Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File:                     HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier:          /HIS02PxBUBEby3/Gh9resFZHH2zkE3YGWTO7HnKXKM=
Subject key identifier:   63:B3:6D:8C:BF:AD:EC:E7:8E:52:C3:3E:C7:14:7C:7B:9F:98:3A:7E
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer:       /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial:       01987ED3CC5D795D5ACE16C38434DD16980A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number:          15AF
Signing time:             Wed 06 Aug 2025 10:01:06 +0000
Manifest this update:     Wed 06 Aug 2025 10:01:06 +0000
Manifest next update:     Thu 07 Aug 2025 10:01:06 +0000
Files and hashes:         1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: y5jlFbSgGqf1d0oHw9+EOtt9nqZ+N2/Fdh9OZMrgc2E=)
                          2: hIagYPgcgLqF5hqMfUhJY2-sJAs.roa (hash: ZaaWq0BbjJoluHI5ROX+aFarBCsxRa8oHhsXlvsyUeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:cc:5d:79:5d:5a:ce:16:c3:84:34:dd:16:98:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
        Validity
            Not Before: Aug  6 10:01:06 2025 GMT
            Not After : Aug  7 10:01:06 2025 GMT
        Subject: CN=63b36d8cbfadece78e52c33ec7147c7b9f983a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:6f:c3:f7:84:83:45:93:3c:c0:bd:fa:a8:
                    14:a9:cf:b6:19:e3:91:56:43:2d:da:04:2e:50:6d:
                    1d:73:4c:d9:7a:99:78:01:31:43:0d:25:bb:0b:d4:
                    3d:b1:fc:0c:2d:76:10:25:0e:39:cd:b6:64:87:7e:
                    66:d0:59:0c:b2:98:0a:3e:fa:0b:3c:31:d6:7e:1d:
                    f5:f2:11:b2:c7:37:23:29:4d:17:dd:5a:96:8f:38:
                    a0:c7:7c:fe:4e:99:34:a4:ef:c5:df:9c:cd:93:3c:
                    6c:f7:db:a8:4e:26:70:e5:45:b1:3d:b0:ed:a7:34:
                    d3:f4:99:83:4b:90:fe:ab:b1:b5:4f:6a:33:38:41:
                    0c:3e:99:f0:71:d2:45:01:82:e8:ee:7f:56:27:1a:
                    13:5f:bf:18:de:72:07:9f:48:9f:c4:25:c7:24:b6:
                    14:00:ed:e1:90:08:f5:82:2d:e8:a8:8e:88:01:72:
                    c0:7d:26:6a:14:df:70:18:2d:bf:1b:41:81:be:06:
                    f8:3f:b9:44:f7:fe:b9:45:35:b7:26:64:ed:4a:10:
                    50:34:25:fa:57:0e:e4:30:83:9c:33:a8:86:af:7c:
                    a5:56:b1:8d:8f:95:b9:60:d7:db:38:de:75:86:b5:
                    da:fa:22:9f:77:99:a6:d0:35:c5:50:a1:48:17:84:
                    3b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B3:6D:8C:BF:AD:EC:E7:8E:52:C3:3E:C7:14:7C:7B:9F:98:3A:7E
            X509v3 Authority Key Identifier:
                keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:49:bc:19:90:26:59:d0:29:35:af:ad:5e:71:7e:18:9e:c5:
         b0:8b:b5:a2:26:d0:01:94:77:ab:9e:9d:a0:b8:a3:a4:2f:8c:
         b1:b6:2f:b2:56:1a:a2:27:fd:2e:b9:7d:ee:d4:56:cd:3e:36:
         4e:21:2e:54:b4:37:e4:08:76:3a:5a:f9:16:88:ba:a5:e4:32:
         95:1d:72:9a:74:5c:cc:bb:73:29:c9:da:d7:2d:67:ef:8b:67:
         7e:e3:fe:7b:a5:72:f5:03:55:8c:54:9c:56:a1:e9:dd:9e:89:
         1b:51:8d:c8:89:1c:c2:aa:47:09:89:b8:74:be:c7:90:e1:bf:
         ad:b5:eb:90:87:65:1d:6b:00:30:c0:cc:05:2b:c5:8b:47:63:
         21:1e:72:30:36:c5:2b:e6:a2:ca:41:11:e2:86:7d:0a:16:f2:
         33:65:a5:d2:7d:37:83:83:73:3d:63:12:49:e3:fd:fe:e9:73:
         73:98:ea:2c:a0:ef:4b:40:37:3c:70:a1:07:3b:28:e9:81:c5:
         e2:ad:b8:20:6b:04:bc:e3:ac:c8:21:ed:5a:f3:7a:e2:b2:be:
         cc:87:6f:54:f0:be:25:59:1e:33:ed:8a:46:ca:9f:37:00:da:
         54:3e:8c:78:f7:7f:e8:e2:54:ed:92:54:f8:6c:3d:01:1a:9c:
         4d:b1:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:43 2025 by rpki-client