Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File:                     HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier:          vZxzEt+TryJVpXpMHvxrShZysT4q00sFOfagDOhqK90=
Subject key identifier:   1E:76:7F:7D:5E:4D:BD:A9:44:FE:40:6C:4A:95:85:5E:F3:91:DC:30
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer:       /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial:       019885E8066ABE246E363200B7A06A077C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number:          1587
Signing time:             Thu 07 Aug 2025 19:00:32 +0000
Manifest this update:     Thu 07 Aug 2025 19:00:32 +0000
Manifest next update:     Fri 08 Aug 2025 19:00:32 +0000
Files and hashes:         1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: cPraNdvu4nkEwxbDQwNNnaJAZMuyqNyJWbg6Nw8Z0pE=)
                          2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:e8:06:6a:be:24:6e:36:32:00:b7:a0:6a:07:7c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
        Validity
            Not Before: Aug  7 19:00:32 2025 GMT
            Not After : Aug  8 19:00:32 2025 GMT
        Subject: CN=1e767f7d5e4dbda944fe406c4a95855ef391dc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:6a:59:53:d0:a5:a2:3a:61:80:ec:78:e0:
                    e9:8d:e5:8c:b2:d0:9f:f3:d7:7c:3c:bf:e8:23:ad:
                    69:70:41:39:05:52:f9:36:a6:33:2e:ed:75:9e:47:
                    bc:9a:3a:0d:5c:12:a1:f2:61:cf:32:5e:86:9b:49:
                    11:d9:56:a9:92:50:02:42:25:b5:b5:45:a9:fd:a0:
                    fe:03:be:a0:73:28:d4:31:1c:0b:60:f5:50:7f:9c:
                    f7:ff:2f:3e:8a:8d:77:13:e5:57:d6:3f:8c:af:8d:
                    ba:72:3b:d7:45:0d:a0:ac:35:33:30:80:3b:0f:a3:
                    68:9e:c2:af:ae:01:90:c4:80:aa:fb:60:75:a2:fb:
                    03:1a:7b:aa:95:3c:aa:e5:6f:d8:e1:0b:8a:cf:f6:
                    28:ea:6c:f4:54:f4:0a:43:ca:a9:64:10:b3:cd:65:
                    e9:20:b9:4a:4e:e9:72:9a:14:95:05:54:30:11:3b:
                    1e:db:6f:dd:90:27:51:c0:97:c1:67:fd:4c:30:0e:
                    da:9e:79:1d:ba:9a:30:e0:a6:32:53:76:29:a8:9b:
                    85:0d:56:21:12:23:bf:a6:50:ec:f7:3d:a0:3d:40:
                    f4:e8:52:99:d7:81:f8:5b:6a:e2:83:45:9a:2b:7e:
                    31:e5:79:67:4d:5d:84:ff:33:61:8d:17:84:8d:6a:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:7F:7D:5E:4D:BD:A9:44:FE:40:6C:4A:95:85:5E:F3:91:DC:30
            X509v3 Authority Key Identifier:
                keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:61:c9:d5:dc:a2:7b:6b:18:12:e5:24:d8:83:19:c5:a7:a9:
         e7:5d:43:44:82:b4:b0:58:24:20:81:17:76:db:1d:94:bf:74:
         3d:36:e8:60:37:a4:6a:ba:c0:d3:56:a6:36:a0:a2:e5:f5:3a:
         7f:c8:c5:5d:46:b1:7e:57:0d:18:aa:59:95:fd:a2:ee:f3:16:
         cb:3c:ac:d4:ea:8d:52:44:17:37:fd:07:56:1e:83:d6:c7:93:
         c7:9f:5c:fb:be:08:de:72:0e:a9:48:ea:b8:e0:18:56:84:c2:
         dc:be:f2:7d:70:b3:2e:53:10:a8:32:40:59:2c:e5:85:c3:72:
         a1:38:64:32:a1:a8:94:cd:28:2f:25:45:aa:93:9a:a6:8c:cf:
         30:c0:d8:3f:a6:c1:b7:b2:c4:a5:54:7e:d3:8c:8b:b1:4e:c5:
         5d:d4:5e:94:70:e9:84:27:cc:59:ea:02:55:3f:4c:5d:7a:d2:
         ae:71:69:c0:94:67:8b:8b:fb:05:12:74:a7:a9:bc:96:02:11:
         56:a5:3b:5a:09:8b:5f:4c:de:e9:0c:b6:03:7f:3d:b5:99:77:
         99:8a:15:f9:82:5a:15:16:24:c4:a0:39:ba:ba:cf:8f:47:70:
         05:dd:c5:3b:b5:91:16:cb:91:3a:fe:3f:b2:58:2a:12:bc:e4:
         ce:2b:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:06:25 2025 by rpki-client