Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File:                     HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier:          hecWgPvePq1RwVpl8n6uhr03yqckdvUXO1ZUhdEV9yg=
Subject key identifier:   44:A2:42:AD:F6:2A:79:21:17:5E:61:B6:83:BA:43:32:7E:6F:40:32
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer:       /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial:       019880540B983E16FCA7A47FEDFF95060E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number:          1623
Signing time:             Wed 06 Aug 2025 17:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 17:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:48 +0000
Files and hashes:         1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: D1sY1WYP+PDiYts05f1rj4xdwZt8rZSMpYgUjqdRDM0=)
                          2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:0b:98:3e:16:fc:a7:a4:7f:ed:ff:95:06:0e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
        Validity
            Not Before: Aug  6 17:00:48 2025 GMT
            Not After : Aug  7 17:00:48 2025 GMT
        Subject: CN=44a242adf62a7921175e61b683ba43327e6f4032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:f6:fd:37:62:ea:5a:07:3b:10:47:f4:3d:
                    21:db:27:bc:43:04:37:f2:df:3c:72:e8:3b:6a:e6:
                    38:ef:bc:fc:e8:ca:a0:4f:09:96:93:98:4e:d9:21:
                    fb:d3:7a:80:7f:1c:e7:52:79:61:91:52:33:2c:2e:
                    08:08:13:66:dc:13:c3:66:8f:15:78:47:d1:22:a4:
                    dd:e1:8b:6e:fa:9d:7d:9a:c0:ef:e9:08:84:60:98:
                    13:2f:9d:95:99:da:34:b6:33:89:b2:28:17:04:21:
                    93:92:83:28:4a:8d:f4:30:97:17:c8:7e:e6:72:75:
                    7b:bd:65:3d:f3:2f:73:37:6f:c1:65:2a:23:b8:78:
                    35:cb:02:23:5a:e2:7f:f4:1f:95:12:4f:70:4b:94:
                    fd:51:cf:d4:11:be:31:4f:58:8a:6f:20:f5:76:73:
                    01:62:02:77:85:23:9c:b1:17:04:04:9e:f1:fd:18:
                    18:50:1d:44:04:54:50:1e:32:4c:fe:7b:da:8f:4e:
                    2d:80:dd:0c:ed:bd:79:53:19:33:cc:34:d2:2d:2d:
                    bf:d4:70:07:ed:d3:10:bc:11:ef:33:e5:f5:e6:bc:
                    5b:ac:f8:e2:8d:30:f9:1b:41:d4:82:93:27:b0:a8:
                    80:7b:5c:40:c8:24:7e:aa:cc:77:6f:24:d5:3e:72:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A2:42:AD:F6:2A:79:21:17:5E:61:B6:83:BA:43:32:7E:6F:40:32
            X509v3 Authority Key Identifier:
                keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:da:ba:42:41:7c:ad:fa:5d:af:ba:51:c4:24:9e:7f:30:7a:
         76:01:53:94:06:e6:c2:e2:2d:3e:0f:43:65:f1:6b:49:fa:0d:
         8c:4b:77:18:59:e8:c9:0b:48:4e:b0:69:a1:bc:e4:a7:a4:5b:
         26:dd:4b:93:ab:59:ab:6c:2f:4e:95:70:99:14:b8:4e:15:35:
         c5:50:16:dc:69:11:8e:2d:95:c3:8d:86:78:bb:45:63:66:e9:
         67:45:31:1e:c6:64:23:03:b3:b7:6f:90:62:d0:f4:f7:dd:b9:
         2a:44:8a:ed:e4:4d:82:91:7d:6c:08:20:c5:d1:e1:c8:56:18:
         ef:22:c1:8b:20:67:c8:6f:b1:0a:f8:89:79:b9:77:a8:31:c0:
         4b:61:14:95:1a:1f:2f:1d:b8:75:27:58:78:17:6d:78:63:93:
         88:8b:e2:b4:7c:ef:7f:c5:1f:b9:61:28:9a:08:40:e9:3c:d0:
         06:ec:26:8f:05:e3:18:84:96:e7:18:0f:17:fb:e9:f6:95:42:
         3b:f5:53:07:cb:88:9b:c7:43:03:ca:72:a3:b4:d8:b9:93:dd:
         47:63:3b:f6:c2:3f:c6:14:ae:40:87:51:ca:33:2b:96:98:d4:
         a9:84:f5:f4:59:d1:97:2e:b5:c9:93:c2:f3:69:5f:39:61:8c:
         02:3d:f7:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAVAuYPhb8p6R/7f+VBg5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjMzZWVlNjI0YzE5MmM2YzdkYWRhMTQzMmRlMGI5ZTc4
YjA5YmEwHhcNMjUwODA2MTcwMDQ4WhcNMjUwODA3MTcwMDQ4WjAzMTEwLwYDVQQD
Eyg0NGEyNDJhZGY2MmE3OTIxMTc1ZTYxYjY4M2JhNDMzMjdlNmY0MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeb2/Tdi6loHOxBH9D0h2ye8QwQ3
8t88cug7auY477z86MqgTwmWk5hO2SH703qAfxznUnlhkVIzLC4ICBNm3BPDZo8V
eEfRIqTd4Ytu+p19msDv6QiEYJgTL52Vmdo0tjOJsigXBCGTkoMoSo30MJcXyH7m
cnV7vWU98y9zN2/BZSojuHg1ywIjWuJ/9B+VEk9wS5T9Uc/UEb4xT1iKbyD1dnMB
YgJ3hSOcsRcEBJ7x/RgYUB1EBFRQHjJM/nvaj04tgN0M7b15UxkzzDTSLS2/1HAH
7dMQvBHvM+X15rxbrPjijTD5G0HUgpMnsKiAe1xAyCR+qsx3byTVPnLG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESiQq32KnkhF15htoO6QzJ+b0AyMB8GA1UdIwQY
MBaAFBwjPu5iTBksbH2toUMt4Lnniwm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYt
NTdhOTUxZjQ5OTMwLzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYtNTdhOTUxZjQ5OTMw
LzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9q6QkF8
rfpdr7pRxCSefzB6dgFTlAbmwuItPg9DZfFrSfoNjEt3GFnoyQtITrBpobzkp6Rb
Jt1Lk6tZq2wvTpVwmRS4ThU1xVAW3GkRji2Vw42GeLtFY2bpZ0UxHsZkIwOzt2+Q
YtD09925KkSK7eRNgpF9bAggxdHhyFYY7yLBiyBnyG+xCviJebl3qDHAS2EUlRof
Lx24dSdYeBdteGOTiIvitHzvf8UfuWEomghA6TzQBuwmjwXjGISW5xgPF/vp9pVC
O/VTB8uIm8dDA8pyo7TYuZPdR2M79sI/xhSuQIdRyjMrlpjUqYT19FnRly61yZPC
82lfOWGMAj33Gg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:55 2025 by rpki-client