Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File:                     HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier:          6CUW7j8AXwIvOlDF1Oh+TI7E/ez36nMpbA/iAxP9tNg=
Subject key identifier:   D0:B8:D1:52:F8:95:23:3D:0B:32:B9:03:15:A1:43:79:20:C3:E6:9E
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer:       /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial:       01987450ACD3320F811AA79C0555A1391C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 09:01:40 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:40 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:40 +0000
Files and hashes:         1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: TIRkEuT5GAYcEoPj9h8ZFPfzUJZ5QMmuudrQ3cKb6bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:ac:d3:32:0f:81:1a:a7:9c:05:55:a1:39:1c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
        Validity
            Not Before: Aug  4 09:01:40 2025 GMT
            Not After : Aug  5 09:01:40 2025 GMT
        Subject: CN=d0b8d152f895233d0b32b90315a1437920c3e69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e4:4e:97:1c:9e:06:e3:3d:0d:60:d9:84:dc:
                    f9:9b:2e:19:10:cf:9f:40:eb:f0:85:08:77:aa:46:
                    68:94:83:79:5a:8d:7a:23:c3:34:00:96:e0:04:bf:
                    a2:7a:59:45:a4:da:1b:a7:be:f8:e3:34:30:cb:84:
                    82:f1:f9:e3:78:46:32:37:6a:48:1f:48:a1:19:ad:
                    64:37:c5:56:30:53:12:a8:06:2b:d0:e6:99:f1:1f:
                    cc:0a:0b:99:7f:1b:18:2c:8d:39:95:48:1d:eb:c4:
                    13:d8:ac:17:77:9b:7b:73:1d:c7:f3:81:15:65:21:
                    bf:00:b9:de:8b:a6:dc:a6:65:1f:67:fa:c1:8d:69:
                    41:13:10:9d:42:23:42:bb:e9:4e:fa:cd:19:52:dd:
                    5e:c5:58:8f:0c:a3:a7:3f:51:80:b0:ed:1e:0c:5e:
                    83:37:8c:b5:3b:25:df:29:d9:c1:99:88:0b:a2:2b:
                    cd:86:43:85:c9:30:9d:42:2b:46:0c:87:d2:3f:ee:
                    32:fc:a9:38:16:81:a4:0a:85:83:01:7d:0c:75:0b:
                    64:c4:91:fd:c0:1b:b9:2f:41:72:b6:31:51:88:70:
                    11:38:b4:54:7f:0d:61:6e:b6:95:bc:bb:0e:73:92:
                    b8:c6:22:aa:e8:23:ba:27:7c:5c:02:38:09:6a:86:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B8:D1:52:F8:95:23:3D:0B:32:B9:03:15:A1:43:79:20:C3:E6:9E
            X509v3 Authority Key Identifier:
                keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:df:87:d2:73:a9:91:99:4e:a8:43:c6:ef:49:a4:6e:11:
         ab:80:b6:bf:3e:67:56:2f:b4:d3:c6:87:3e:79:ce:e4:d2:82:
         a4:1c:32:bd:84:4b:23:5e:81:7d:db:8f:da:c7:9b:57:6d:49:
         bd:8e:f5:45:a1:77:93:91:95:e5:f7:56:a3:91:f2:a0:68:61:
         8c:67:62:40:98:aa:84:8a:8c:ad:5a:71:05:15:2a:63:2e:2e:
         ee:cd:74:f2:7d:4e:81:a7:42:c5:d7:1f:f0:67:ce:cb:ae:d6:
         0d:d2:c2:21:b5:ed:a7:51:6d:76:40:be:61:58:07:b5:f8:ec:
         73:fc:0f:ee:9a:64:85:1e:95:9e:f8:c7:e2:38:c0:93:0d:77:
         6a:c0:0f:46:82:d2:04:60:78:66:e9:dd:66:51:82:a1:a9:af:
         72:cc:ce:22:ef:13:d7:fc:35:50:11:76:69:30:9b:da:f1:12:
         f4:39:c1:c0:27:13:2c:23:7d:bc:da:8d:d0:f3:36:df:e4:c8:
         92:34:8f:bd:56:89:1b:87:3e:26:12:3a:b2:c5:96:9b:25:d2:
         b8:be:fe:8b:e2:83:0b:d2:14:84:6f:25:3b:9c:b9:a3:a3:97:
         2c:75:3a:09:f0:c4:52:9e:3e:12:ef:d9:f5:4a:ba:fb:0b:3e:
         d9:65:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:06 2025 by rpki-client