Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File:                     HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier:          QMUx+ia4AczbzdjMp7mYVVVR7E8beguucqi2wYFcyYk=
Subject key identifier:   B5:F7:AF:93:C7:3D:A3:33:08:4C:D9:FC:21:CA:F8:A6:AC:99:AD:E9
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer:       /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial:       019874BD839E74810DD1C5D62D7FE9C3148C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number:          0E2D
Signing time:             Mon 04 Aug 2025 11:00:33 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:33 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:33 +0000
Files and hashes:         1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: 4s2tCZD18CY+doodwoxCHnVVEsm9c1LE+BlKXv20Ado=)
                          2: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (hash: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:83:9e:74:81:0d:d1:c5:d6:2d:7f:e9:c3:14:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
        Validity
            Not Before: Aug  4 11:00:33 2025 GMT
            Not After : Aug  5 11:00:33 2025 GMT
        Subject: CN=b5f7af93c73da333084cd9fc21caf8a6ac99ade9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:09:2b:6e:4e:23:ac:1b:f9:2e:d7:fe:3b:
                    d8:41:27:75:8f:ce:6b:3b:50:2c:8e:91:5a:49:12:
                    a9:d9:40:10:d7:1a:43:98:be:a6:42:06:55:9f:4b:
                    a7:29:d2:70:6f:6d:01:bb:2f:1d:8a:60:bf:83:77:
                    58:7a:ff:22:28:6e:87:d9:73:23:89:b3:6b:da:ae:
                    d9:fb:18:99:bb:b8:2d:51:c0:17:f1:7b:40:db:98:
                    28:0f:d5:35:3d:ca:d9:d9:1e:74:22:35:d3:6f:45:
                    9c:fa:ab:e6:67:77:65:de:c4:ad:fb:20:9b:f3:7a:
                    95:f2:44:45:c4:25:6f:9a:2b:fd:e2:a0:60:02:c3:
                    63:90:f8:63:f5:a1:36:1b:c9:2c:06:c2:8a:01:dc:
                    b2:f1:e3:6e:10:7e:3d:49:f5:ac:24:84:6d:ae:8d:
                    41:89:45:a1:0b:53:14:87:e6:12:0c:38:28:5e:52:
                    5f:c1:5a:f0:a8:06:15:26:cd:19:a6:7c:19:9a:1e:
                    f6:eb:3f:ab:7d:a0:c9:6f:6a:83:40:53:a0:a2:87:
                    98:fd:b0:bc:5d:1b:c7:39:ff:ec:f2:df:10:07:c4:
                    81:42:95:ef:0d:bb:d7:1c:37:75:6f:16:ea:06:86:
                    06:9b:e3:17:75:70:2f:a8:0d:4b:82:88:69:d0:84:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F7:AF:93:C7:3D:A3:33:08:4C:D9:FC:21:CA:F8:A6:AC:99:AD:E9
            X509v3 Authority Key Identifier:
                keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:89:7e:80:a5:39:04:bf:95:5b:c2:8b:7f:f5:07:26:a8:
         0e:18:75:00:f9:e7:43:ba:50:6f:91:43:e2:cf:d7:d6:d5:17:
         54:f8:72:6c:b4:e4:42:ae:09:64:ed:79:3e:60:e3:91:56:06:
         55:d6:f3:77:45:f4:75:9a:7c:c8:c3:27:d7:7d:e7:d6:a3:b1:
         80:e2:fe:28:e8:c3:0a:88:4b:68:9d:b3:7b:35:11:a3:7a:e8:
         dd:44:df:29:ff:54:48:fb:83:ce:fb:4f:9d:28:2e:33:2b:a9:
         70:f0:a6:cc:7c:8e:c7:c5:48:f1:ef:86:64:e4:69:54:b6:ae:
         77:29:2e:01:2b:ad:dd:7d:5e:55:8a:fe:39:c4:1b:e9:af:d6:
         1d:a1:e9:9b:3f:73:b6:5d:e1:5a:77:51:76:0c:2a:4a:59:1d:
         9d:22:f4:76:b2:40:cb:5f:1b:a5:43:79:86:0d:f6:bc:df:46:
         32:97:c2:53:3e:88:98:86:1c:d3:d4:07:88:44:96:0d:06:7a:
         57:d8:4c:ee:34:31:ca:ea:aa:b3:06:da:03:34:80:e6:f1:77:
         d8:86:c2:1a:18:42:84:53:4f:89:14:3f:aa:41:d0:40:5b:60:
         e5:94:a8:17:ab:b6:f4:2f:66:f6:1e:fc:88:55:7e:cd:e1:a6:
         50:86:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:57 2025 by rpki-client