Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File:                     HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier:          i7mNWqYT/vi9MrbRVo6C0vb902APRMi+ErxOdmXyszc=
Subject key identifier:   AF:30:C5:8A:5F:39:B6:54:D9:93:F2:6B:DE:A4:6C:FD:EF:68:7A:F6
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer:       /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial:       01988F907A0D1B5203F392E16D9D9FB767E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number:          DB
Signing time:             Sat 09 Aug 2025 16:01:06 +0000
Manifest this update:     Sat 09 Aug 2025 16:01:06 +0000
Manifest next update:     Sun 10 Aug 2025 16:01:06 +0000
Files and hashes:         1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: S5Atm44EP60gieDvOkWj3z/YDKFl2HhFMFQmQdCs/+U=)
                          2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:90:7a:0d:1b:52:03:f3:92:e1:6d:9d:9f:b7:67:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
        Validity
            Not Before: Aug  9 16:01:06 2025 GMT
            Not After : Aug 10 16:01:06 2025 GMT
        Subject: CN=af30c58a5f39b654d993f26bdea46cfdef687af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:70:84:78:15:7d:0c:83:85:93:4c:59:66:
                    b4:e2:c7:94:07:fa:3d:b9:a5:b6:50:66:d7:18:74:
                    45:01:bd:c7:c5:b0:08:78:48:cf:62:7e:e5:a8:f5:
                    27:0b:7f:39:47:af:12:d5:43:ed:d3:77:7f:a9:e2:
                    64:7e:55:c6:41:ee:88:d4:e8:40:64:f3:43:46:ae:
                    51:3b:8a:ef:2b:f9:a6:a1:be:72:65:23:ac:26:4c:
                    e4:82:0c:c7:c9:0c:58:99:89:78:ba:dc:60:6c:37:
                    c6:d4:ae:94:cf:6e:80:d8:8c:f2:83:66:f6:a7:ac:
                    05:8b:44:8b:37:73:18:12:1a:ef:9c:cd:db:bc:9b:
                    ba:94:6c:fd:81:73:47:eb:75:4b:46:24:51:3f:e7:
                    3a:9c:2e:3a:81:a7:0f:c9:1e:e4:f5:53:76:57:1e:
                    f5:71:96:22:8b:c2:2c:ed:e0:48:e1:a8:57:58:41:
                    ef:29:52:2e:f1:a9:31:e5:0a:9b:53:43:94:9f:97:
                    70:3a:b2:9e:dc:a1:fc:ce:bc:c8:ea:91:f0:3e:28:
                    1a:e9:da:67:e6:19:40:78:37:0b:30:b7:0e:ef:5b:
                    72:20:00:9a:85:f3:d0:f6:40:89:53:c2:ad:51:68:
                    d4:36:3f:b9:c1:13:8a:99:ce:d8:91:cf:66:94:be:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:C5:8A:5F:39:B6:54:D9:93:F2:6B:DE:A4:6C:FD:EF:68:7A:F6
            X509v3 Authority Key Identifier:
                keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cd:3f:b4:04:98:8e:65:ab:73:3a:bf:fe:a3:af:89:86:3b:
         46:df:b3:08:d4:48:ad:5d:95:f9:04:75:4d:df:f5:92:df:43:
         30:22:56:77:6a:ae:e9:59:89:3b:35:6b:85:77:48:81:3e:f6:
         d1:1a:64:6f:5b:dc:a7:59:36:90:6b:ca:5b:48:4c:e6:d0:3f:
         7d:23:f3:c2:81:3c:bf:4b:de:42:46:a5:69:5d:2b:6f:da:60:
         7f:8d:33:26:4e:b3:82:1f:56:0f:93:74:05:e6:1b:9c:fe:68:
         b6:91:2b:38:64:d7:83:45:bd:40:d6:3d:4c:cc:ae:bd:fc:93:
         d0:80:b2:7a:8e:c0:52:bf:a7:3e:93:a8:19:37:12:c3:fc:fc:
         b0:d8:6b:bb:b2:98:2e:3b:a3:b6:70:88:65:72:d5:2d:98:d0:
         4c:65:3c:04:88:20:a3:c8:b1:6e:10:42:55:00:b3:b9:49:fc:
         0f:a5:87:28:4d:18:c8:5d:61:c7:5b:e4:33:2e:d5:e8:d8:7b:
         ae:b0:82:7b:4a:3a:64:d2:44:76:d6:da:6a:8f:26:15:d0:62:
         aa:65:40:f0:27:6b:dc:30:10:0a:93:63:fa:69:1a:6f:b3:76:
         3b:b3:06:4a:4f:6e:26:03:bf:59:36:06:cb:eb:28:50:a7:cd:
         a3:ea:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:32 2025 by rpki-client