Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File:                     HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier:          a0JaVvonaoHqiOSUyZpms6PmTukQDiQtrVVCpCLpTso=
Subject key identifier:   17:15:85:00:3C:3B:B4:74:20:39:B5:F5:A9:84:88:2B:5D:D5:21:61
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer:       /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial:       019872CF8C439C6461ED52BEDC8460A06EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number:          12AB
Signing time:             Mon 04 Aug 2025 02:01:01 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:01 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:01 +0000
Files and hashes:         1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: 44MsGKMvXf/6USnj+9EL8MBswLAeNHELYXd4Pnyolqc=)
                          2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:8c:43:9c:64:61:ed:52:be:dc:84:60:a0:6e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
        Validity
            Not Before: Aug  4 02:01:01 2025 GMT
            Not After : Aug  5 02:01:01 2025 GMT
        Subject: CN=171585003c3bb4742039b5f5a984882b5dd52161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:c9:21:b8:98:39:20:97:ef:6f:03:5d:12:
                    39:58:cf:dc:72:d5:98:33:05:e1:39:62:c3:53:4d:
                    7a:01:0d:cb:fd:8a:1c:50:bb:d2:ac:1e:d7:93:44:
                    05:4f:c2:a9:19:44:1f:c6:69:d8:a6:25:1d:ad:af:
                    e2:a5:98:db:c5:0d:43:23:81:69:45:db:fc:c5:a8:
                    1a:1d:06:0a:e2:f1:d7:33:34:4d:63:da:e9:e7:f0:
                    cc:c6:3c:81:0f:a3:56:65:c9:66:e5:d9:7c:7b:f1:
                    b8:9d:b6:8a:e9:23:43:2e:8a:9f:43:04:31:30:1b:
                    65:99:57:78:86:a4:c4:e8:e8:5d:38:82:b0:9b:b9:
                    ad:24:65:ef:70:b6:26:94:53:be:86:d3:d3:e3:21:
                    49:d9:8d:ce:ad:b6:e0:8e:e3:9c:33:79:0e:98:00:
                    a1:dd:8a:17:82:bf:f1:e3:3a:12:d0:c0:08:11:53:
                    bc:fd:f1:7a:a3:6a:77:6f:af:65:8a:43:25:66:99:
                    25:6c:85:88:d0:33:02:28:f3:81:f8:21:4d:f1:a1:
                    98:0d:4e:a9:8b:e2:df:13:78:3d:0b:ac:2b:ca:f7:
                    ba:26:49:20:8f:84:c5:0d:56:41:e8:01:02:da:88:
                    36:be:63:eb:aa:9f:e4:de:5f:aa:6e:05:30:99:2a:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:85:00:3C:3B:B4:74:20:39:B5:F5:A9:84:88:2B:5D:D5:21:61
            X509v3 Authority Key Identifier:
                keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:45:14:6c:e4:8b:a4:ce:cd:e2:a8:b7:e0:f3:08:4c:ea:4f:
         ad:fd:a5:ed:b1:b1:3d:a8:df:6a:cc:d9:c7:2a:3b:99:53:36:
         3e:c5:d3:2e:5c:2f:cf:0c:74:19:6e:17:06:35:51:05:8c:ae:
         de:d4:6c:e9:27:f8:29:65:8d:62:d0:d2:b8:5f:f1:31:db:0a:
         53:6a:fa:34:c1:62:8e:d9:a1:04:28:de:09:51:03:7c:29:c4:
         4c:08:1c:33:74:c6:fe:d9:a6:54:eb:85:d5:ad:39:db:e7:a0:
         4b:e4:c2:a7:45:f1:5b:ed:40:a8:80:c7:fa:9b:55:de:9d:15:
         5b:1a:d5:53:a6:90:e3:68:d5:e0:33:37:44:63:84:c1:89:49:
         0e:bf:d6:8c:7d:79:2c:07:b0:9b:02:32:d1:39:d9:94:28:d0:
         b1:7d:f9:27:67:8e:18:39:3c:7b:81:89:7e:0e:f3:cd:83:86:
         77:2b:8d:ac:88:02:ef:d6:80:5c:2f:8e:59:5e:d7:d8:87:83:
         97:30:ad:33:2f:ec:21:38:3b:b3:48:7b:db:fe:28:e2:b5:9b:
         fb:9f:3d:fb:4b:9e:ad:eb:d3:c1:a7:1a:16:63:f2:c3:ef:55:
         dd:6e:2b:16:23:ba:55:0c:38:12:ac:d2:b4:1a:34:e2:5e:6c:
         fe:56:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:38 2025 by rpki-client