Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          612zMLGTDBckhmHxRPMSfn+vUIFl3oogF4BCVb6crZU=
Subject key identifier:   8F:6E:AD:71:9D:2A:C4:74:63:67:5D:66:BB:5B:D4:28:65:13:6B:1C
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       0197CF4DC352AF72972D4E2AA931A9633476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          1555
Signing time:             Thu 03 Jul 2025 08:01:09 +0000
Manifest this update:     Thu 03 Jul 2025 08:01:09 +0000
Manifest next update:     Fri 04 Jul 2025 08:01:09 +0000
Files and hashes:         1: BUuoPdUgpRssN_8s1xD5RE2knSk.roa (hash: i3w2fhY/oY9rEDtPXwfXHRtgj9nEgJpg1E4G0VvBSNE=)
                          2: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: wkiiguZ/EDxQchL9WoWThR7JetJ07rj3FMxLTGvHaLU=)
                          3: hI-d9_-nLNRhqznA_vGtUzzzpi4.roa (hash: 1ticuQGef+AQNaEeVWAc8kEXscPJuukVCdQXQ58jy44=)
                          4: yp6VXJ9ttEuEqrWfh1dI64LQkQ8.roa (hash: Mr06/vk6uaXb+ILhJfXZxgC4nSBWLm8yARcjAKzBYPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cf:4d:c3:52:af:72:97:2d:4e:2a:a9:31:a9:63:34:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Jul  3 08:01:09 2025 GMT
            Not After : Jul  4 08:01:09 2025 GMT
        Subject: CN=8f6ead719d2ac47463675d66bb5bd42865136b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:c4:d1:61:fb:7d:44:0c:89:98:ae:e3:66:
                    92:c5:6c:84:e3:3c:90:b9:42:af:05:4b:17:8c:de:
                    ad:7c:92:c7:22:24:a0:de:f7:57:38:b4:ba:ea:c1:
                    a6:11:7e:09:1e:d4:e3:2f:6c:73:2e:f0:34:d7:78:
                    a7:f4:d2:65:4f:2d:de:5b:b4:01:7b:8d:5d:17:4a:
                    f8:2c:2e:20:64:8c:7b:1c:26:37:ae:94:9b:e1:77:
                    c2:04:22:66:6e:08:fb:d0:06:4b:78:9c:d0:89:fd:
                    4c:0c:0b:c4:8c:8f:d0:50:39:14:19:c3:f4:92:70:
                    6f:b0:64:65:6f:ea:8c:72:01:53:3a:18:7a:cf:e8:
                    df:e9:c7:1d:d5:0d:50:82:ca:3d:09:cf:d4:c5:40:
                    74:3a:bf:56:20:80:bd:7a:b0:1a:8a:e5:b7:ef:a9:
                    2b:94:5b:36:c3:a4:f5:c1:ed:6b:63:f4:92:22:ac:
                    46:12:f9:59:61:36:8a:79:1e:2b:74:6e:8e:28:4b:
                    11:3e:fa:d3:0f:58:fd:f1:ec:66:25:18:d8:ce:25:
                    6b:cd:94:78:5f:1c:32:ce:8a:f8:96:d4:30:c8:6c:
                    9a:98:c0:34:28:77:c2:8c:37:fd:c0:b8:04:22:12:
                    8d:5e:ab:33:f8:ef:ab:98:4b:e1:37:d3:40:ca:f8:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6E:AD:71:9D:2A:C4:74:63:67:5D:66:BB:5B:D4:28:65:13:6B:1C
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fe:49:f3:5c:b8:65:19:20:46:b1:05:5b:53:56:00:a0:e5:
         88:78:00:76:e1:57:36:61:8e:f3:7f:99:ae:54:63:fd:3f:22:
         61:c5:1a:6a:23:54:ba:22:3f:6b:c9:c6:de:b3:6b:59:ee:85:
         5f:02:e2:7d:bb:5e:a7:81:b9:5d:05:70:e7:7e:4d:f1:f2:80:
         3c:49:48:48:b0:50:fe:eb:89:ee:26:62:1e:e8:02:da:b3:78:
         f0:e9:e1:b4:b7:c4:2d:4b:df:ae:1d:20:8b:d8:71:fd:6d:25:
         67:8c:a5:be:e4:72:57:20:a8:4a:40:1e:e8:ff:54:e3:fa:90:
         57:0a:92:48:a1:d1:40:1a:c5:17:3e:6b:97:b1:db:de:94:1e:
         df:ba:54:10:7b:71:f7:ff:72:14:b4:ae:54:fb:d6:e8:a8:72:
         50:a6:0b:20:b2:49:12:cf:5c:b1:6c:27:e2:6a:93:53:71:34:
         53:50:68:ea:32:88:f5:a9:cc:4d:2f:42:92:9e:28:83:c2:51:
         95:58:6c:da:fa:73:7e:a7:4b:16:8e:81:70:ac:f7:c8:4d:ac:
         41:98:4f:81:ad:d1:85:31:6a:44:2b:fd:be:d7:f8:2f:cb:b6:
         94:1b:4a:0a:23:5a:1e:d6:2e:e1:27:26:c7:8a:37:c5:5d:2e:
         15:af:25:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:33:31 2025 by rpki-client