Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          8AT5JmqsZlT8yb1NLQ2KWMtFCzD87x2CGNFWGA03ySg=
Subject key identifier:   66:90:FA:1F:3B:53:83:19:17:BB:B9:23:2C:2E:90:30:C6:20:D3:73
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019873AACBC9CAAB4E379AE49718C959ADCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          118A
Signing time:             Mon 04 Aug 2025 06:00:29 +0000
Manifest this update:     Mon 04 Aug 2025 06:00:29 +0000
Manifest next update:     Tue 05 Aug 2025 06:00:29 +0000
Files and hashes:         1: VlN03NzU22VqBJjuuSiWL-bZBd4.roa (hash: zL/CNitpQTOFbWlPrnFZSimJtQPUsRcwGyao+n9vr6I=)
                          2: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: mWFXZqKEhcn/IGxzKPcJpzfIMxlwfgFZ7oNBC6qYYmU=)
                          3: p3IQt34M_r8DA4ZrzngnzfJHx6I.roa (hash: 0q1woLOhlfNZ/6p3zHEDdhDQt3pJoLquLcV7B+vJL+M=)
                          4: x-pf71LMqWAOfz_edcWa4jqcFtw.roa (hash: R9d0veM+s5qj9VQxcv57hMUlsfI6YWyDvMX5S+dYnf4=)
                          5: yNCFlHdmr6YTD4yj6Ff9apNqyt0.roa (hash: ZUFB1KnW1iXTKo6shI/8yLUB0t8Kkom2z+qOMPxu0jE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:aa:cb:c9:ca:ab:4e:37:9a:e4:97:18:c9:59:ad:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Aug  4 06:00:29 2025 GMT
            Not After : Aug  5 06:00:29 2025 GMT
        Subject: CN=6690fa1f3b53831917bbb9232c2e9030c620d373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:49:d3:1a:12:29:22:c6:50:07:2f:e8:03:
                    74:b9:19:cb:be:9e:0b:49:74:08:95:75:d9:3f:49:
                    ac:ec:a6:6b:98:42:e0:0b:50:0b:1a:fa:4c:db:68:
                    64:f5:bb:25:18:8d:4d:dd:48:67:76:6e:aa:f1:d4:
                    0f:b2:39:70:5f:91:0e:f3:6d:25:d1:e8:73:fa:22:
                    f5:5b:09:48:37:1a:7e:c5:6e:91:12:97:db:67:b4:
                    7f:90:25:e9:7f:f2:a4:7b:ff:85:29:d2:a5:df:93:
                    a5:b7:1e:38:d0:62:73:cd:bd:38:e3:1e:5e:85:ec:
                    85:e4:a9:2c:4f:20:df:78:ff:de:d7:95:71:d1:06:
                    fc:a9:c6:9b:d4:ba:4a:c2:80:eb:31:d8:ca:48:ee:
                    b2:5c:0e:97:ed:0b:1f:2d:f2:78:39:fd:b3:c1:6d:
                    7e:cb:12:d7:28:61:81:78:30:a0:46:0b:c8:46:d5:
                    43:4e:36:47:ca:b4:0b:88:be:e1:9f:bb:10:61:f4:
                    e8:79:b7:64:58:40:cb:1e:a4:1e:bc:5c:0a:21:bb:
                    20:fc:20:55:b2:e6:16:c7:94:ff:33:60:90:c1:52:
                    ef:37:e9:2d:85:7b:22:73:3f:cd:a9:7a:25:fa:1f:
                    50:a7:49:cb:02:94:bd:29:20:2a:8a:00:63:f6:a3:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:90:FA:1F:3B:53:83:19:17:BB:B9:23:2C:2E:90:30:C6:20:D3:73
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:26:d0:87:08:9b:3d:2b:8b:29:b8:91:bf:38:89:af:c8:fb:
         3a:d2:1c:9d:38:a8:f3:1f:a0:ab:6c:02:4f:af:10:d4:ef:57:
         c0:c4:08:00:cc:00:9b:43:af:58:f0:de:c7:85:27:19:bd:5c:
         e8:32:03:97:ff:b3:8e:c1:f6:97:f8:f9:37:12:8f:1f:2f:56:
         44:15:0d:86:02:92:67:6a:e6:cf:2b:0e:a4:ae:1d:b1:45:e9:
         a5:0d:15:88:39:8b:a2:34:f7:5d:3c:af:e6:8e:15:31:69:a1:
         f6:fc:ed:ca:05:4b:1e:1a:41:da:c7:2a:d8:8b:1b:1a:36:c8:
         bb:d0:a6:9f:1e:74:6a:b3:a3:56:74:6e:fe:63:ce:59:5c:3c:
         5f:1a:37:19:ec:47:02:db:fa:ef:e0:70:03:43:fa:40:fe:e1:
         d2:e1:7f:ef:12:1c:dd:5a:b2:96:7d:12:45:77:f8:33:6c:c3:
         12:c4:c6:65:f0:bd:77:a9:fa:7f:3e:22:11:d3:fc:ac:aa:b4:
         39:a1:f7:38:82:a8:3e:a9:0e:5a:31:9b:65:57:c7:5b:bc:42:
         7a:49:1e:47:5a:a7:22:94:0e:20:9f:01:72:3f:98:6d:56:4e:
         3b:f5:08:f8:21:0a:90:21:4a:33:cd:2a:6e:bb:ae:10:ea:3a:
         13:2b:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:55 2025 by rpki-client