Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
File:                     H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json)
Hash identifier:          0ss2oNvk4L/TFyTAVmRn2gxogtyRHtvNnBl5AYR9Mvs=
Subject key identifier:   8F:9E:9A:CD:C8:30:B8:29:45:5F:53:C2:54:34:79:78:E0:6F:EF:0B
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Certificate issuer:       /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial:       0198D5BBAAD8F7CB3247B0AB038895551EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
Manifest number:          1494
Signing time:             Sat 23 Aug 2025 07:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:42 +0000
Files and hashes:         1: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: Ok/rHnzryS5+8dbgy8nANKU0HnmB+mN5iKVo8so/Wpw=)
                          2: z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa (hash: qAv01E+pevkkYz421oysRUur++ptzgLO7RhPrCkAgu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:aa:d8:f7:cb:32:47:b0:ab:03:88:95:55:1e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
        Validity
            Not Before: Aug 23 07:01:42 2025 GMT
            Not After : Aug 24 07:01:42 2025 GMT
        Subject: CN=8f9e9acdc830b829455f53c254347978e06fef0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:6f:ed:7b:8b:c6:b7:71:20:db:b6:05:db:
                    4c:4a:a0:3f:c5:1a:c8:cd:d9:36:f8:a0:f4:aa:0d:
                    de:a9:f7:53:b3:19:80:ed:fe:ab:16:5f:70:6b:ca:
                    96:30:73:40:9a:78:37:b6:b2:e9:e1:72:6e:c1:3f:
                    c7:7a:68:99:de:7f:19:d4:fc:b4:f7:49:31:ba:19:
                    6b:39:35:51:a6:9f:7d:ed:74:fb:97:c5:e3:50:17:
                    e7:44:d2:11:d7:0d:ad:13:cb:e4:b7:3b:92:9b:f1:
                    d9:ee:e5:da:9b:8b:30:1d:11:c9:9c:65:4b:95:1f:
                    c1:b1:81:36:44:81:1d:17:40:c2:c5:4c:62:74:b6:
                    00:96:94:ff:b5:3f:4b:56:03:eb:5a:19:e2:8b:0c:
                    ea:62:c0:9b:81:2a:b7:32:a2:f9:a4:57:ba:a7:cf:
                    07:66:43:21:97:22:30:f0:c0:ad:ba:0b:b1:b8:66:
                    a5:c2:1d:8a:7e:ff:63:99:b7:f0:3b:c8:c3:a8:bc:
                    88:c2:eb:5e:9a:95:df:5e:12:d2:43:c2:62:45:8a:
                    f5:c2:f9:8b:9b:52:a8:c8:51:bd:bb:02:22:fd:e5:
                    c3:7c:9b:07:ac:02:f3:bc:3c:1b:83:49:63:75:82:
                    9d:28:eb:96:ef:d3:8c:4c:49:c2:5f:22:3f:a5:3f:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9E:9A:CD:C8:30:B8:29:45:5F:53:C2:54:34:79:78:E0:6F:EF:0B
            X509v3 Authority Key Identifier:
                keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:7a:52:36:60:dc:7f:ef:ae:22:04:fc:d6:fc:73:3a:5f:
         8f:cc:16:c1:7a:ff:a6:9a:00:9b:78:00:aa:6b:6e:5b:6c:cd:
         5b:16:8c:fe:03:2d:67:95:34:65:03:82:c5:7a:2d:5b:65:e7:
         bc:e0:8a:c6:bf:63:e9:41:7f:6b:56:14:b4:6d:37:bc:d9:20:
         a1:4b:92:2b:03:4a:16:e5:9e:11:49:cf:7c:0b:ae:82:c2:bf:
         df:5f:68:04:09:e7:dc:9d:68:db:bb:2d:82:32:dc:c8:7c:a9:
         56:b4:6d:25:5d:7c:85:a7:c9:18:21:ce:8a:3f:72:e7:8c:95:
         4d:14:34:c8:41:98:c8:08:27:ac:04:ca:0f:ec:83:47:fc:19:
         49:54:62:ae:95:23:78:1d:de:80:b3:bb:c9:72:df:b7:2d:b8:
         6f:b6:7d:88:dc:e8:86:49:09:4a:8c:2d:d2:fe:83:86:0e:cf:
         f4:e9:83:c5:06:85:0a:4b:93:c8:9c:20:2a:15:67:92:13:fc:
         aa:01:b3:e6:54:d9:1b:70:40:75:95:62:e7:64:6c:5f:14:f9:
         af:c0:28:87:82:41:b6:c7:86:79:4f:60:a5:15:00:a2:63:c2:
         ad:f5:3c:e1:e3:68:83:55:b2:63:4e:a1:b2:ba:1f:ec:d5:45:
         38:53:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:04 2025 by rpki-client