Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          1vLUnQi6IpWzHjL/GsBZ6HfoN/3IsGV3A7/9cbf/Olk=
Subject key identifier:   B9:4B:37:B2:9C:D4:03:28:88:67:F8:A6:E3:9C:E4:53:E7:AD:EB:28
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       0198D7062727D43D1FA405B66EEE04CCE6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          1378
Signing time:             Sat 23 Aug 2025 13:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:41 +0000
Files and hashes:         1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=)
                          2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: 1Q6rTw7/cQvmVXs5RyzIsjZ+ryivS73ZFgYI6G0Z+2c=)
                          3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=)
                          4: HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa (hash: h65bix0jyABriVc1PTgNi/FxADysyPwwSZa1akkv7og=)
                          5: u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa (hash: rQgLckSzeaLo6eafpSN7kpYx8Hw/jY/LMChw/HsMXX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:27:27:d4:3d:1f:a4:05:b6:6e:ee:04:cc:e6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Aug 23 13:02:41 2025 GMT
            Not After : Aug 24 13:02:41 2025 GMT
        Subject: CN=b94b37b29cd403288867f8a6e39ce453e7adeb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:95:f8:ad:8f:b7:30:7a:11:cd:d1:74:aa:
                    45:47:e3:99:bd:8c:24:29:1e:c2:6e:e9:46:99:73:
                    2b:fa:e5:55:53:bf:db:52:f2:01:b5:b6:fe:68:de:
                    93:d7:14:46:10:95:38:67:a5:c1:2a:36:5a:6d:db:
                    21:e7:65:d4:c6:4b:8f:11:54:b3:f7:63:8b:5a:fe:
                    94:df:9a:9b:ba:31:e8:69:31:4e:b6:df:df:f0:f0:
                    56:56:42:e0:b5:24:4f:b4:7d:94:f4:65:c7:b0:e2:
                    2a:a1:bb:43:c3:27:9b:58:c5:9b:3b:12:bf:cd:8e:
                    9d:09:ae:1c:30:dc:d6:00:c4:69:89:33:0a:f5:fa:
                    46:b8:29:40:2d:23:28:99:4b:03:f9:4a:a3:3f:02:
                    db:b8:ef:22:39:31:8c:5e:28:29:4c:fa:ff:20:93:
                    84:ba:f8:c5:43:9b:2f:c0:68:60:48:b9:42:29:57:
                    c1:74:0f:e7:da:a2:41:75:bc:55:0d:1a:7a:b9:5c:
                    c6:9a:b6:f4:65:b5:ad:15:38:80:c1:d0:0c:fa:b4:
                    3f:fa:f2:60:cd:bc:1f:13:ec:3a:88:5b:08:3c:34:
                    85:fb:e7:4d:28:9c:b3:0a:bc:32:29:eb:e0:f5:ab:
                    a7:14:f1:e4:75:45:ce:81:5f:5c:31:3f:f5:3e:63:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:37:B2:9C:D4:03:28:88:67:F8:A6:E3:9C:E4:53:E7:AD:EB:28
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:83:b6:42:56:f0:1e:04:51:2b:82:2d:59:81:aa:80:08:
         5a:6c:d0:b1:99:df:e6:79:1e:24:18:dc:4a:0d:90:0d:bc:21:
         c8:b2:bc:d8:90:e9:91:fd:a8:9e:42:bc:ef:ed:e5:4b:05:b9:
         95:a4:29:21:ac:fa:9e:6e:28:ef:96:a3:b7:36:8e:58:53:54:
         a1:25:df:73:51:4d:9c:44:9b:19:3b:ba:97:6b:2d:2c:9a:25:
         95:18:9d:d4:8a:fb:7b:e8:75:fb:ff:9a:5d:54:cb:df:6a:b1:
         00:d4:c9:b4:d0:d0:d3:fa:b9:d8:73:83:06:bd:66:99:d6:de:
         4e:dc:e0:0a:76:4f:0a:70:c7:df:f3:da:ed:a4:b1:9c:08:81:
         af:19:e0:2d:6b:36:56:e4:00:c4:1b:98:ce:dd:11:d6:4e:a7:
         c6:40:ed:0f:05:08:f6:c8:a2:6b:d4:6e:07:90:21:69:66:27:
         49:59:98:b4:b8:3e:20:8e:54:58:71:d7:04:4d:8b:57:81:52:
         fd:fd:96:23:c4:21:06:72:d1:eb:e9:3f:fe:e4:9a:26:a0:c4:
         b0:b3:9c:c9:c1:25:c5:88:6d:9f:6a:5f:f9:27:51:a8:9b:84:
         1f:2d:06:8a:77:79:fc:30:92:62:42:04:8b:f4:29:52:e6:49:
         46:d8:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:47 2025 by rpki-client