Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          16G/1ISzBHittjiJTgu6nCgYmzt97k7ZFoXuJX5U/kE=
Subject key identifier:   CA:AB:46:49:53:2A:E5:2B:76:4A:F1:3D:17:54:EA:0A:7A:93:BF:88
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       0198D51578252D210BBC0D6192577BEBB127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 04:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:10 +0000
Files and hashes:         1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
                          2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: t6DhivjP0O9sAyxAJLybxYm/fQhbsBTupNRMEz4Ehu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:78:25:2d:21:0b:bc:0d:61:92:57:7b:eb:b1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: Aug 23 04:00:10 2025 GMT
            Not After : Aug 24 04:00:10 2025 GMT
        Subject: CN=caab4649532ae52b764af13d1754ea0a7a93bf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:e2:6c:bc:38:81:92:f1:3a:36:d9:93:17:
                    5f:8f:1a:d2:8d:ea:5a:a8:08:62:8d:47:2f:36:21:
                    e5:5e:e9:fa:a6:e7:56:ec:c4:0c:06:02:30:06:83:
                    6e:1a:39:2b:97:ea:05:4e:ea:c8:d8:27:90:87:f3:
                    83:e7:2e:11:57:89:e7:ad:d6:72:ab:ff:f2:10:93:
                    3c:2f:5d:41:f9:95:ef:75:66:c7:57:4e:08:97:c1:
                    85:45:d1:47:c0:61:06:e9:13:44:97:16:c0:9d:bd:
                    17:51:0c:ce:b3:98:45:08:05:e4:2f:8a:1c:8d:9c:
                    3b:56:18:c4:40:87:51:00:5d:ac:12:26:be:76:dc:
                    7d:58:31:3d:8a:d1:83:bc:01:85:bd:0a:21:32:fe:
                    da:99:da:ed:83:52:e5:f9:74:d0:28:28:5d:0b:19:
                    93:79:9a:5c:ae:56:d9:6b:fb:54:08:1d:bf:65:42:
                    a2:b4:ca:84:82:47:b1:1f:14:f1:63:1b:a6:02:78:
                    74:d6:e6:28:7a:b9:01:55:b0:84:ac:92:3d:12:49:
                    22:aa:1f:41:79:0b:a6:ef:d0:a7:ee:be:1f:c1:61:
                    9d:90:2e:4a:23:27:c6:9f:7b:74:68:37:e7:2e:9d:
                    e0:35:85:a3:3c:99:75:a9:e8:b1:1d:1d:84:d8:c4:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AB:46:49:53:2A:E5:2B:76:4A:F1:3D:17:54:EA:0A:7A:93:BF:88
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2a:a5:42:51:be:4b:cd:6c:bc:a4:2e:79:82:a4:55:31:7a:
         34:64:f9:78:4c:04:16:3a:e2:32:48:38:93:28:a3:83:0f:61:
         00:11:a5:64:ea:a1:b0:4b:a5:86:e6:10:2d:f4:6f:2f:4e:77:
         bc:8b:ce:d1:f7:7f:11:08:bd:a8:f9:df:09:25:b6:44:21:a0:
         43:c1:3c:55:62:e5:3f:9f:b1:94:95:82:13:28:91:ec:76:2d:
         c2:d3:88:d2:13:ee:c7:79:f8:2d:31:06:8d:37:7b:2a:7f:0d:
         2d:d1:4c:ab:06:38:36:8d:a0:76:e3:bb:5e:f8:64:2f:6d:63:
         d3:c2:6a:27:40:c8:0f:60:76:c1:74:d9:d6:77:2b:36:ee:86:
         37:3c:3e:38:15:d2:23:9d:cb:2c:57:63:91:3e:91:39:13:23:
         c7:d9:73:96:81:62:3a:95:4c:a8:48:aa:cc:76:49:dd:f7:92:
         c6:b6:45:40:1e:05:6b:63:68:69:09:ee:96:46:51:17:63:66:
         f3:85:2b:c2:08:e6:02:a7:69:b7:93:83:e1:75:8c:5e:07:f8:
         49:82:5b:d2:6f:32:0b:ab:e7:10:68:ab:7e:96:fb:ec:b0:3c:
         70:70:f7:82:0d:22:b1:6b:44:63:a9:2d:60:4b:ce:77:c6:16:
         bd:81:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:35 2025 by rpki-client