Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File:                     Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier:          gPMhCPnE1uBGYiDA8J4/lhVRE+O1waJsk3AAYJI+64A=
Subject key identifier:   43:56:35:F2:82:87:1E:FF:71:08:0B:56:58:D2:BA:27:66:9D:7A:22
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer:       /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial:       0198744FBB4B987614083AB32F1CB0851FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number:          0865
Signing time:             Mon 04 Aug 2025 09:00:38 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:38 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:38 +0000
Files and hashes:         1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: DNBLqsAyox/LlWyjsRKpOjl6jwlDGKGQoEctvt+xcUQ=)
                          2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:bb:4b:98:76:14:08:3a:b3:2f:1c:b0:85:1f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
        Validity
            Not Before: Aug  4 09:00:38 2025 GMT
            Not After : Aug  5 09:00:38 2025 GMT
        Subject: CN=435635f282871eff71080b5658d2ba27669d7a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:ad:f3:6a:02:d3:37:59:6c:9b:63:35:36:
                    ed:46:45:f5:c9:99:7f:6a:4a:65:ea:eb:b0:66:7d:
                    99:ff:28:97:4b:6d:da:e1:fe:b5:e9:8e:d3:15:e9:
                    f1:e1:43:12:49:e5:30:06:d9:d3:bb:f2:fb:77:84:
                    cf:a3:02:17:e3:a2:9d:c7:74:6b:a8:73:e3:8f:01:
                    f7:d0:54:74:d4:eb:31:36:ce:98:1d:fa:00:43:c8:
                    f2:1a:46:82:92:4b:38:2f:29:ce:34:ce:71:a0:50:
                    f4:1b:c9:1e:19:8a:f7:b1:7e:9b:ad:09:a4:f0:03:
                    58:41:c0:c7:99:0b:b5:47:63:ce:93:e0:a9:35:b0:
                    52:d7:3f:86:9b:f3:ac:31:49:9d:d0:95:75:86:2b:
                    23:d2:6a:a1:1c:81:de:9d:68:06:0b:f4:2b:5e:4c:
                    4e:82:5d:b6:85:30:e6:bc:e1:43:6b:89:ab:9d:73:
                    39:95:b7:b8:b3:76:39:55:ea:b4:3a:52:48:8e:fb:
                    1a:35:e3:cb:e2:74:f4:ae:31:f6:cc:cf:fa:df:c5:
                    5d:3f:ba:c6:f5:6a:01:12:2c:7e:f3:1d:a3:94:b8:
                    92:f5:3e:17:18:51:49:fe:37:17:6f:2f:f7:d1:0e:
                    84:08:96:b9:3d:b8:1d:e7:e7:bf:01:fe:d3:91:66:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:35:F2:82:87:1E:FF:71:08:0B:56:58:D2:BA:27:66:9D:7A:22
            X509v3 Authority Key Identifier:
                keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f7:fa:3e:c5:76:3f:79:b4:10:0a:a6:3f:99:dd:24:16:41:
         9f:e2:87:31:df:21:8e:4f:3d:b4:a8:2d:5c:3a:c3:66:50:2b:
         c9:3b:8b:12:1c:c2:03:0c:75:be:ac:0b:db:bf:aa:80:c2:ed:
         84:5e:4b:15:5f:f1:99:b6:9d:2a:40:35:49:c3:ca:df:76:45:
         a4:c4:e8:0a:bf:0b:64:27:85:8e:bf:1f:57:08:e9:6a:59:f6:
         6c:d8:cb:24:f9:1f:09:13:e9:03:84:70:28:eb:8d:88:73:33:
         18:74:65:96:fb:4f:32:a2:d5:7e:10:1f:81:f2:d0:80:a0:ed:
         81:63:82:8d:74:47:f2:35:f2:43:95:65:4f:3e:a9:7c:4c:32:
         ab:32:3f:30:e9:77:8a:8b:f0:26:6e:02:59:f5:50:85:04:0b:
         0a:6e:cc:14:32:ae:4a:b8:ce:b0:1c:70:4b:a0:9f:d5:b7:a9:
         e8:7d:c7:81:6d:bc:3c:a2:98:a9:06:2a:67:61:b6:02:da:9d:
         e6:49:ed:1f:21:cf:3f:c7:1f:e2:3c:36:f2:ca:28:00:6c:25:
         f5:9a:14:cf:b2:5e:f8:e3:88:d2:43:26:d4:de:87:06:f9:55:
         b9:7c:4d:d4:f5:54:d8:55:6a:a6:2c:91:c7:56:2d:3d:42:b6:
         ed:c6:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:49 2025 by rpki-client