Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
File:                     Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft (raw, json)
Hash identifier:          HbycsYlFwXYGgb9GayqEX/6UFeHY+PQHBpw6vE2OZlM=
Subject key identifier:   5F:12:C6:DD:AE:FC:A4:9B:22:99:5F:8F:F1:3A:AC:0C:C2:B1:17:DB
Authority key identifier: 1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
Certificate issuer:       /CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Certificate serial:       01987C775635BD4E5D8B44556EF9639856B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
Manifest number:          0A2A
Signing time:             Tue 05 Aug 2025 23:00:52 +0000
Manifest this update:     Tue 05 Aug 2025 23:00:52 +0000
Manifest next update:     Wed 06 Aug 2025 23:00:52 +0000
Files and hashes:         1: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl (hash: vUsKutQ58eLWmRobyDeoc4ci/KH28wMnOgy8u3gpPuk=)
                          2: tylNMSSvS99Dcyy-HHi_PFuMqa4.roa (hash: ccMlffzxJqfYWwFrr0eYQi/P7Vh6cNEU7oOeSOxzYpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:56:35:bd:4e:5d:8b:44:55:6e:f9:63:98:56:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
        Validity
            Not Before: Aug  5 23:00:52 2025 GMT
            Not After : Aug  6 23:00:52 2025 GMT
        Subject: CN=5f12c6ddaefca49b22995f8ff13aac0cc2b117db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:6c:d7:cb:d0:b2:14:03:56:c0:83:43:0d:
                    69:a8:7e:f2:6a:3b:6c:c1:0b:ac:b3:1e:e9:1e:71:
                    2b:93:c9:a5:27:e7:97:4f:e1:ca:82:61:2f:99:fa:
                    c3:1b:3d:f7:cd:e1:46:5c:f7:30:57:5b:24:ba:f9:
                    c3:93:4e:b6:99:ba:a8:43:58:89:90:4e:8d:14:db:
                    ef:a8:6b:bc:05:07:28:3b:f7:2c:61:05:ea:6a:88:
                    3e:25:1e:df:ee:21:aa:d0:32:27:e9:d1:f0:31:ac:
                    58:ed:77:ab:7c:8e:86:0b:77:33:35:2d:9d:f2:94:
                    57:05:7d:cc:9a:1e:96:10:e5:37:a8:30:c6:85:2a:
                    af:1c:b8:e2:de:b5:ac:f9:68:b4:d3:6d:a6:0b:c2:
                    d4:3c:c5:32:87:85:16:af:00:e8:4a:a0:9c:15:0c:
                    df:9d:94:73:9e:f7:d7:d3:ca:5c:5c:98:e2:b0:08:
                    7d:3b:3f:0a:2d:9c:7d:bc:7f:5a:a0:d5:3d:d4:1a:
                    89:17:ee:6e:d0:d4:9a:c0:87:61:80:c8:4b:5f:db:
                    a4:91:2d:77:06:b8:0c:1d:b0:42:89:a4:51:f6:5a:
                    83:02:40:4e:2a:b3:38:e5:85:62:49:71:87:5f:f7:
                    21:cf:4f:04:45:ae:ff:a0:49:ab:6e:1f:f3:c0:e7:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:12:C6:DD:AE:FC:A4:9B:22:99:5F:8F:F1:3A:AC:0C:C2:B1:17:DB
            X509v3 Authority Key Identifier:
                keyid:1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:78:f8:72:b0:b6:5a:dc:06:30:08:95:19:90:9b:a7:9a:
         6e:59:d6:d5:61:83:5f:91:45:77:f1:23:25:63:eb:0d:92:e1:
         9c:08:64:45:0a:75:5e:68:94:07:77:b7:96:5f:05:27:4c:e5:
         e0:4c:82:61:0f:21:13:09:90:e5:a8:58:52:e5:75:d1:14:4a:
         65:02:04:7a:7d:16:c7:6d:7e:d5:d2:bb:25:5b:a5:95:b1:dc:
         10:87:cf:36:68:c2:fc:cc:ab:75:5a:29:4e:32:d2:4f:77:a9:
         75:50:59:19:17:66:30:62:58:a4:95:0c:cc:93:01:53:e2:c4:
         3f:0f:9d:e9:65:04:17:c4:b9:fe:03:bf:b2:23:e4:16:16:23:
         c3:8d:84:4e:a7:30:9d:19:a1:ee:35:fd:a0:8a:d7:36:b8:f5:
         9e:10:22:d4:06:de:f0:d7:bb:2e:96:fa:a1:a2:5d:c1:21:a9:
         60:ef:f8:18:2f:f2:18:23:ea:61:79:88:c9:e9:dd:ea:fc:9f:
         70:ac:36:86:3b:fc:d1:cc:18:f7:b1:a9:06:4f:a4:a8:b6:e8:
         b6:2d:6d:4f:2f:de:fe:8d:08:e8:7d:2a:7e:53:3a:0e:f8:c7:
         1a:fa:65:7b:99:62:e7:43:c8:9b:fc:a4:ae:59:5e:b9:04:65:
         d3:fb:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:29 2025 by rpki-client