Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File:                     pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier:          T4lX9jZKDupkmgNWWAN7nvj5SM7wUz3DYOLwMJNcpBY=
Subject key identifier:   F1:A1:D7:35:49:E4:37:73:B4:AE:7A:5A:C3:60:D4:49:13:90:95:62
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer:       /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial:       0198D583D856C888941A1C9B0CAA8B34C0FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number:          1501
Signing time:             Sat 23 Aug 2025 06:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:44 +0000
Files and hashes:         1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
                          2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: zTFDDecWd8SszdrcmqCmYVrGGXAtiBYVCWsx8iYMgp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d8:56:c8:88:94:1a:1c:9b:0c:aa:8b:34:c0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
        Validity
            Not Before: Aug 23 06:00:44 2025 GMT
            Not After : Aug 24 06:00:44 2025 GMT
        Subject: CN=f1a1d73549e43773b4ae7a5ac360d44913909562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:fe:be:b1:ac:16:6e:96:ce:81:a1:11:cf:
                    7b:10:e5:4a:17:89:38:12:93:0e:e8:89:f2:cc:bb:
                    3c:d4:57:7f:96:ea:a1:77:d1:f5:59:9e:42:bf:75:
                    cc:92:97:0e:6c:19:11:16:bf:c3:a6:84:96:b8:b3:
                    d9:fe:12:72:7a:08:70:d2:89:47:37:a5:86:a2:af:
                    3d:b4:9e:65:18:e6:b0:d8:52:9a:89:8d:64:79:fb:
                    ec:05:7c:ef:3c:4a:21:b0:f2:36:9c:26:2d:cc:d7:
                    07:23:c4:28:95:2e:17:00:42:f3:16:52:25:14:d8:
                    c9:33:89:a5:b5:ca:68:18:52:c3:7f:c0:10:19:bc:
                    d7:72:40:b3:de:46:78:5d:1a:66:3c:92:ec:5a:cd:
                    d7:da:23:f0:87:20:7b:d5:75:a9:90:e1:61:e3:13:
                    94:da:ea:e5:67:62:57:7f:ef:f5:f5:b5:91:d9:3e:
                    5a:21:4c:de:49:3f:a1:0e:76:b1:79:b0:7a:b5:98:
                    96:70:5e:62:d8:5e:39:f5:ea:5a:31:00:54:fb:f8:
                    e7:b9:d1:4d:43:c1:7d:f9:ad:d4:a2:55:d2:de:ee:
                    9d:38:7d:a3:e3:29:4c:c5:32:42:60:b1:31:7c:e7:
                    6c:48:72:33:a5:62:54:06:24:dd:c6:ed:f2:8a:a4:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A1:D7:35:49:E4:37:73:B4:AE:7A:5A:C3:60:D4:49:13:90:95:62
            X509v3 Authority Key Identifier:
                keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:e2:7f:f2:02:a6:73:fc:c5:62:17:12:a8:cd:1e:43:8d:
         e6:ff:30:65:5a:4c:d5:bc:1b:6d:be:27:55:2a:c8:e2:ef:c5:
         76:42:92:38:1b:49:21:f4:33:b3:a6:54:ca:83:50:8c:93:c7:
         c0:cb:f5:b5:0b:99:bf:f0:d2:9b:6d:eb:50:d1:84:1d:33:af:
         ae:17:c4:b7:5f:7f:5d:60:78:d3:75:5b:ac:e0:73:1c:5d:59:
         02:21:f2:5d:9d:95:c4:15:35:47:c9:07:79:07:c0:c8:84:e5:
         d8:03:2b:b7:19:90:c1:99:d9:ae:02:37:0b:73:67:f4:cd:a9:
         d2:fc:4f:b3:6b:6b:54:b9:b7:d1:aa:49:4b:4b:4c:fb:83:31:
         55:99:ec:2f:de:7c:b2:83:f4:fb:82:87:a3:ef:16:b5:6c:8b:
         fc:2e:00:78:30:fb:86:58:9b:a8:c3:6d:e3:20:2d:a3:ae:10:
         a7:18:1d:24:09:5b:dd:72:cb:2b:eb:8e:04:eb:36:38:b6:0a:
         74:09:16:e6:8e:ca:c9:e6:52:42:fb:63:ca:9a:23:0e:96:45:
         8a:f5:86:12:6a:21:b3:6a:9b:8c:f8:0b:1d:99:5e:11:1e:56:
         06:cd:b2:8a:4f:4f:d6:a2:fd:58:75:44:35:d7:bc:9e:30:73:
         8d:09:e1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:17 2025 by rpki-client