Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File:                     Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier:          NSib7OUAA86cwaj4HfdlEWIH5Ztm10eJ849eu1fqzTA=
Subject key identifier:   6A:6A:18:6B:6F:1A:D8:86:D6:B4:99:0B:D7:92:04:2A:0A:A6:1E:08
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer:       /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial:       0198D5BC2A1A7A91947235766DD92C7A576A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number:          0E93
Signing time:             Sat 23 Aug 2025 07:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:15 +0000
Files and hashes:         1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
                          2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: Iqn9XFxZ5/W7nik8S3jkdfC1kjtnGPsR1wtdoIlG00Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:2a:1a:7a:91:94:72:35:76:6d:d9:2c:7a:57:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
        Validity
            Not Before: Aug 23 07:02:15 2025 GMT
            Not After : Aug 24 07:02:15 2025 GMT
        Subject: CN=6a6a186b6f1ad886d6b4990bd792042a0aa61e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:5b:bd:24:dc:52:0b:ba:51:49:55:16:3b:
                    9b:d9:e4:79:eb:a1:57:74:eb:b0:e6:a4:10:26:43:
                    8b:f1:ac:09:5a:76:45:af:b3:4d:dd:b9:d9:fc:f1:
                    a6:be:79:6c:ff:69:ca:89:43:f8:7c:57:f2:9f:e4:
                    0a:27:4f:3d:bd:53:2e:00:57:58:71:50:29:67:e6:
                    fb:fd:69:cb:63:17:dc:2c:76:e1:4f:63:fe:09:bf:
                    6c:65:ee:a6:f0:33:af:94:b0:36:31:53:da:54:2f:
                    1d:16:39:43:26:8b:3b:76:40:66:be:45:2c:23:2d:
                    4b:15:e8:7a:4e:79:6f:d7:de:60:52:26:23:c4:59:
                    ed:10:41:ba:66:8c:4d:2e:89:01:00:92:14:9f:00:
                    26:da:47:fb:62:f3:9b:2d:e6:70:05:43:c8:34:72:
                    49:a8:77:95:bd:ad:d3:05:bb:a7:77:05:30:2c:d7:
                    36:e6:72:f4:c3:81:1e:53:16:f6:d2:7e:5f:da:10:
                    2c:1a:d9:6f:26:ff:ae:95:22:ef:ef:8a:d7:29:2d:
                    d5:11:0b:1a:ca:43:18:fb:fc:65:b9:d1:79:1b:12:
                    ac:45:48:f8:f5:ca:87:53:f5:ac:b6:e1:b0:25:e4:
                    bf:e3:11:8a:44:77:3a:07:48:3e:08:43:7f:05:4e:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6A:18:6B:6F:1A:D8:86:D6:B4:99:0B:D7:92:04:2A:0A:A6:1E:08
            X509v3 Authority Key Identifier:
                keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:60:3b:13:d8:cc:60:89:7f:d9:8e:00:20:f7:62:f3:28:36:
         de:fe:00:f1:3b:c2:db:b4:9c:60:66:31:d0:73:c8:f3:9a:8f:
         8a:98:7f:ff:6c:c8:33:9f:d4:71:c9:ea:08:02:55:63:12:1a:
         25:fa:a3:e3:4e:8d:49:a6:60:5b:b4:73:f1:94:b1:b7:4d:20:
         1e:f7:ce:e3:54:e7:1b:3f:a8:8b:80:fa:b8:1b:31:4f:cb:77:
         25:cb:d2:98:6a:dd:f9:28:a4:d8:d5:68:91:fb:7b:c1:90:b1:
         6c:b9:be:3d:cd:ca:58:12:65:7c:cb:53:d2:b4:46:49:3a:71:
         25:0a:86:ea:d1:6e:71:87:1a:98:47:c7:3e:a2:8e:22:d6:df:
         86:a4:3d:c3:13:49:5e:ed:27:bd:85:a8:ba:93:82:4c:4c:59:
         57:b5:ff:33:8c:25:d9:ad:d9:04:95:10:78:6d:17:aa:2c:13:
         b6:96:c2:e0:5c:ea:91:fd:fa:44:10:53:73:b0:5c:8b:ef:91:
         75:eb:9f:3b:bd:30:1c:75:86:22:50:83:bb:19:49:15:5e:5a:
         fc:c6:77:72:46:a4:43:cf:cc:c3:57:51:1c:cc:21:62:f4:94:
         fb:db:10:c4:92:4d:91:cf:5d:6b:82:42:9b:ac:16:c7:e1:2d:
         e1:61:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:15 2025 by rpki-client