Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
File:                     hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json)
Hash identifier:          qYwlDO3iwN0ZgqxCw4QKOmrmI5COtQY6eAyFx3HZzFo=
Subject key identifier:   74:7E:F0:23:9A:55:CD:D8:43:B7:D7:D1:B9:CB:E8:61:58:70:B8:BD
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Certificate issuer:       /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial:       019873066EF53E5F57A240901254ABEA6651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
Manifest number:          0C15
Signing time:             Mon 04 Aug 2025 03:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:58 +0000
Files and hashes:         1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=)
                          2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: J03SQzUYOhGGDb91HxFxynBZEEP5zgwC2aCEuNJfKqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:6e:f5:3e:5f:57:a2:40:90:12:54:ab:ea:66:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
        Validity
            Not Before: Aug  4 03:00:58 2025 GMT
            Not After : Aug  5 03:00:58 2025 GMT
        Subject: CN=747ef0239a55cdd843b7d7d1b9cbe8615870b8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:74:69:09:7d:84:88:4c:84:1d:56:cf:c0:3f:
                    1c:ef:ee:70:5f:ec:17:ef:00:09:57:c3:fd:d5:03:
                    21:07:ba:1a:b3:7b:a3:b0:5d:3f:84:aa:2d:35:c3:
                    87:24:3f:0b:1d:61:ea:23:c7:32:7d:e5:e3:48:68:
                    59:c4:92:14:aa:7d:0a:be:f6:20:9a:10:be:79:25:
                    20:55:d3:2f:c4:44:4d:ad:fb:05:95:0f:39:33:b5:
                    f5:7a:d8:bb:8c:17:9e:7a:7e:3c:35:30:a7:a3:28:
                    49:d5:26:84:ee:fb:2d:12:41:c3:9d:37:0c:27:35:
                    5e:56:ec:60:dd:21:6b:fe:ed:3f:c6:90:19:cd:44:
                    aa:e7:2f:90:b0:ee:5a:34:28:d8:1c:ed:c9:f1:f0:
                    b5:c7:96:8c:16:f9:eb:74:c1:9a:c9:24:52:e2:e8:
                    9b:c7:14:4e:36:e0:ef:1f:b3:8d:14:a5:28:35:f4:
                    e1:50:46:97:35:76:c7:71:b1:89:fa:e2:37:8f:dd:
                    21:85:28:c6:40:e2:3e:aa:e8:b4:48:87:03:81:61:
                    71:6a:c7:59:cf:b2:a2:1e:d6:f0:87:ec:49:d2:58:
                    f9:ba:19:8b:be:50:b5:bd:ab:6e:3d:05:ad:0d:72:
                    2c:57:2f:bb:af:7e:16:dc:a2:35:c8:09:2d:30:7e:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7E:F0:23:9A:55:CD:D8:43:B7:D7:D1:B9:CB:E8:61:58:70:B8:BD
            X509v3 Authority Key Identifier:
                keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:06:8b:bb:9f:fc:eb:d5:72:10:9e:20:07:41:5f:ed:2f:fa:
         96:03:00:73:b4:c3:ac:8a:d1:b2:54:aa:72:d6:f0:49:ea:e5:
         9a:16:75:c1:c2:03:a5:18:f6:09:9d:42:55:54:1d:20:3d:26:
         3a:68:01:f7:1d:20:72:bf:b3:22:53:30:5c:85:3f:ba:75:fc:
         e9:1c:9f:9a:d9:1e:c9:e8:aa:70:f6:67:c1:ae:a2:67:56:f8:
         28:0d:a2:91:05:f3:3a:82:d6:36:6d:5b:b7:ff:aa:e6:64:f6:
         83:fb:c9:76:a7:b4:f5:82:0a:45:66:98:cb:c3:85:d0:9d:c1:
         d9:35:41:fd:4f:8c:32:07:06:c8:ea:35:59:ca:86:43:92:e1:
         ce:a7:0c:1c:68:e8:44:e8:5d:2c:cc:73:3b:45:72:79:1e:37:
         fb:a8:83:d5:74:79:bd:19:07:5e:7c:c1:6e:74:17:da:37:d3:
         fb:92:07:4c:25:2f:5a:2b:88:65:43:8d:97:b8:9c:cb:36:5a:
         49:6e:fd:71:14:f9:c3:82:2b:f3:a4:54:3d:d3:fb:2b:2d:4e:
         7c:b6:b7:98:fb:fe:96:3c:99:8e:8a:08:57:3c:1b:5f:ed:17:
         a1:14:6a:41:5c:9b:4b:4f:70:73:93:40:d4:34:f8:4c:fc:4d:
         22:24:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:32 2025 by rpki-client