Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
File:                     H_Umh1LLtSS8_ktaSXb_D4XTia8.mft (raw, json)
Hash identifier:          CR4Ya39/x0kCnR+5KP0mZCY3re4YC2ZDxjgBuTHEQi8=
Subject key identifier:   E3:07:F2:A3:85:9D:9B:49:14:64:FF:66:64:71:9D:67:AC:2C:C3:17
Authority key identifier: 1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Certificate issuer:       /CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Certificate serial:       0198D66076C2525C6BF5F570031DA71136B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
Manifest number:          0A38
Signing time:             Sat 23 Aug 2025 10:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:42 +0000
Files and hashes:         1: 9pQi_NMMFUj3irIeg0-DmdkDCbk.roa (hash: PFd36o1XR8n7Qanm5GG5TpwQ2+VBH8Rn7+qS0Um/8ws=)
                          2: H_Umh1LLtSS8_ktaSXb_D4XTia8.crl (hash: 8Y7c5Q5CUOho1HI6w2fDRYcHppNQxpffgwBZT28PzFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:76:c2:52:5c:6b:f5:f5:70:03:1d:a7:11:36:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
        Validity
            Not Before: Aug 23 10:01:42 2025 GMT
            Not After : Aug 24 10:01:42 2025 GMT
        Subject: CN=e307f2a3859d9b491464ff6664719d67ac2cc317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:c6:ba:f9:57:37:2c:10:93:b9:a5:3b:0f:
                    5a:b1:12:ac:7a:28:06:d6:3b:ac:0e:96:91:2c:30:
                    64:19:f2:80:ce:a5:c9:2a:b6:31:af:fa:04:86:f8:
                    f5:44:46:82:53:2d:c9:d9:e1:e8:f2:f1:65:82:b6:
                    be:b9:06:6e:b9:2e:70:98:66:21:99:6a:ff:5d:b9:
                    ff:ec:c0:2e:60:3b:89:60:c4:b1:13:bf:ed:fd:78:
                    2e:52:e2:bf:10:b3:75:46:6c:45:76:13:0c:26:02:
                    34:25:61:e3:35:00:03:66:12:df:3c:bb:85:b1:15:
                    1e:5e:bd:3d:61:a8:0a:b0:bd:3a:10:1c:5f:99:2b:
                    b2:44:c6:f9:6a:3b:40:a4:9a:c8:dd:d7:12:99:4a:
                    e4:ee:43:28:eb:cb:56:ce:98:12:12:93:ce:3e:fa:
                    42:b3:c6:02:00:fd:74:9c:0b:96:b3:64:83:9d:67:
                    cd:51:5d:52:26:2e:93:ff:26:68:f5:e2:52:fc:43:
                    f4:87:c8:45:9e:9b:40:12:54:ae:c9:b0:c4:32:2d:
                    3c:3e:a1:00:f2:e3:9a:59:17:45:27:93:96:1d:61:
                    ed:56:93:cd:b2:4d:3d:a7:63:30:6a:96:51:65:42:
                    6f:e4:82:d8:6d:13:c2:8f:76:4e:af:8e:f8:fa:cb:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:07:F2:A3:85:9D:9B:49:14:64:FF:66:64:71:9D:67:AC:2C:C3:17
            X509v3 Authority Key Identifier:
                keyid:1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:83:86:1b:7d:4c:36:30:e7:d2:f7:5c:9c:ba:86:e5:ce:
         32:b0:97:60:ea:e4:24:02:8e:e7:87:49:b9:bc:98:87:51:08:
         bc:28:ea:1a:b9:85:22:e0:fa:a5:68:b4:27:ae:86:49:95:08:
         13:d1:ad:17:f6:0f:0a:3e:62:79:33:c4:53:6f:d3:8b:8a:f3:
         5f:e7:f3:72:11:de:cb:86:c4:dc:35:c4:b5:6b:cd:40:61:50:
         1f:3a:7f:36:8f:6e:ba:bb:73:7b:a6:af:5a:cf:46:9e:01:19:
         71:2e:81:d8:a6:cc:d4:0e:74:8e:a1:91:66:07:e1:59:3a:76:
         99:05:b0:55:e9:88:0d:56:b7:22:41:06:15:40:24:fb:4e:0e:
         52:9d:7a:e4:08:0e:b2:0e:8c:9f:41:a0:30:a7:5a:e9:30:52:
         48:6f:e5:18:b2:c2:9d:f4:86:7b:fb:42:4d:30:e5:22:77:55:
         a4:a1:af:d7:86:24:61:2f:18:6f:6c:5e:49:7c:7f:d2:59:80:
         6a:29:48:f8:7d:cf:94:64:b8:b5:85:8b:f5:f3:90:06:79:fd:
         b9:1d:1b:f7:03:63:7d:c0:d4:1d:f7:96:f3:cc:24:50:8f:91:
         6d:33:7c:72:31:39:77:49:0e:40:f7:23:c3:ae:47:9c:29:f5:
         de:bb:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:22 2025 by rpki-client