Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File:                     HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier:          VYT6YHuH7OzG+embVPA+cMc9I+9Yofr7yN5ElnEfnuA=
Subject key identifier:   C7:91:15:E9:4F:69:60:60:AC:1E:CD:AC:71:5B:23:06:1D:6F:A2:14
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer:       /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial:       019889571AD56014BBE29613BF87C5C97DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number:          068B
Signing time:             Fri 08 Aug 2025 11:00:43 +0000
Manifest this update:     Fri 08 Aug 2025 11:00:43 +0000
Manifest next update:     Sat 09 Aug 2025 11:00:43 +0000
Files and hashes:         1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: jcMpuxAHjjlVhujR8kTrj/BK3d7M1XxNrB4hdHRy+d8=)
                          2: biU2dVHDkmW3ggJsKp9Y0Y3icgc.roa (hash: Q70FfzUUNjte1Czb813dG83AEi9zq10U9CCK5o5IFaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:57:1a:d5:60:14:bb:e2:96:13:bf:87:c5:c9:7d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
        Validity
            Not Before: Aug  8 11:00:43 2025 GMT
            Not After : Aug  9 11:00:43 2025 GMT
        Subject: CN=c79115e94f696060ac1ecdac715b23061d6fa214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:a0:f8:d0:3d:a2:39:e9:a6:a4:22:23:a2:
                    f4:38:ec:4e:9d:e2:31:22:af:77:c9:1c:99:67:c7:
                    e6:f3:f5:0c:32:97:95:1f:10:56:e2:ef:84:ec:cb:
                    28:0b:3d:40:31:0a:1b:f7:6b:06:98:c7:9a:e9:ca:
                    b3:ba:d9:60:27:d7:b8:b6:b3:eb:e6:fc:d7:56:ba:
                    98:3e:e2:d8:fb:89:16:62:72:f4:9e:d3:b8:8d:42:
                    7b:d0:45:48:c5:72:09:0a:1b:97:70:c3:fd:9d:3c:
                    ab:07:13:7c:69:e2:b7:60:71:5b:7a:12:86:78:75:
                    b9:e7:97:21:3f:dc:2a:99:90:b3:30:95:75:c4:26:
                    4e:13:de:8f:ef:84:41:d6:ba:27:1f:42:85:b4:4d:
                    3b:bb:20:1e:e2:7a:b6:4f:cf:93:24:13:e6:33:6b:
                    db:40:a1:31:00:89:44:83:83:c8:10:ca:15:46:79:
                    2b:78:cb:dc:24:85:f2:4b:d6:c4:bf:3e:b5:3c:2a:
                    e2:1e:aa:ad:2a:ee:2a:6e:1e:1b:44:dc:cb:15:40:
                    12:c6:53:41:4d:ea:e2:dd:e4:15:00:12:0e:3a:09:
                    a7:65:97:98:7a:ab:d7:c7:00:08:b7:cc:71:eb:e7:
                    56:95:f4:16:13:6b:b0:02:ec:14:03:23:e6:9a:3e:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:91:15:E9:4F:69:60:60:AC:1E:CD:AC:71:5B:23:06:1D:6F:A2:14
            X509v3 Authority Key Identifier:
                keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:39:2c:28:a8:a9:e4:eb:44:9c:d7:f5:98:e2:9d:7f:14:
         ae:f2:83:11:12:7d:f7:e3:96:08:d7:a7:f5:d8:b8:b7:8c:47:
         2e:d6:4a:df:8d:0c:7e:20:75:2b:48:c5:0a:7a:bb:a8:89:c6:
         19:4b:6e:83:92:f1:43:eb:46:67:ed:da:a2:e9:ca:d4:d8:84:
         c6:ff:a7:aa:bf:42:65:08:66:0c:5a:db:89:a7:81:6d:b6:18:
         ef:92:fd:92:95:d5:55:6a:f7:ec:86:44:d3:96:71:9b:31:7d:
         38:fd:de:47:d2:ac:c1:4d:9b:fd:bd:9d:f9:38:06:ba:9b:0c:
         31:38:21:43:94:4b:df:c4:1a:e4:21:b8:dd:a9:75:51:ae:0a:
         f5:7f:4d:b2:3a:68:27:a4:94:7b:8a:5f:82:22:8f:6f:83:32:
         d7:3f:82:76:04:4d:7f:12:aa:e5:0f:48:7f:81:5d:0a:3a:57:
         4b:ef:f7:3a:25:38:29:fb:eb:8e:5d:1f:d4:d9:85:4a:82:d7:
         7c:da:2e:7e:54:52:fc:7b:87:4b:86:72:ff:5c:b7:37:39:21:
         7c:92:2e:11:66:93:1d:be:fa:fd:fd:78:d5:d6:35:b0:b2:e1:
         d7:3d:68:43:39:84:76:7c:2b:53:7e:16:b0:d4:10:0b:86:e6:
         0f:c7:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:20 2025 by rpki-client