Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File:                     hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier:          4e5L73YZevvTEPYv+em+153IhVW6cOmOy+RQmPAaoIM=
Subject key identifier:   F3:0A:8E:BF:3B:2C:3C:D8:83:6E:5D:B1:15:70:16:37:44:E8:CA:3A
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer:       /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial:       019774F79D760F01B5FA9FF5C51348CBEFE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number:          158F
Signing time:             Sun 15 Jun 2025 19:01:14 +0000
Manifest this update:     Sun 15 Jun 2025 19:01:14 +0000
Manifest next update:     Mon 16 Jun 2025 19:01:14 +0000
Files and hashes:         1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: 15h1TE0TJahQIPbn60IvJbkxpy8OMzmatoiQ3K4/HtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:9d:76:0f:01:b5:fa:9f:f5:c5:13:48:cb:ef:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
        Validity
            Not Before: Jun 15 19:01:14 2025 GMT
            Not After : Jun 16 19:01:14 2025 GMT
        Subject: CN=f30a8ebf3b2c3cd8836e5db11570163744e8ca3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:97:73:7a:c9:8e:e6:98:09:c0:c7:f5:47:
                    d8:b8:aa:8d:cc:f6:4d:a2:c6:29:0b:9c:16:5e:a6:
                    df:4c:06:7e:19:61:0a:01:d5:d3:30:fd:a8:20:1b:
                    57:85:7e:13:5f:c4:99:4a:86:1d:29:51:2d:0d:2c:
                    07:6a:0a:f3:9d:da:b2:38:f4:6d:0c:5d:10:41:72:
                    0d:97:38:aa:c1:ac:77:09:a3:6d:d6:40:83:e3:43:
                    b7:40:cd:a6:ec:86:dc:97:89:52:29:5b:3d:24:8e:
                    8c:de:68:a3:3b:38:78:aa:e2:31:2a:b5:eb:cd:47:
                    f7:66:e9:45:31:e7:02:ad:15:a4:fa:22:b8:aa:07:
                    6e:8c:0e:93:61:b6:79:af:94:44:e2:58:85:0f:f9:
                    d1:c0:a8:ed:10:b6:7a:d5:80:bc:67:16:e9:04:b1:
                    08:b6:ff:47:06:a9:ba:45:02:b7:ef:5b:6d:c8:ca:
                    e0:82:d3:9b:06:ba:ee:6b:54:2b:01:e9:f7:5d:7b:
                    22:4f:c3:85:a9:f5:7e:4b:2d:de:92:c9:a7:66:82:
                    9c:72:82:ed:8d:92:90:35:76:2d:8f:e6:e0:a8:cc:
                    7a:06:69:01:77:b8:0b:57:92:bf:9e:48:b1:7a:05:
                    b3:ba:b8:b1:d8:ad:ee:69:72:5e:a0:c3:0d:b1:f2:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:8E:BF:3B:2C:3C:D8:83:6E:5D:B1:15:70:16:37:44:E8:CA:3A
            X509v3 Authority Key Identifier:
                keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:0f:a3:0a:05:a9:b6:93:ad:12:fe:fd:6e:42:e6:9d:e0:
         e3:aa:0a:3d:b2:ad:6a:d9:41:dc:74:63:f9:63:4b:4a:45:d8:
         ae:b3:e1:c9:e4:bc:93:e7:24:44:5c:f5:34:2a:a4:5c:9b:ae:
         2a:f5:e6:73:8d:ac:80:d2:65:77:4d:fb:41:01:d5:05:7f:5d:
         ba:6e:65:52:95:f0:04:a9:4c:7d:ea:d8:a4:84:60:73:28:cf:
         a3:93:ad:e7:66:7c:c6:f2:e7:6b:ae:af:ac:45:cc:83:1b:9f:
         fe:f8:7e:31:97:11:3c:9b:2a:4e:94:16:17:3e:fb:e6:55:4d:
         ca:78:3a:90:f0:38:9a:55:e0:ed:22:a0:75:21:ec:28:02:12:
         ba:a1:9f:92:bd:3a:8d:c3:66:73:07:25:0d:80:58:44:00:51:
         3a:ef:98:be:99:37:0a:69:0f:b9:17:fd:7d:5a:19:02:2c:6a:
         c9:4d:9d:35:e3:28:f9:a5:ad:f4:d2:df:8f:fa:75:7e:62:97:
         67:46:fd:07:7a:86:bd:4f:cd:e9:42:9d:d5:d7:e0:22:a8:da:
         f6:82:20:2d:f4:34:32:32:30:15:ef:13:21:6f:10:5e:26:75:
         0e:39:b5:06:68:de:c2:fd:ca:33:2c:05:07:d4:ac:5c:b2:77:
         7c:1d:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:15:14 2025 by rpki-client