Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File:                     Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier:          T/Ir1rhnET4u+y5j9GSPr1kb6JnbErSP2vXufP0h6jA=
Subject key identifier:   61:B1:D0:1A:12:B1:59:71:93:0F:12:D1:DB:A5:C9:46:FA:BC:B2:E8
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer:       /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial:       01987DC128E59D6F830DBFB26144D99CD6FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number:          15AE
Signing time:             Wed 06 Aug 2025 05:01:07 +0000
Manifest this update:     Wed 06 Aug 2025 05:01:07 +0000
Manifest next update:     Thu 07 Aug 2025 05:01:07 +0000
Files and hashes:         1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: jT0s0wTbVtDfL5ryB9YNfpbXM+46OBQflrNI55t6Hn8=)
                          2: yEdA_N7rWdELvU2ot9EEaCyQPBo.roa (hash: 8ht/7rJO+ixz8Sl+2g/oVNj6ivGQ0TQ42doSDeerWxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c1:28:e5:9d:6f:83:0d:bf:b2:61:44:d9:9c:d6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
        Validity
            Not Before: Aug  6 05:01:07 2025 GMT
            Not After : Aug  7 05:01:07 2025 GMT
        Subject: CN=61b1d01a12b15971930f12d1dba5c946fabcb2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:72:2f:2c:e8:ef:f7:64:12:24:75:f2:ac:
                    d2:c9:60:65:3e:e8:dc:8e:ae:c0:45:2e:e7:32:53:
                    2a:34:ee:ab:5d:2f:39:15:7a:a1:9c:fd:fc:5b:0f:
                    0f:91:a0:c0:5c:b7:17:9d:b5:3e:93:f4:c3:c6:b9:
                    7f:e3:c3:4d:22:91:7d:ac:82:24:71:b0:6e:f5:02:
                    46:60:16:cf:5d:59:39:1c:b6:8a:58:f5:47:f6:04:
                    d7:7f:23:3c:61:ff:ed:0c:00:d7:22:e8:b7:c3:89:
                    10:13:6b:78:f1:01:b9:16:78:d4:2e:3e:29:fd:4a:
                    55:f1:46:1b:59:55:72:3f:05:29:42:ca:c0:f9:fc:
                    9e:0c:1e:0c:fc:00:7a:3f:a3:6d:79:2a:0b:24:11:
                    83:06:11:cc:04:6d:50:fb:69:41:68:52:d0:97:ea:
                    79:37:8b:d1:41:9c:8e:ab:01:f1:fa:80:58:96:a9:
                    d8:36:24:29:86:3a:34:1f:bc:c7:e1:49:22:41:b8:
                    9e:48:1c:03:03:bc:22:74:36:7d:9e:56:54:7c:de:
                    25:bd:23:81:5d:a3:b0:c4:6d:9c:a7:a3:4a:85:e3:
                    3c:0b:ad:af:6f:92:0f:17:88:00:8f:c3:90:67:2a:
                    55:d0:4e:39:35:6d:d3:f3:46:70:2e:00:97:19:13:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B1:D0:1A:12:B1:59:71:93:0F:12:D1:DB:A5:C9:46:FA:BC:B2:E8
            X509v3 Authority Key Identifier:
                keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:5f:dd:63:21:c3:e8:dc:2f:c0:11:fb:e3:2a:e1:35:12:
         ef:51:76:7c:96:27:09:73:9a:9b:52:ee:7f:49:45:4e:7d:8f:
         e7:ed:d0:f6:3c:52:38:8d:9e:6b:22:bc:d2:24:05:f6:27:d4:
         32:fb:36:d9:a5:95:83:fb:8c:ae:2d:07:a6:5a:40:1c:1f:bb:
         19:06:83:6e:eb:60:f0:a0:d3:bb:2b:0e:db:ec:49:f2:87:1c:
         1c:ad:ea:fc:3e:c3:c0:a2:8a:74:a0:d1:87:a3:8c:68:e7:18:
         5a:a1:ea:7e:bc:db:77:40:8e:21:37:1b:1e:45:37:0b:e8:15:
         16:79:3f:a6:26:d0:aa:13:8d:54:ae:1f:2f:58:e8:c3:cc:d7:
         53:eb:6d:c4:d6:bb:3b:48:0a:e1:9d:12:d4:52:48:f2:f2:79:
         6d:74:cc:50:40:a3:64:21:8c:f2:38:d7:62:f6:83:ea:52:31:
         1a:2e:b9:48:1d:c0:ca:8a:ab:bd:52:93:ac:7e:92:5f:8d:f2:
         e1:1b:dd:1a:09:ef:f2:57:a3:d9:92:a7:3d:d8:83:9d:0f:ec:
         ab:71:57:d9:ca:90:e9:9d:6d:39:79:61:e7:24:27:d2:7d:e8:
         66:22:74:dc:75:fc:4f:6e:76:35:e1:a4:53:2f:cb:90:7b:b6:
         38:01:4f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:15 2025 by rpki-client