Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File:                     HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier:          JnOgfM4F8VFmfWDwXUw5YFetCc6cfcppDoQdEIvfZWQ=
Subject key identifier:   1F:11:51:B8:86:5F:B8:09:39:3D:1F:05:A1:0C:28:E5:91:F4:90:18
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer:       /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial:       0198A23BF3495510D5BEF4B072FAE802903C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number:          162F
Signing time:             Wed 13 Aug 2025 07:01:34 +0000
Manifest this update:     Wed 13 Aug 2025 07:01:34 +0000
Manifest next update:     Thu 14 Aug 2025 07:01:34 +0000
Files and hashes:         1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: THHAfH4DBNho0B5DDJweZ/FraOOSgRNGiou4Wgsr3Co=)
                          2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 Aug 2025 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a2:3b:f3:49:55:10:d5:be:f4:b0:72:fa:e8:02:90:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
        Validity
            Not Before: Aug 13 07:01:34 2025 GMT
            Not After : Aug 14 07:01:34 2025 GMT
        Subject: CN=1f1151b8865fb809393d1f05a10c28e591f49018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:b6:75:17:c1:ef:3e:52:4d:82:b7:61:f5:
                    42:91:1c:68:5f:33:6f:54:27:f2:d5:48:7e:77:d4:
                    61:b1:a8:d1:bf:64:9e:2d:80:54:92:4a:dc:03:b9:
                    a4:df:ed:45:3e:54:0c:af:af:e9:4e:5b:1f:87:48:
                    b3:a5:60:d7:af:9b:5a:ce:fd:56:5e:26:ab:a3:6c:
                    e5:5f:40:19:35:fd:88:7e:6d:23:5a:49:6f:5a:54:
                    4d:65:4b:ee:00:af:37:5d:9f:d0:4f:90:82:64:88:
                    2f:4e:e2:b9:fa:4e:95:43:86:43:f0:a1:27:43:54:
                    34:4b:01:ab:42:c6:87:85:f2:8c:fb:2c:51:cd:ce:
                    48:a6:17:d0:bb:cb:af:27:15:c0:79:64:7d:9a:6b:
                    68:23:6d:2b:45:e2:f8:cb:4d:be:3b:b0:07:71:d4:
                    08:45:7a:34:be:1f:bb:8c:27:96:4e:b7:3d:30:e7:
                    48:fa:4e:0e:87:93:8b:8c:7a:31:53:70:04:44:42:
                    0f:16:a4:de:e0:dd:5c:8b:20:c5:62:50:03:2b:ea:
                    95:a4:ea:11:60:c8:d0:77:2b:c8:60:f8:1b:cb:59:
                    75:b8:32:44:c2:4a:df:45:18:27:21:be:8d:15:3f:
                    c0:b0:42:7c:4d:2b:aa:35:bd:91:cd:d2:36:36:68:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:11:51:B8:86:5F:B8:09:39:3D:1F:05:A1:0C:28:E5:91:F4:90:18
            X509v3 Authority Key Identifier:
                keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bb:45:d9:6e:ba:a9:ae:2a:4e:bd:25:90:1a:d7:60:4b:26:
         f2:2c:84:1e:f2:2e:ae:cd:4a:9d:ef:83:7f:2d:40:b6:b9:14:
         6e:9d:92:09:16:a6:a4:8e:36:db:20:c5:fb:b9:ac:73:c9:b7:
         9b:bb:d0:8c:2d:c4:51:ff:f4:21:22:ce:90:f5:60:9e:26:8e:
         fe:d6:f8:36:b1:ac:b4:cb:94:2a:9a:12:3a:b2:8a:7b:5b:fe:
         0e:5e:e7:77:f3:8e:81:69:85:50:99:df:42:90:86:02:19:b0:
         5d:69:ee:b1:6f:32:3f:0f:97:56:9d:b9:f3:b8:c8:a2:37:c7:
         06:35:d1:e2:70:18:cd:86:7c:81:20:6d:64:dd:4d:e1:94:c5:
         15:63:7f:7b:23:96:d9:5a:3e:c7:07:3f:47:c9:42:24:0d:e5:
         d1:90:8e:f9:ba:3d:e1:91:84:a3:fd:bf:96:b6:ce:be:9b:d4:
         a7:4b:6f:5b:69:7a:a0:d3:a2:00:20:42:12:eb:3f:cf:2c:da:
         b3:f7:84:14:e1:79:7f:7e:47:ea:15:ca:45:da:e3:92:d1:38:
         5f:ec:6a:0d:33:4f:99:75:2f:af:a4:04:20:1e:14:38:b4:ac:
         84:69:7d:e6:af:8f:f6:58:37:38:80:a3:38:e8:07:cb:7e:ab:
         eb:bd:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:11 2025 by rpki-client