Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          6SU0buxKwFzBJpiJJzPEE56vOp964dr6JX9qkV9ZndM=
Subject key identifier:   3A:3B:72:3A:50:1B:A8:7A:CF:66:68:EF:F4:23:67:D1:9E:66:4F:AF
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       0198D5F19C790B48948671D1133B1906A05A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          15DD
Signing time:             Sat 23 Aug 2025 08:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:37 +0000
Files and hashes:         1: BUuoPdUgpRssN_8s1xD5RE2knSk.roa (hash: i3w2fhY/oY9rEDtPXwfXHRtgj9nEgJpg1E4G0VvBSNE=)
                          2: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: sBeFJOI6u6Fa0/ZrzlWQ6dYNgTKmxQRL/dalbqVzYFs=)
                          3: hI-d9_-nLNRhqznA_vGtUzzzpi4.roa (hash: 1ticuQGef+AQNaEeVWAc8kEXscPJuukVCdQXQ58jy44=)
                          4: yp6VXJ9ttEuEqrWfh1dI64LQkQ8.roa (hash: Mr06/vk6uaXb+ILhJfXZxgC4nSBWLm8yARcjAKzBYPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:9c:79:0b:48:94:86:71:d1:13:3b:19:06:a0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Aug 23 08:00:37 2025 GMT
            Not After : Aug 24 08:00:37 2025 GMT
        Subject: CN=3a3b723a501ba87acf6668eff42367d19e664faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:94:34:e6:43:ad:65:45:55:fa:07:7c:ed:
                    f2:76:85:d7:9c:7f:fb:98:7f:27:2f:58:0e:30:e9:
                    28:f5:1e:31:2f:49:4b:7c:93:66:b3:34:0d:56:49:
                    07:a7:29:2d:cf:f4:f4:45:51:b2:5f:19:9e:27:01:
                    5a:76:d6:2b:91:12:6d:e3:1e:11:62:7b:8e:f6:11:
                    77:11:d5:62:df:c0:4f:5a:52:b3:2f:58:0b:24:88:
                    bc:41:7a:91:60:d6:a2:e7:9b:81:a3:cf:d0:9d:95:
                    be:17:bf:8d:e4:bb:24:da:6b:fd:1e:b2:5b:80:40:
                    5c:dd:b4:a2:d4:53:e9:00:87:15:c4:6a:de:fb:cd:
                    06:e4:8c:ef:52:b3:0b:f3:ef:47:5e:34:d5:7b:c1:
                    c2:b8:98:93:1b:b9:3d:02:4b:8e:6b:45:ee:ce:d3:
                    89:5d:e4:cb:cb:9f:62:41:39:c4:9d:ec:86:0c:3b:
                    96:03:e4:71:12:2d:2f:ad:ec:9c:78:2b:e0:06:f6:
                    64:20:45:e3:5e:3c:32:5f:14:cd:2a:74:67:8e:28:
                    11:59:51:34:26:ed:fc:72:c2:aa:7e:7d:d0:ac:33:
                    5d:52:13:a3:c1:5b:45:a9:de:7e:e7:58:e8:c2:9e:
                    41:98:27:f7:cb:37:26:41:f1:b2:55:21:ca:c8:be:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3B:72:3A:50:1B:A8:7A:CF:66:68:EF:F4:23:67:D1:9E:66:4F:AF
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d2:a9:41:bb:1c:b7:a0:b0:8b:c1:16:4b:d5:52:d1:38:4a:
         72:7e:57:b4:18:3a:c0:f3:90:e0:7b:e9:e6:88:bf:6a:95:90:
         ee:6e:10:8c:e1:25:00:0a:04:60:a4:ea:59:f1:36:74:89:99:
         5a:00:63:e1:05:a1:e9:f6:9e:c1:d4:dd:94:77:6c:75:f5:00:
         3b:63:9e:5b:55:c7:06:b8:53:52:9b:fa:30:52:b4:02:71:01:
         47:a0:0d:12:31:91:18:94:3c:74:c1:a7:c8:1e:d8:1b:25:bd:
         03:f3:0a:a8:0b:97:4e:cb:bd:45:23:fa:8d:49:cf:02:e9:3f:
         c6:a8:c5:ee:ee:1e:fe:e4:c8:7f:72:31:af:38:b6:03:83:78:
         1e:a9:13:f4:6d:6d:1e:b6:58:22:1a:00:94:31:19:30:01:a3:
         53:3d:6d:3f:68:53:97:b2:cb:7a:11:d5:f2:e0:74:5b:cc:18:
         f2:6f:00:53:a6:6a:92:94:67:ab:ac:a8:d8:07:90:95:ae:e6:
         b3:9f:b1:ed:be:00:3b:0c:72:39:75:fc:09:19:8d:e5:4c:83:
         ba:cb:fc:d5:32:a0:9f:85:9b:76:6f:4a:12:09:bf:bf:80:b3:
         b2:20:ed:28:40:22:27:c8:05:01:10:9d:2d:4b:1f:71:b8:a8:
         1d:52:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:34 2025 by rpki-client