Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File:                     HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier:          gr0pyaaiI440dOEl8vRFpE/m09XNVpAWk0SNMGJwNp0=
Subject key identifier:   30:74:A1:95:A0:AC:18:3D:10:49:7D:3A:D9:DB:25:64:DF:B3:C2:AC
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer:       /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial:       019873E2AF4F84551B9E7025F1AAD37B0D78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number:          0F24
Signing time:             Mon 04 Aug 2025 07:01:32 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:32 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:32 +0000
Files and hashes:         1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=)
                          2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: FBV6pDfZdsr/RuaAF/PdNoh6wTfS/J/CRWoiGH20oYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:af:4f:84:55:1b:9e:70:25:f1:aa:d3:7b:0d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
        Validity
            Not Before: Aug  4 07:01:32 2025 GMT
            Not After : Aug  5 07:01:32 2025 GMT
        Subject: CN=3074a195a0ac183d10497d3ad9db2564dfb3c2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:a6:2c:84:f6:25:59:63:08:df:16:40:76:
                    ea:b4:17:d3:22:31:7b:56:22:7f:d1:a6:ab:76:90:
                    c0:be:ef:f0:7f:95:d5:8d:b3:91:8a:bb:da:1e:a7:
                    f5:0f:d8:c9:f0:c2:5e:bc:31:90:af:56:14:22:81:
                    fd:7d:e1:63:d5:c5:0a:28:3d:b0:1c:71:3c:34:67:
                    ed:7e:42:26:ce:61:3b:c8:13:e0:fe:0b:c4:ea:ba:
                    a3:76:76:51:54:3f:a9:bd:79:d7:98:23:11:ff:2c:
                    89:3c:f8:d5:5d:ea:7f:05:61:73:07:b3:26:bd:9c:
                    17:33:5b:2c:83:dc:00:b3:d5:a2:8a:14:1c:5c:92:
                    9d:5e:5f:4d:95:de:3a:26:90:a8:2f:34:7b:40:35:
                    9b:96:a5:46:9f:ef:a2:9d:07:cb:39:90:84:a8:63:
                    c5:a3:98:17:70:9a:27:ba:a9:23:a0:d4:3d:04:cf:
                    ee:90:22:a8:0a:1a:0d:98:1d:5b:fd:9b:e8:cd:1a:
                    02:a0:a5:f9:72:44:94:3a:9a:05:21:15:7a:b0:95:
                    92:7f:97:70:8b:40:99:c0:91:ab:03:28:6a:8c:ad:
                    75:33:b3:4c:7c:ae:da:57:98:96:8f:9e:99:1b:c8:
                    10:16:63:62:a9:0a:38:c8:52:8c:9a:c7:d1:94:fd:
                    d7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:A1:95:A0:AC:18:3D:10:49:7D:3A:D9:DB:25:64:DF:B3:C2:AC
            X509v3 Authority Key Identifier:
                keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:a3:10:1b:0e:e6:76:ae:6b:42:64:db:83:71:e2:ba:5a:
         bb:7e:43:2b:10:d8:85:b9:c8:23:65:a6:da:50:b8:a0:20:36:
         59:b3:46:03:d6:9a:9b:f8:9c:4a:c0:ca:65:ef:52:b0:67:84:
         a2:39:ab:f8:c5:7d:5f:33:3a:0a:ea:60:bd:f8:13:c7:3e:2d:
         1c:6c:f4:5b:1e:94:f5:2f:53:bc:1d:f2:f1:96:bd:fd:35:c0:
         c9:be:66:70:35:cc:51:00:97:c3:db:c5:07:92:fe:17:05:8d:
         7e:91:76:03:c6:09:81:19:52:e5:e9:fb:19:3b:8c:7e:08:84:
         90:dc:f4:0a:5d:af:0c:a3:2e:ff:cf:61:52:43:a7:34:0b:56:
         89:13:a1:82:8d:62:92:5c:35:c6:45:3c:a7:f7:b4:48:8d:03:
         41:1c:41:b7:2f:24:c7:01:27:18:4e:1e:d2:d7:45:d2:a7:8e:
         be:63:b3:d1:c7:49:8a:f9:2e:be:93:56:58:4e:b1:f7:ee:08:
         f0:19:63:06:f8:d7:59:7d:cc:00:13:3c:9e:ae:f7:c6:c0:8b:
         4b:18:11:c5:eb:34:7e:cc:78:21:34:8c:c0:8d:fe:f5:89:36:
         f8:b8:b7:d4:ba:44:d3:c2:22:f2:8f:1f:11:22:31:cd:b6:53:
         b5:22:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:30 2025 by rpki-client