Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File:                     h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier:          cdP0TsL6HDRxLOChofyv2Vz3eHodx1PYNQ+nhKW92wg=
Subject key identifier:   85:34:7D:CD:72:8D:94:95:B4:79:19:10:9F:10:DC:94:41:96:49:51
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       01987F0ABFDF477271C9E742F317DA87BB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number:          0FAC
Signing time:             Wed 06 Aug 2025 11:01:07 +0000
Manifest this update:     Wed 06 Aug 2025 11:01:07 +0000
Manifest next update:     Thu 07 Aug 2025 11:01:07 +0000
Files and hashes:         1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=)
                          2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=)
                          3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=)
                          4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=)
                          5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=)
                          6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=)
                          7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=)
                          8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=)
                          9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=)
                          10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: F2sGehymiydi/8ktB4kluKLny2BuVM6CzT/asVEdbTw=)
                          11: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=)
                          12: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:0a:bf:df:47:72:71:c9:e7:42:f3:17:da:87:bb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Aug  6 11:01:07 2025 GMT
            Not After : Aug  7 11:01:07 2025 GMT
        Subject: CN=85347dcd728d9495b47919109f10dc9441964951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:67:e4:c1:12:c3:bf:93:fa:ee:99:aa:c8:
                    7f:d1:af:c9:60:1b:57:63:00:95:ea:c4:aa:a3:c7:
                    96:69:0a:8d:c0:9d:fc:99:c1:80:8e:15:33:e5:fc:
                    82:b5:26:a2:e5:9c:aa:90:b8:f3:c7:0a:bf:63:5b:
                    4c:9c:c2:8e:5f:01:a4:77:ac:85:3b:8f:8c:48:7d:
                    a9:ec:b6:91:03:05:10:56:0d:b2:0a:ee:65:29:e7:
                    e0:b8:b2:7c:d3:24:e5:c0:53:0a:e0:b1:1b:9a:01:
                    9c:cb:2d:67:1a:b0:1e:a2:10:32:49:bb:16:fc:5e:
                    00:ad:95:fd:5e:2f:39:85:e1:2f:35:77:f8:24:c1:
                    59:9e:5e:f6:34:a3:0c:19:46:e7:bc:17:b3:07:58:
                    ab:d9:57:6c:4c:b7:e4:c9:a1:61:cc:97:f4:2f:39:
                    40:ed:1b:48:3f:a8:dd:08:0e:8d:76:7c:e2:0c:7e:
                    9c:1b:c5:db:21:23:17:d1:2a:94:d1:30:8c:dc:29:
                    94:93:b2:10:45:b0:5f:77:9d:95:ac:31:e9:07:03:
                    fc:ce:ec:8a:2e:c8:9d:3d:c1:21:fb:0e:ad:79:8f:
                    0c:81:45:0d:45:46:24:d0:ed:4b:f8:7c:41:57:98:
                    a2:56:fd:10:74:ec:ca:a2:43:10:81:df:c7:bb:c4:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:34:7D:CD:72:8D:94:95:B4:79:19:10:9F:10:DC:94:41:96:49:51
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cb:43:d1:0b:fa:d4:2b:c5:0a:52:c6:64:c2:35:6d:e7:30:
         4d:d3:a3:81:36:1f:8b:96:bd:2c:fa:98:0f:d8:fb:da:5e:05:
         50:89:fa:07:26:46:58:93:0e:e6:41:7c:2f:47:33:40:7a:11:
         82:e8:40:48:e8:e0:de:aa:e0:d9:00:ee:66:5c:76:ec:15:8b:
         99:a0:c6:52:16:e6:0b:59:25:c3:48:9f:ed:fb:ba:fa:83:e4:
         73:d4:ad:11:c7:3c:76:3f:55:86:bd:cf:34:c9:51:9a:2e:49:
         7f:98:4d:51:d9:d3:17:2a:69:a6:bd:38:da:a3:6d:17:51:0a:
         25:e2:79:9c:06:5f:44:5c:24:32:ec:9f:e4:3b:48:99:3e:23:
         98:e0:56:2a:a9:08:c1:86:9f:70:8a:b8:f0:1b:ad:8b:14:1d:
         74:63:b9:89:86:db:03:4b:18:e2:c3:65:ae:06:8f:bc:c9:d6:
         26:77:46:05:f7:80:21:34:71:cf:ba:9a:32:f3:28:8e:c3:e2:
         49:49:b5:ba:41:c6:e7:ab:46:e6:32:6a:7b:16:77:f8:25:6e:
         66:b5:59:6e:24:c8:95:86:b4:25:d0:df:ed:f9:c2:6e:4b:0a:
         1f:95:9d:8d:bf:2b:62:fc:02:02:4d:a7:23:b3:5e:db:84:4f:
         98:07:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:09 2025 by rpki-client