Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
File:                     HDotyHGc8y1ZegUekO2VAmg15Pg.mft (raw, json)
Hash identifier:          N8TP089nZMcJTyo8/egVcpnIYrwUIhX7PbkMlledifI=
Subject key identifier:   5B:3A:E8:26:8E:50:FC:26:AD:DC:54:90:CB:61:59:04:D0:8D:57:68
Authority key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
Certificate issuer:       /CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Certificate serial:       0198819DFC524F28518B9CDD8A67F488183D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
Manifest number:          0735
Signing time:             Wed 06 Aug 2025 23:01:11 +0000
Manifest this update:     Wed 06 Aug 2025 23:01:11 +0000
Manifest next update:     Thu 07 Aug 2025 23:01:11 +0000
Files and hashes:         1: HDotyHGc8y1ZegUekO2VAmg15Pg.crl (hash: uC+Odt6//0pleksYAvFEuF9z7YMJqiGudgBQynJmno0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9d:fc:52:4f:28:51:8b:9c:dd:8a:67:f4:88:18:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
        Validity
            Not Before: Aug  6 23:01:11 2025 GMT
            Not After : Aug  7 23:01:11 2025 GMT
        Subject: CN=5b3ae8268e50fc26addc5490cb615904d08d5768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:bf:1d:2b:c4:00:4e:be:c8:8b:76:e9:f1:
                    1f:fe:8e:df:a9:3a:70:f4:79:af:4f:31:19:df:7f:
                    c8:1f:1d:02:ff:2e:93:e1:f5:05:e4:ba:5d:1a:dd:
                    1f:8e:45:0b:2f:14:eb:dc:65:8a:28:7c:0c:36:78:
                    76:48:7a:33:76:1c:ce:33:e4:55:a4:e0:7e:21:e8:
                    86:79:3d:f2:08:a2:0f:b6:b2:94:bc:85:34:f4:48:
                    3f:aa:63:93:e4:cb:4d:37:de:a9:b4:80:07:c3:0e:
                    8a:4b:fb:aa:77:02:8b:0a:6a:e0:0b:f4:ef:ef:81:
                    45:90:c8:86:08:22:db:98:bc:d4:22:fe:f1:6b:5d:
                    2c:02:71:3c:4e:32:03:51:10:b3:8d:10:5b:4e:e8:
                    69:9a:9e:f0:d3:b4:68:75:d3:7e:b6:9e:a1:84:bd:
                    13:6b:bb:2d:1f:9b:11:71:61:e2:68:2d:73:ec:41:
                    6c:1a:57:15:92:54:02:da:f7:f4:33:92:55:d8:35:
                    e1:bc:81:55:01:53:74:a6:ac:48:36:fd:c4:a5:9e:
                    e1:43:52:af:ff:1e:da:bc:f0:21:60:a5:f8:18:d8:
                    e9:66:7a:95:6a:cc:ad:41:20:9c:01:df:96:4d:4e:
                    00:37:67:2a:e0:12:19:c2:a2:aa:36:e0:5c:1e:99:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3A:E8:26:8E:50:FC:26:AD:DC:54:90:CB:61:59:04:D0:8D:57:68
            X509v3 Authority Key Identifier:
                keyid:1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:13:12:ae:e4:4f:d0:65:48:14:61:9e:8a:c6:79:af:c2:9c:
         65:cc:8d:c6:43:ee:1b:45:25:8d:e3:9e:b9:be:46:14:95:ed:
         28:0b:37:39:29:af:15:19:14:25:39:59:5f:32:e0:ff:3d:31:
         45:2d:5c:f1:79:5a:4c:65:67:ee:10:b4:cd:1f:03:d4:e7:00:
         30:df:6a:38:ef:1f:55:d1:cd:fc:9c:d5:89:96:fb:3a:2e:0c:
         fc:52:e4:90:e8:fc:ef:d4:50:63:15:fe:23:77:51:22:23:a0:
         d3:63:d8:aa:53:27:37:c9:51:fe:33:5e:b3:da:60:0d:d2:b9:
         fa:eb:af:c6:e7:45:e6:54:9b:4a:92:f5:b0:68:36:15:5e:e4:
         8c:17:61:22:6e:22:ab:e4:5e:a1:6c:a4:a6:26:ae:93:f8:ca:
         08:54:24:5d:ec:81:c3:9f:0a:0f:e3:c7:2b:5d:fb:0e:a1:7a:
         2a:8a:ee:70:70:cc:0f:d7:e7:51:85:86:c9:ff:1d:b7:c7:de:
         ff:23:bd:82:95:cc:d3:f6:fd:b1:26:8c:e3:0e:22:4a:40:1a:
         06:21:26:fe:3f:70:0f:b3:7a:38:cb:e3:d9:f2:08:36:61:d1:
         31:2d:14:56:b4:be:62:e3:64:ca:02:fb:db:38:84:d3:24:16:
         04:e0:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:10 2025 by rpki-client