Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File:                     HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier:          ia7tUFbKdvz+4RfJfSAttZy+TLL5pwleKD5kuRpezd8=
Subject key identifier:   73:06:21:FF:C4:32:90:D1:21:AD:CC:96:C4:82:E1:4F:CC:D3:2C:EE
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer:       /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial:       01988CFD9F7993896FE89F846848A6BBD7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number:          1514
Signing time:             Sat 09 Aug 2025 04:01:28 +0000
Manifest this update:     Sat 09 Aug 2025 04:01:28 +0000
Manifest next update:     Sun 10 Aug 2025 04:01:28 +0000
Files and hashes:         1: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: tF8TvTzQf7yWk7BZyJbEHp5GTNQBgVWFE2BNRGNStYg=)
                          2: W-OtDTrcD4enIHqlL53Q8gJVqVg.roa (hash: MIoWyZfzBnM9tbFHcQ1uCgLljDFhySK8a9b/Bqx5jVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fd:9f:79:93:89:6f:e8:9f:84:68:48:a6:bb:d7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
        Validity
            Not Before: Aug  9 04:01:28 2025 GMT
            Not After : Aug 10 04:01:28 2025 GMT
        Subject: CN=730621ffc43290d121adcc96c482e14fccd32cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:29:e1:a0:90:9a:93:30:19:4f:41:ee:84:
                    41:ca:61:aa:fb:68:c6:42:16:f3:f5:36:ea:c1:bb:
                    9e:62:8c:ff:8a:77:f7:19:3e:e5:88:5f:e9:09:1a:
                    6e:ed:93:f2:8e:13:49:6d:80:86:0f:6e:ef:78:14:
                    c2:82:6b:53:8f:d6:4f:ae:c7:40:cc:fe:45:40:2c:
                    54:ac:03:61:86:9c:bc:bd:75:67:18:6e:9c:af:68:
                    4a:9c:11:7a:0d:9b:97:dc:40:b9:bd:99:23:ef:a9:
                    6d:49:ab:1d:32:82:e0:fd:f0:98:e2:6d:a7:b3:2d:
                    99:ca:6e:be:81:69:20:67:3b:fe:42:69:bd:c4:1c:
                    d3:ab:eb:34:66:7b:7c:54:9e:76:af:ea:d0:e8:71:
                    39:b5:38:ad:3f:b4:91:a9:d7:c0:24:92:23:4b:14:
                    a2:37:0f:bf:5b:fd:cc:4b:9e:dc:42:bf:d0:fc:3a:
                    67:7d:8b:9d:70:88:17:86:b9:8a:9e:b1:2b:ba:58:
                    e7:0d:d8:01:cc:51:0a:e1:99:d3:67:e4:23:3b:dc:
                    8d:04:72:d5:50:ff:8a:ed:cf:fe:68:68:66:60:41:
                    31:ef:38:b6:23:8b:e3:06:f8:0f:d1:12:46:28:9a:
                    47:ec:31:87:4c:83:c4:7b:17:95:54:d3:10:4f:4c:
                    6e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:06:21:FF:C4:32:90:D1:21:AD:CC:96:C4:82:E1:4F:CC:D3:2C:EE
            X509v3 Authority Key Identifier:
                keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d5:9e:58:76:2f:ef:64:5d:df:84:81:86:e8:fc:da:d0:55:
         fd:5d:ec:62:32:4d:a5:69:04:f1:ca:d1:ff:73:61:f1:40:53:
         0a:ea:af:bf:33:5c:eb:f0:30:57:43:4c:72:5b:b1:76:4d:57:
         53:ab:0a:48:f6:38:5e:4e:40:f6:7d:2d:d6:a9:b3:23:e3:52:
         cb:61:d7:5e:d9:ae:e0:f4:7b:15:72:21:bb:35:73:2b:c5:24:
         98:06:05:b9:6e:7a:04:c3:f1:72:ff:d5:11:0e:01:0d:34:bd:
         74:bf:76:3a:d8:46:a7:41:36:75:81:d9:ee:c2:7a:95:35:27:
         d0:5a:78:48:42:be:51:4b:f1:fc:a4:f8:ec:71:62:83:54:1b:
         4f:d8:08:75:2a:0d:aa:99:4d:c3:2e:e5:35:54:75:6a:2d:a9:
         54:6f:05:7a:ff:8c:95:20:1d:d0:24:e5:92:4d:7c:b5:8f:57:
         bc:b4:c4:dc:35:39:28:44:37:a5:a0:d3:e4:c0:96:c5:d6:1c:
         ad:a0:3d:54:98:bb:d0:28:df:81:9b:7d:16:7a:3f:51:2a:25:
         0e:5e:bc:a3:84:ba:73:26:c8:67:b1:bb:8f:4c:d4:02:90:6f:
         c2:da:4b:ad:22:00:f7:1a:b8:40:0d:1c:05:14:61:91:95:76:
         58:be:4d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:50 2025 by rpki-client