3:a7:c7:d5:1d:f6:6c:cb:59:ee:fb:2a:
         46:a0:96:0c:49:94:0f:15:1e:e2:1f:5a:77:fa:c2:fb:39:44:
         81:e1:52:f9:f1:ea:d8:8f:15:68:04:32:cc:37:15:34:82:e1:
         ad:6c:02:c3:98:c7:cf:bf:77:5b:3f:6d:36:1d:a7:82:60:12:
         b7:ab:47:f5:98:3e:27:cc:e0:e6:ec:03:ed:ff:b6:9c:f0:02:
         19:a8:64:30:01:ed:3b:65:4f:47:0c:85:2a:56:a5:36:1f:44:
         93:a5:19:9f:ce:7f:ec:56:40:2f:54:d5:e1:f2:74:23:c6:a1:
         3f:93:b6:61:3f:d9:ac:4d:fa:ab:df:4a:10:f2:cb:df:13:ba:
         4e:2a:89:6a:ef:f7:6b:14:9e:63:7e:fa:9c:da:66:5e:6d:8a:
         bb:81:2c:33:75:83:a4:81:18:fd:68:f2:7b:e0:fa:6a:d9:73:
         3c:f1:65:54:8e:fa:4d:f9:9b:cf:9b:3c:01:c3:92:8e:97:5b:
         9d:4d:ff:35:f7:da:e0:5e:25:98:8c:84:e8:87:dd:4a:03:24:
         40:f3:09:fc:11:af:19:b6:d0:42:92:bd:96:c1:be:9c:f6:a3:
         c7:f4:28:f3:c6:ff:f9:54:90:cd:b1:a7:35:16:67:ff:79:88:
         bf:18:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:39:12 2025 by rpki-client