Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File:                     ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier:          q+/wNNDjcZ43ycA2Q9arQi+url9sHv5zqgXk1N9//EM=
Subject key identifier:   DE:30:46:16:07:E1:48:7D:09:CD:DA:5F:46:28:84:1B:CE:9D:45:D3
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer:       /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial:       0198D4E09EA8E40D1DD5021347424F52CA4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number:          153C
Signing time:             Sat 23 Aug 2025 03:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:27 +0000
Files and hashes:         1: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (hash: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=)
                          2: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
                          3: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: SRPYCp4a+RE4nV+44CuitK5pmymmM88IouqzsQu3VkU=)
                          4: tAGqHWpkQw0giajHMwWi-gQSCPY.roa (hash: dkPgoKFrLMzVm5FMtr3H3ipENsq7fpzYhSx+TXox0zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:9e:a8:e4:0d:1d:d5:02:13:47:42:4f:52:ca:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
        Validity
            Not Before: Aug 23 03:02:27 2025 GMT
            Not After : Aug 24 03:02:27 2025 GMT
        Subject: CN=de30461607e1487d09cdda5f4628841bce9d45d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:45:4e:f6:54:7e:50:bb:00:8c:b7:b2:2c:
                    6f:6b:9b:83:cd:10:1b:db:81:e6:18:cf:a1:94:bd:
                    95:5e:7c:06:fe:5e:c4:1d:ea:82:1c:d9:97:16:1f:
                    6f:46:46:2b:3b:07:5e:55:d0:d8:05:02:ec:b5:25:
                    40:cb:54:7d:81:8b:bd:d6:51:65:72:67:1b:b9:b8:
                    bd:4c:e3:8a:2c:b1:f4:fd:76:d2:d4:49:1d:2c:e7:
                    86:e0:04:77:be:98:1a:74:69:0c:75:89:ef:46:7f:
                    4f:ce:bf:b7:47:50:8c:04:4b:ab:1c:a3:27:c8:17:
                    92:af:9e:20:b9:1b:dc:8f:3e:88:21:5a:78:3d:f9:
                    1f:36:b1:42:aa:8f:04:ce:7d:9f:10:c3:21:39:32:
                    d2:50:83:cb:bb:d9:ad:d9:31:27:c1:cb:6e:4c:7c:
                    ee:fa:77:64:d3:1f:de:e2:11:b6:cd:97:8c:48:12:
                    f8:0a:8f:e7:90:2c:10:22:80:00:94:f5:26:3a:cf:
                    7e:22:75:7f:4c:48:3a:b3:47:47:56:20:04:48:19:
                    14:55:11:e3:16:f4:17:a1:70:85:c9:75:fa:27:58:
                    43:11:09:d1:52:75:f9:a3:05:64:f8:09:e3:60:c3:
                    2b:ee:26:d2:3a:28:7b:0f:e9:59:5b:2a:28:1b:d1:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:30:46:16:07:E1:48:7D:09:CD:DA:5F:46:28:84:1B:CE:9D:45:D3
            X509v3 Authority Key Identifier:
                keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4d:6f:63:72:98:b7:80:f7:3e:a6:55:f2:64:1d:df:58:74:
         ed:da:28:f3:d3:e3:96:89:08:3a:39:9a:ea:7c:2a:a7:ae:34:
         6e:8c:47:e4:b2:c6:ff:95:76:d7:ec:fa:c6:93:22:f8:45:54:
         dd:ee:7c:71:a4:4d:42:72:a3:c6:20:1c:ac:c1:b9:2f:65:04:
         42:60:31:54:e8:66:5a:0b:92:7c:9f:6f:84:60:63:5e:0d:bb:
         40:6a:7b:7e:1d:ea:40:2a:b3:a6:15:6a:74:60:ac:bf:cc:d0:
         a1:bc:89:c1:f2:2a:af:c0:f4:57:b1:36:b7:60:a4:64:f7:98:
         19:11:97:fb:50:d6:81:5b:02:1e:ba:86:4b:58:29:60:d0:d8:
         bf:26:fe:3e:7c:e4:e6:5f:a7:e9:0a:c5:0a:09:71:35:83:cc:
         9e:6d:11:80:85:c6:a7:51:9b:24:88:75:bc:e2:5c:25:0d:5f:
         e7:8d:30:b7:f2:5a:eb:e6:ca:48:89:a0:35:b1:6f:99:db:d9:
         d7:c9:98:ed:2b:db:d4:a0:6d:b1:95:dc:57:b1:4b:9b:92:1f:
         89:ac:99:f4:0e:1d:f0:5a:0e:c8:82:b3:f7:4b:a2:e2:8b:98:
         dd:17:f3:0c:ee:bf:2b:43:61:e9:5c:4d:c5:1b:90:da:b3:94:
         a9:50:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:23 2025 by rpki-client