Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File:                     HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier:          gJmZ12g7rdyjYSKSc62NTwOfW6JhorWC9UPYRNrseG0=
Subject key identifier:   2B:49:A5:BE:9C:7F:87:78:50:AF:15:85:BF:77:79:33:E5:53:92:42
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer:       /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial:       01988920FD9D6D2AB709F4C104D3F0D2B30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number:          0CB5
Signing time:             Fri 08 Aug 2025 10:01:37 +0000
Manifest this update:     Fri 08 Aug 2025 10:01:37 +0000
Manifest next update:     Sat 09 Aug 2025 10:01:37 +0000
Files and hashes:         1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: A62HWfhafh4ETj7Xg6499yoMkRn7o77t51gr6eGjDoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:20:fd:9d:6d:2a:b7:09:f4:c1:04:d3:f0:d2:b3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
        Validity
            Not Before: Aug  8 10:01:37 2025 GMT
            Not After : Aug  9 10:01:37 2025 GMT
        Subject: CN=2b49a5be9c7f877850af1585bf777933e5539242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:6e:0d:e4:10:9a:06:38:f5:24:09:64:4d:
                    da:f1:be:bb:50:ea:77:3f:3a:fa:1d:86:ab:7c:28:
                    67:e0:13:d3:ae:71:8e:49:22:3d:e2:83:72:60:f8:
                    fe:3a:cb:40:67:1d:ab:4f:e2:8d:e3:16:f2:ee:ae:
                    40:7c:39:2d:dc:73:d9:e3:94:fc:74:3a:2d:ba:7b:
                    74:ab:12:74:bd:69:83:c8:89:37:53:05:a4:23:3c:
                    4d:8b:b6:03:11:d7:81:cd:33:80:3f:48:d2:11:49:
                    84:83:be:2b:d3:c1:72:55:a8:ca:7c:30:97:a1:77:
                    b4:44:c2:1f:0b:19:ba:2f:a7:b7:58:3c:fa:36:80:
                    4c:1f:16:e1:a8:3d:38:1b:9d:76:cd:41:76:51:a2:
                    00:0e:e7:ac:12:ae:2b:69:7d:be:38:4f:c1:56:2a:
                    41:04:0f:d6:00:8f:02:70:bd:88:06:58:f6:02:38:
                    88:32:d7:2a:26:31:2f:a6:ea:e6:cb:5d:18:99:a2:
                    33:dc:62:92:a0:39:56:89:42:47:18:05:4f:13:8c:
                    75:3d:fc:5b:75:16:30:2d:a6:c4:81:4d:6a:f9:45:
                    fe:ed:e2:91:bc:0a:5a:cc:99:71:54:61:f4:55:b0:
                    f8:bf:84:c2:7e:04:7d:10:d2:6d:49:81:75:66:c3:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:49:A5:BE:9C:7F:87:78:50:AF:15:85:BF:77:79:33:E5:53:92:42
            X509v3 Authority Key Identifier:
                keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:ea:ef:1c:13:d6:06:93:32:93:9d:c2:48:2f:35:84:96:
         1a:f6:65:49:fb:ea:5d:55:29:4d:cb:dd:f3:7b:99:83:d0:7f:
         c4:a7:2d:98:9c:23:cb:7c:fd:7d:f6:29:54:a4:af:13:04:05:
         b1:68:04:e5:4d:5f:c8:af:24:89:ef:b0:f7:55:47:19:41:4d:
         e9:83:2e:d2:9d:03:fe:41:36:ba:fe:78:e6:2d:2d:fb:0a:7b:
         14:d9:1e:2f:9f:81:61:5b:20:39:bd:91:a5:4f:c8:6e:44:31:
         16:a7:81:0e:5d:3c:36:07:00:0a:96:12:c3:3d:a7:5a:bc:c7:
         ad:10:8e:d0:e0:fa:30:a9:98:b4:36:8d:9c:66:84:b1:14:6a:
         4f:17:2e:2c:ab:cf:31:19:94:49:34:0a:95:ee:37:63:f5:e5:
         20:c3:21:66:6e:61:14:bd:67:9e:13:7b:2d:e3:9d:b6:da:51:
         70:00:d6:82:b8:f3:c8:8f:cd:32:11:59:50:c3:f2:80:54:4e:
         35:10:dd:d5:3e:bc:d3:0d:af:12:60:93:ff:e9:a6:96:63:67:
         8b:f3:f2:28:9e:f1:1f:9c:e5:85:86:c0:01:92:a9:27:22:4a:
         27:e9:bd:b7:fe:c8:60:27:1c:d2:24:dc:98:30:f1:a0:0f:e4:
         25:6e:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:41 2025 by rpki-client