Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File:                     hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier:          kTUZyZ8j+eNJG/OyHP4nzLiZoazFDzLNfKPX105bm2c=
Subject key identifier:   0C:1C:E0:30:66:A7:8F:CE:53:D0:DC:5E:60:A4:BA:25:9D:97:0E:AE
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer:       /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial:       019872CFF0EC44E815AB15630DCA7C62F856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 02:01:26 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:26 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:26 +0000
Files and hashes:         1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=)
                          2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=)
                          3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=)
                          4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=)
                          5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: F3o0tltnC1R3ILTETGyhaKN9BN3Lp40LbPZm9K7uezE=)
                          6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:f0:ec:44:e8:15:ab:15:63:0d:ca:7c:62:f8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
        Validity
            Not Before: Aug  4 02:01:26 2025 GMT
            Not After : Aug  5 02:01:26 2025 GMT
        Subject: CN=0c1ce03066a78fce53d0dc5e60a4ba259d970eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:78:a1:93:51:59:e9:27:2d:de:ad:18:eb:
                    99:8d:e0:2c:90:62:e9:25:2e:66:d8:33:33:81:db:
                    e7:83:d5:39:b8:9d:9f:cb:30:37:a3:99:ee:c7:92:
                    7f:4c:1e:98:f4:67:e6:88:b8:d8:c3:26:28:b5:df:
                    e7:3b:17:5a:b6:f3:f6:be:35:94:e8:f0:85:6b:48:
                    fe:2a:f2:42:ec:1b:78:0d:fd:11:66:da:ad:eb:2e:
                    d8:75:a8:c7:43:69:ea:0e:c0:90:0b:44:29:42:06:
                    9d:08:43:ec:20:d9:b4:50:bd:3d:ce:2d:6e:4c:53:
                    ad:f7:8a:b9:c5:07:d6:69:d8:69:38:62:b8:41:83:
                    58:77:24:8a:53:b3:77:92:58:5f:50:de:2a:84:21:
                    23:39:aa:8c:56:91:bf:97:02:7f:b0:c1:33:7a:aa:
                    ad:26:c9:b7:03:66:8c:a0:84:50:85:4d:aa:ee:de:
                    29:e6:bc:83:54:f3:8b:fd:90:f3:da:b9:43:28:3e:
                    bb:98:7b:87:b0:60:9a:d8:37:ae:79:72:d4:70:1c:
                    cb:4f:c7:ec:9a:af:4f:6b:d7:73:bb:21:b0:6d:fa:
                    08:e1:a1:94:a7:83:4d:05:62:2c:73:40:ad:9f:7c:
                    28:ac:a1:d6:7d:32:a6:e1:d2:51:c5:c4:95:e1:ee:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1C:E0:30:66:A7:8F:CE:53:D0:DC:5E:60:A4:BA:25:9D:97:0E:AE
            X509v3 Authority Key Identifier:
                keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:16:97:da:b4:3b:77:56:9e:28:cb:bf:e8:59:65:32:85:
         a0:b8:e4:27:f2:b0:de:f9:32:06:8e:25:11:08:ba:9b:66:2e:
         3f:7c:c3:76:22:b0:bc:ec:93:83:29:0d:86:2e:63:95:fe:b7:
         02:09:b9:7a:a4:9b:44:28:eb:2e:8e:9d:31:25:04:d9:ec:0e:
         79:7e:0d:ee:0d:f6:a9:db:1f:42:ef:3a:d5:e5:40:3a:ba:d2:
         e9:51:58:4f:83:64:24:12:3d:58:75:32:91:e5:1a:17:05:48:
         5d:af:b8:78:f1:e5:0f:f9:da:2f:cb:bf:cd:4e:f1:40:6e:9d:
         7b:5b:ac:1b:b9:e5:fb:3f:a0:26:db:bc:5b:fa:51:65:3a:94:
         d4:47:68:77:20:0b:16:d1:b0:e8:e3:ed:67:2d:6b:b8:e8:3c:
         fb:87:77:a3:3f:12:8b:bf:ad:ab:62:f8:74:ff:5c:1d:10:ed:
         3f:03:42:5c:c0:8f:fb:c3:1c:d3:37:20:cc:bf:ef:d6:bd:a4:
         07:d5:45:ab:19:c9:53:60:a3:8c:54:db:03:c3:32:09:e7:f9:
         2e:40:62:bb:8f:e7:98:b8:54:d4:e9:25:8d:23:64:67:1a:a2:
         a4:68:7d:f3:5e:de:19:f3:3d:c6:9b:3f:60:af:87:0b:61:61:
         6b:b9:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 03:59:25 2025 by rpki-client