Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File:                     HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier:          VsFfbZXEV8CfRHbHx9ez3KAnXeZbsTB5IMNM5vt6pmQ=
Subject key identifier:   F6:B2:A0:C4:49:D8:E5:05:34:F5:B9:4D:3C:9C:AF:53:29:E3:25:F6
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer:       /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial:       019879AF4384CBCEE2E15A44A51BBACD2020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number:          0F5F
Signing time:             Tue 05 Aug 2025 10:03:05 +0000
Manifest this update:     Tue 05 Aug 2025 10:03:05 +0000
Manifest next update:     Wed 06 Aug 2025 10:03:05 +0000
Files and hashes:         1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: olHaxcEkGJYrUe/AeWax8fFFYHsjWHFJwxfYySXFJNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:af:43:84:cb:ce:e2:e1:5a:44:a5:1b:ba:cd:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
        Validity
            Not Before: Aug  5 10:03:05 2025 GMT
            Not After : Aug  6 10:03:05 2025 GMT
        Subject: CN=f6b2a0c449d8e50534f5b94d3c9caf5329e325f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:05:46:b8:0c:ab:49:a6:eb:e9:f9:cc:fa:
                    b0:78:26:5c:42:72:17:83:54:59:06:14:50:a1:50:
                    8f:0e:a9:c8:c5:c5:9d:18:28:6d:f0:48:3a:d9:5a:
                    6a:8b:24:5e:64:7c:f2:70:c6:71:17:2d:f9:71:31:
                    f7:7c:7d:74:31:04:ed:c9:38:9a:7b:ed:cc:c4:06:
                    5b:32:34:fc:9a:2d:cf:28:8f:d1:19:9e:12:87:ab:
                    c4:af:c3:e9:f6:5e:83:92:d8:e4:bf:1b:96:a1:34:
                    7d:e1:cd:0c:e4:a0:0c:b3:ff:78:b2:89:4a:47:0c:
                    68:35:64:db:b0:d6:22:4a:12:2d:4c:d9:b0:a8:6b:
                    4c:20:ff:a7:a0:6c:1a:f6:44:8f:f2:de:d0:f5:67:
                    e5:a6:46:c6:8b:36:e5:9e:cb:07:bd:94:2b:d7:05:
                    4b:d1:9a:99:e5:17:39:1b:ae:61:56:d4:cc:cc:e8:
                    70:23:b7:25:4c:3f:ea:d3:ef:ef:10:2d:08:82:fa:
                    8e:80:90:a8:5b:c8:c2:6f:2d:2f:87:3e:3f:52:34:
                    66:07:9d:c6:57:8e:d7:48:35:e8:42:26:75:de:45:
                    74:66:3d:09:9e:3d:0f:ae:3d:a2:2a:33:0f:dd:c5:
                    1f:e8:af:1c:0d:cf:cb:d7:bc:85:2e:47:dd:f0:d5:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B2:A0:C4:49:D8:E5:05:34:F5:B9:4D:3C:9C:AF:53:29:E3:25:F6
            X509v3 Authority Key Identifier:
                keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:8e:77:41:e4:b6:40:ba:ba:f8:97:1e:9b:e8:c2:b4:ef:
         9f:fd:5e:5c:a7:5f:98:f8:ef:d7:9a:16:ab:29:d9:7f:bc:58:
         6b:54:b5:69:5d:22:40:36:bd:15:8b:82:03:eb:8b:70:df:8d:
         f6:24:48:66:49:1e:ba:63:7f:77:5a:8f:72:ea:d1:94:b9:31:
         3e:c5:26:ac:aa:1d:d6:db:64:51:34:60:34:01:b1:83:04:9d:
         b7:60:dd:85:f5:a9:2a:8d:c4:11:de:3c:f9:74:ac:6a:f2:1f:
         36:50:83:e5:cf:a8:89:a0:bf:27:eb:9d:8f:44:1f:da:04:ff:
         de:c9:c9:61:43:11:ad:35:d0:95:68:da:30:1a:ed:37:ac:bc:
         d7:5a:0a:61:df:a0:cf:a8:1d:81:f8:f4:21:e0:71:dd:2a:59:
         a6:16:4e:e0:6e:ee:42:61:4f:d7:7d:30:64:c5:87:4f:1b:f5:
         e7:ac:80:14:c7:70:b2:a9:bf:71:05:25:e0:5b:a2:bf:c3:b7:
         2d:e6:6c:53:d3:01:47:50:a5:35:b1:83:ee:30:4b:71:2f:3d:
         ec:eb:ed:e9:55:3a:7a:33:a5:86:60:59:94:75:36:d0:7f:a7:
         9b:7e:d3:83:29:c2:5f:f7:66:50:5d:15:9b:37:d0:1f:42:46:
         cf:56:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:28 2025 by rpki-client