Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
File:                     HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json)
Hash identifier:          lNfAV4ATUS/rHZSTX09ZXPeEbkSEQsBW4x0UUP1VRJc=
Subject key identifier:   A5:40:8A:71:EC:10:DA:13:47:16:38:35:C1:0A:0B:54:30:4F:49:94
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Certificate issuer:       /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial:       0198819E015715635360E528996F103FA9FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
Manifest number:          019F
Signing time:             Wed 06 Aug 2025 23:01:12 +0000
Manifest this update:     Wed 06 Aug 2025 23:01:12 +0000
Manifest next update:     Thu 07 Aug 2025 23:01:12 +0000
Files and hashes:         1: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: 9xVGyseOQm+9H45u3ym1pRnc1SDMI4dF02zkUN3rnk0=)
                          2: oc5FnjZHQbJL1Ibu8H1TNjc1eIc.roa (hash: bAkVUMLAu0PlBfnhDQgvC3qhQHCdqHrsGFxHYMF35cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9e:01:57:15:63:53:60:e5:28:99:6f:10:3f:a9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
        Validity
            Not Before: Aug  6 23:01:12 2025 GMT
            Not After : Aug  7 23:01:12 2025 GMT
        Subject: CN=a5408a71ec10da1347163835c10a0b54304f4994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:38:39:31:d8:54:79:60:59:9c:ac:97:08:
                    ff:51:02:0e:d2:41:c7:ed:94:c5:04:7d:e0:31:0d:
                    9c:ed:14:9a:07:31:ac:08:6b:b3:f6:97:ed:3a:eb:
                    43:51:c5:14:91:c2:2f:4f:85:70:e0:e3:22:5c:36:
                    69:14:81:22:c5:72:4a:7b:a1:7f:38:44:2a:5b:d6:
                    70:11:91:c8:36:1d:5e:05:62:e5:af:b8:c6:18:c3:
                    b9:0c:f7:cf:73:74:60:4d:29:55:ec:03:5a:a6:d8:
                    17:0d:29:5a:35:ae:88:c7:37:97:24:08:a8:da:af:
                    4d:48:25:d5:f6:75:fc:70:75:84:9e:fb:b8:1c:3f:
                    5d:c0:39:69:67:ed:53:76:0c:09:c1:fa:db:09:7e:
                    64:2e:c8:85:21:ee:d9:1a:98:76:ed:27:5c:a2:3e:
                    57:8b:42:d6:75:fb:ae:bd:24:d3:67:5e:fb:5e:a1:
                    7c:82:ad:84:9f:3e:9b:79:7f:28:67:7a:78:b3:9d:
                    d7:d0:72:8c:9c:5e:71:5b:dd:01:83:02:5b:d0:db:
                    44:5e:ba:69:ba:d5:2c:79:03:98:18:64:8a:10:17:
                    05:a1:b0:54:7c:55:b9:00:11:63:2d:0f:33:38:90:
                    46:9e:57:2a:df:84:54:72:d2:67:37:3e:b1:cf:0e:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:40:8A:71:EC:10:DA:13:47:16:38:35:C1:0A:0B:54:30:4F:49:94
            X509v3 Authority Key Identifier:
                keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:53:99:e0:6d:3d:de:d3:6c:ad:8c:74:0e:12:e2:75:47:b1:
         3a:1c:2e:85:72:ae:31:e3:14:ae:98:70:b6:fe:5c:cb:d3:4d:
         4a:a5:df:d9:64:9c:1c:57:b7:15:ed:63:85:48:ab:75:f4:e7:
         0f:31:ec:01:0c:a5:54:26:38:ef:4b:36:57:71:f3:6c:a7:54:
         8c:7e:f9:57:63:d0:53:92:66:7c:9e:2b:c0:d2:0e:3c:18:85:
         8d:41:74:b8:38:81:49:24:a2:5f:ee:7d:8b:47:f9:19:81:32:
         62:b0:e4:49:de:86:08:09:2e:75:2b:56:ca:40:3e:c0:11:92:
         a4:fa:5e:ef:12:0b:27:e4:3f:41:ca:c8:80:84:f9:87:38:85:
         f2:92:ef:b5:45:b9:47:fb:6c:6f:cf:a0:4b:3f:83:70:e4:7f:
         f9:c6:00:c0:e4:70:ff:be:f3:78:1e:22:d9:c0:30:ca:65:0b:
         5c:2d:e3:da:f5:af:30:1c:27:5a:f6:e1:93:25:5f:74:2b:a3:
         17:15:cd:f9:b2:ca:99:e8:e6:cd:f7:70:c0:75:0f:da:40:1c:
         60:fb:9c:5c:14:c4:d5:e4:7d:14:1c:cf:26:61:15:d0:3a:7b:
         8e:d7:81:97:19:8b:9e:05:6e:00:17:7d:57:16:c7:39:6f:56:
         4e:17:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:16 2025 by rpki-client