Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
File:                     HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft (raw, json)
Hash identifier:          SHGqnO0Jkt2/IV4dYZftOXTLa5xUzMvFC9VR6ce85ns=
Subject key identifier:   95:22:18:DE:06:86:0F:39:7C:1D:98:29:82:12:42:F4:6E:17:26:F8
Authority key identifier: 1C:53:53:A8:6A:BD:33:B1:A2:36:E4:07:CE:46:92:61:D0:63:61:50
Certificate issuer:       /CN=1c5353a86abd33b1a236e407ce469261d0636150
Certificate serial:       019771F5E738BBEC0970344710B390A5D5C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
Manifest number:          0816
Signing time:             Sun 15 Jun 2025 05:00:30 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:30 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:30 +0000
Files and hashes:         1: HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl (hash: +SB2S4twgHEdQ/0sQk55obC58qt3M4WAy7KvGdyzpjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f5:e7:38:bb:ec:09:70:34:47:10:b3:90:a5:d5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5353a86abd33b1a236e407ce469261d0636150
        Validity
            Not Before: Jun 15 05:00:30 2025 GMT
            Not After : Jun 16 05:00:30 2025 GMT
        Subject: CN=952218de06860f397c1d9829821242f46e1726f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:05:36:f3:12:53:aa:41:39:7c:53:b6:56:
                    63:f6:69:9e:57:bb:af:81:db:fd:90:bd:61:82:1f:
                    24:fe:37:5f:33:4d:8d:7a:2b:ac:cf:9a:e1:6a:02:
                    d4:65:e3:7e:90:bb:eb:c1:66:b4:f2:b0:5e:23:1d:
                    d4:2c:58:9f:4f:6f:16:96:10:4b:32:60:c6:29:93:
                    11:fc:fe:d1:16:6e:7a:8f:d0:a2:4a:35:5c:1a:2a:
                    6c:6c:c2:90:a6:16:b6:f3:ed:66:5f:3c:99:c2:5f:
                    50:cb:fc:0c:69:11:4c:d9:0f:8c:21:77:4a:2d:00:
                    9c:90:31:d6:8c:11:31:24:ec:0e:b9:38:f7:72:4f:
                    ba:8c:44:62:7a:29:c1:ce:2d:c9:89:80:fb:ce:5c:
                    64:9e:0d:19:96:e2:87:34:6f:a2:92:4e:b6:21:55:
                    6e:38:09:8c:ba:3f:80:e2:8c:2e:a8:6f:f5:dc:e9:
                    db:80:49:73:d0:a6:6e:b5:99:de:00:a3:52:dd:06:
                    83:ce:51:34:7e:34:00:40:e1:5f:77:d4:c1:d3:e8:
                    3d:c9:09:5d:95:18:dd:db:74:3e:43:48:61:6f:c4:
                    67:ef:eb:ad:b1:18:83:b2:4b:1c:ce:5e:bc:42:b2:
                    3d:e6:10:52:02:f9:ac:72:a8:37:bc:2d:3e:ec:50:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:22:18:DE:06:86:0F:39:7C:1D:98:29:82:12:42:F4:6E:17:26:F8
            X509v3 Authority Key Identifier:
                keyid:1C:53:53:A8:6A:BD:33:B1:A2:36:E4:07:CE:46:92:61:D0:63:61:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:83:f0:b7:a9:ae:62:72:58:3f:64:87:01:99:64:8b:5d:97:
         1b:7f:09:ce:ad:ed:8d:f7:aa:95:ae:e6:b6:18:4d:e2:b3:69:
         ad:db:c9:20:52:6e:9c:47:95:89:91:de:98:53:a5:ff:2e:6a:
         ca:dc:b1:fe:14:1f:25:3e:89:78:47:1c:9c:b4:e7:ea:63:b0:
         c3:6d:31:18:9f:43:ad:35:9d:14:cd:77:69:f7:96:d3:9c:cd:
         49:cf:8d:83:ab:66:bd:67:70:2d:06:9d:74:ba:c3:b5:db:42:
         56:75:cd:ed:9b:89:44:88:b8:a4:cc:53:99:2b:0e:84:53:f9:
         6d:b4:dc:92:94:03:1e:3d:40:de:79:43:49:29:c5:35:e8:e2:
         61:ec:2c:24:6b:7a:4a:a3:09:2f:dc:8b:e5:55:eb:c4:21:a1:
         4d:61:71:ab:41:56:4a:a8:97:89:d9:6f:e9:1e:48:b4:09:ce:
         8a:a1:05:5c:c6:35:39:fe:b5:e2:9d:2a:2e:47:2a:4a:dc:01:
         b8:2e:87:c7:ed:f6:39:8c:69:0b:76:da:6e:4f:3f:a7:fc:54:
         a6:7b:5d:a4:0d:19:a1:e4:2a:59:03:cc:e8:95:48:f9:0f:92:
         d7:59:c4:7c:3f:0f:dd:1e:72:e0:83:81:cf:e9:5b:60:ab:a1:
         b4:32:74:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:44:09 2025 by rpki-client