Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File:                     hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier:          48iQe6YTZsZrlfRgWg8RIpJQDDs8p+wMQVGrAo91WMQ=
Subject key identifier:   6F:0A:14:3D:75:4D:31:82:56:DA:30:EF:BF:40:64:6C:B7:7F:AA:16
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer:       /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial:       0197B820D3243ECDA86ADC478667F23AB69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number:          0763
Signing time:             Sat 28 Jun 2025 20:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:48 +0000
Files and hashes:         1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
                          2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: 0Jl3A85DkE12GpbA4k1JxLnSE9liIt8At4HMYSTqZfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:d3:24:3e:cd:a8:6a:dc:47:86:67:f2:3a:b6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
        Validity
            Not Before: Jun 28 20:00:48 2025 GMT
            Not After : Jun 29 20:00:48 2025 GMT
        Subject: CN=6f0a143d754d318256da30efbf40646cb77faa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:a4:8c:30:6e:7f:00:01:74:c8:f9:8d:99:
                    e1:4f:62:7e:1f:9c:e6:c9:2a:cc:1e:1c:b6:57:78:
                    ac:92:36:f2:ea:44:8b:fd:c8:9f:60:4c:fe:d6:01:
                    d4:c7:de:d5:b9:34:93:0a:12:c0:1c:1c:fb:ef:db:
                    54:f8:06:81:49:37:c7:9d:45:80:be:30:92:2e:04:
                    53:d5:b3:68:2c:17:73:9a:cb:4b:19:7f:b9:6a:cc:
                    07:3a:fe:c2:af:0a:c1:e3:3d:96:f7:40:3f:a7:a6:
                    60:17:a8:3d:6a:8d:54:95:90:dc:b5:48:e6:ba:4a:
                    44:7b:93:96:95:78:6c:63:4b:88:61:2c:41:4d:ad:
                    38:71:d7:9b:e1:92:f8:cb:39:90:07:9a:9a:5c:d7:
                    fb:ab:5b:95:24:11:22:8e:27:23:a3:de:e0:55:22:
                    75:fa:7b:e8:1a:f0:a0:a2:53:c0:01:ac:fb:75:8f:
                    d3:e2:3c:4e:86:8d:a4:86:bc:18:7b:31:a6:0f:f9:
                    a4:99:27:c3:f0:30:17:6a:2a:00:5c:f3:6d:e6:0f:
                    dd:8b:24:8b:64:8f:98:1f:48:f5:9a:44:be:89:a9:
                    15:d5:b0:7e:1b:36:4b:f5:83:93:9e:a5:f4:c2:47:
                    05:39:ac:56:6d:97:73:97:75:ee:30:f1:b4:8a:81:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:14:3D:75:4D:31:82:56:DA:30:EF:BF:40:64:6C:B7:7F:AA:16
            X509v3 Authority Key Identifier:
                keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:30:8d:3d:cb:50:25:45:6f:d5:18:99:33:13:a4:b0:fe:52:
         7b:96:b4:2c:42:54:fd:90:d3:ff:7d:dd:38:52:3a:cc:81:c1:
         1e:85:7c:82:84:b0:e3:ff:f5:ce:23:d4:1b:fb:c8:1f:d9:c0:
         84:fc:66:af:f4:25:fe:92:15:67:a4:a4:7e:12:33:c6:75:5f:
         92:28:2c:d1:c9:52:8a:66:0f:43:db:a7:66:8e:e6:18:77:95:
         37:11:5c:6d:eb:bb:b0:b1:c3:e0:2e:87:71:d3:64:cd:b5:cd:
         ea:27:30:45:f4:0f:86:32:11:ab:53:82:a9:56:e3:6e:62:6f:
         a3:96:a9:6e:dd:0e:71:92:b4:42:54:a3:df:0e:22:2d:30:52:
         d1:12:1d:45:f9:db:f3:ed:18:1b:de:e4:d9:f7:60:a4:6f:da:
         f1:a8:e9:41:ec:48:9d:5d:41:53:26:f3:a8:20:7a:a5:ff:3b:
         ac:00:72:fd:a0:c8:5e:7c:23:ec:5c:4f:3d:6e:d8:86:24:e7:
         61:d5:bd:e6:45:07:dd:d4:b3:f4:6c:06:03:61:b1:56:dc:df:
         de:4c:32:1b:50:09:fb:d3:8e:56:e5:d5:3b:67:f8:32:5e:8a:
         b1:79:0a:e5:61:32:c3:de:49:b1:58:5e:cf:10:51:12:a0:3a:
         8e:cf:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:22 2025 by rpki-client