Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File:                     HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier:          zgvA2cDwS9fSgbvuYcFPurRyrzApwa1ebkL1YDSwkGY=
Subject key identifier:   A8:FF:6D:6C:BF:E2:8F:DE:03:E2:FE:BE:04:F7:2E:15:A1:F9:B6:0C
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer:       /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial:       01989223B2B69A52B2346FFBC616B6CC4C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number:          017C
Signing time:             Sun 10 Aug 2025 04:01:09 +0000
Manifest this update:     Sun 10 Aug 2025 04:01:09 +0000
Manifest next update:     Mon 11 Aug 2025 04:01:09 +0000
Files and hashes:         1: 7sLKGVGT_a4aX4JcAS8Cl-dwrZk.roa (hash: IALVV6z17EuCMGIEd1EYplZQwtixCOladk+EbbZKzBM=)
                          2: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: Ganm1ny6TgUvO88VsadczHa7jb8zYjUjfWT4K8aa1rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:23:b2:b6:9a:52:b2:34:6f:fb:c6:16:b6:cc:4c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
        Validity
            Not Before: Aug 10 04:01:09 2025 GMT
            Not After : Aug 11 04:01:09 2025 GMT
        Subject: CN=a8ff6d6cbfe28fde03e2febe04f72e15a1f9b60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:8b:32:06:7b:60:80:94:85:cb:eb:36:95:
                    53:af:0d:29:0f:e2:49:19:8c:28:31:da:53:5a:64:
                    85:6c:e1:38:d2:61:2e:7c:6e:44:04:26:49:3c:66:
                    92:5e:9e:89:34:35:be:e3:e4:37:42:51:32:ff:ba:
                    22:a4:2f:04:61:87:ee:19:a1:30:50:e7:11:96:7b:
                    7f:21:e6:35:b4:3a:7d:0b:4b:a4:ad:a3:29:45:e8:
                    5f:33:96:29:3b:53:ab:5b:a3:41:32:9f:b9:62:c0:
                    82:f0:16:d5:58:62:1f:21:0e:93:12:3a:82:cd:2f:
                    18:f6:60:9b:14:48:4e:cc:13:65:9c:11:1d:62:9f:
                    fa:51:c3:86:af:2b:8b:df:41:67:53:67:30:df:c6:
                    10:33:79:31:7b:d2:b0:32:e2:d3:2a:40:58:8d:c6:
                    9e:f3:bb:17:92:17:e8:98:97:24:29:ba:01:c0:50:
                    02:d4:41:fd:47:d2:2b:b1:3b:b4:d1:4f:b8:d8:d9:
                    29:2d:de:28:5d:6f:d7:a7:09:1a:ad:05:62:ed:0c:
                    32:bc:b8:7d:15:2e:83:57:02:13:2f:19:c2:f8:85:
                    90:2a:5c:ba:15:c7:4d:26:fc:97:ba:de:a5:db:6a:
                    3f:46:53:c3:de:21:37:58:1c:15:71:63:b5:15:ae:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FF:6D:6C:BF:E2:8F:DE:03:E2:FE:BE:04:F7:2E:15:A1:F9:B6:0C
            X509v3 Authority Key Identifier:
                keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:b4:da:06:22:37:94:b3:cf:ed:6e:78:cf:f4:2e:95:c8:
         b9:4a:fa:7e:14:e8:7e:9f:38:05:b0:29:9e:30:cf:f4:60:a3:
         cd:56:44:48:40:2a:0c:5b:0e:e0:af:c4:68:e4:82:cf:6d:a8:
         80:d7:fd:ca:55:f7:b8:92:e0:47:59:03:42:05:3c:bf:09:a3:
         77:e5:ff:5d:d0:f4:2d:cb:05:b1:55:55:58:c5:28:0b:ff:36:
         d2:59:48:28:39:47:d4:73:b4:a2:87:d8:91:a9:c2:82:92:c7:
         24:fc:9f:cc:b3:7b:dc:6c:07:9a:27:4b:b2:55:0f:8d:bd:38:
         c6:5f:97:5e:93:bf:76:54:1e:db:1a:87:76:f6:7a:6d:f0:cd:
         e4:88:fb:05:1c:5b:0d:04:c6:67:32:33:94:a4:08:fa:27:17:
         37:0a:b4:86:45:0b:01:25:98:3d:e7:cb:ab:18:b0:d4:23:1d:
         90:2f:2a:41:21:40:33:c8:e6:cf:29:16:5e:e7:dd:4d:d6:70:
         ae:31:34:aa:02:64:a4:03:68:b6:fb:1d:60:c0:c0:05:8c:57:
         3b:97:fd:e7:cf:0e:b6:cb:df:89:46:a3:35:7f:73:81:ef:42:
         c6:0c:54:d2:b4:fb:24:b8:7d:c7:20:ba:ae:f2:20:57:81:20:
         3e:4f:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:40:44 2025 by rpki-client