Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
File:                     hprNGeI6gWZEutDooSuG4SiK0zw.mft (raw, json)
Hash identifier:          Po/6m77pR6jGV4I1uD2i+3bA6kKG4YJ/TzhbQXC2GlE=
Subject key identifier:   E8:5E:5B:E7:E0:A0:24:D9:52:7A:EE:C1:36:E9:95:0F:DD:72:5C:DF
Authority key identifier: 86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
Certificate issuer:       /CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Certificate serial:       01987F788EC1BA79A17584973E86449A3CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
Manifest number:          1006
Signing time:             Wed 06 Aug 2025 13:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 13:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 13:01:03 +0000
Files and hashes:         1: hprNGeI6gWZEutDooSuG4SiK0zw.crl (hash: C0X64ZhnETxZn7rDkvYEDl5Y8MRSbGrMyKmPOKNo+9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:78:8e:c1:ba:79:a1:75:84:97:3e:86:44:9a:3c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869acd19e23a816644bad0e8a12b86e1288ad33c
        Validity
            Not Before: Aug  6 13:01:03 2025 GMT
            Not After : Aug  7 13:01:03 2025 GMT
        Subject: CN=e85e5be7e0a024d9527aeec136e9950fdd725cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:33:05:73:15:43:32:52:5a:db:a0:5e:e5:
                    8a:e7:01:ed:eb:4f:18:f6:77:ed:fa:f2:34:fd:7b:
                    2f:9d:37:66:89:b5:69:88:c1:9b:72:1d:ae:82:70:
                    ac:20:4f:a8:f1:6d:77:cf:59:52:39:43:2e:e0:03:
                    6f:db:dd:7c:9d:10:43:a3:e4:8e:02:b3:a4:c4:33:
                    a9:1d:78:d3:2f:bf:50:32:08:c5:8f:92:dd:03:12:
                    75:89:28:f0:37:62:96:d1:f9:85:2b:c7:4e:f3:ec:
                    79:e0:42:62:6a:82:f4:e6:02:f2:ad:3f:1b:21:95:
                    df:23:ce:72:d7:f5:f4:26:c7:d9:23:14:a7:4b:a8:
                    6e:66:9c:0d:a7:b6:1a:4f:7e:9f:3e:99:f2:de:1e:
                    7e:e7:76:a2:21:0d:27:cb:2b:62:bc:46:b6:ab:08:
                    2b:be:ae:f0:87:63:10:f7:19:34:b8:6d:0d:94:b7:
                    bd:95:32:aa:84:86:7b:cb:06:8e:ed:55:d8:0a:be:
                    5d:7c:42:8b:b8:09:46:ae:c4:2c:43:df:45:24:cb:
                    6e:1e:80:04:f5:9b:1e:0c:8b:11:e4:f0:07:14:d9:
                    14:b4:5f:80:7d:0b:47:f3:c6:72:7e:3e:17:18:da:
                    95:cb:28:cc:44:50:71:42:63:11:0a:ea:fe:ed:2e:
                    22:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:5B:E7:E0:A0:24:D9:52:7A:EE:C1:36:E9:95:0F:DD:72:5C:DF
            X509v3 Authority Key Identifier:
                keyid:86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e2:c7:8b:ac:5c:1d:94:9d:1f:8a:ab:6a:23:54:b1:66:9d:
         db:d5:d7:27:f8:61:73:4b:27:81:2a:8c:a2:1e:fc:96:51:73:
         90:b1:66:83:e5:93:a5:50:92:08:70:74:4d:57:cd:46:01:9c:
         ac:92:14:0e:b9:6d:21:2c:3f:7a:47:e3:5a:66:0c:23:49:84:
         d3:63:46:84:72:89:da:6e:fc:c2:b3:64:ff:76:07:a7:05:69:
         c8:a3:76:30:69:85:2a:d4:26:22:92:30:28:05:c1:83:2a:e2:
         f5:68:7d:c3:d7:cd:a2:5a:e0:44:fd:8f:2b:d2:e3:34:5f:c3:
         92:ca:26:55:bf:3e:33:ab:57:32:59:10:67:a9:fb:9d:74:a1:
         3a:d7:82:8f:33:af:58:1f:e9:60:d7:29:9c:4a:35:86:48:45:
         62:1f:1e:ad:b4:19:03:b3:3d:5a:14:22:66:63:39:7e:c7:10:
         4a:3c:f0:b7:63:8f:f4:e8:47:b9:89:1f:9a:a5:7a:a4:50:e0:
         8f:97:81:b6:4e:06:ab:74:11:67:ed:d3:99:5c:75:dc:73:b9:
         0c:1d:23:4c:97:c6:1a:62:11:dc:8b:5f:17:ae:d4:cc:d7:ea:
         88:42:66:77:ea:8a:66:f4:92:d3:b0:35:6d:9d:03:62:a4:b1:
         2c:64:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:06 2025 by rpki-client