Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
File:                     Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft (raw, json)
Hash identifier:          mxj0pXufWhnNhOdO2mUGhGkC6i7bKPJ2VJxnNiqBdjA=
Subject key identifier:   3A:16:30:B3:BD:F1:13:F7:9D:04:56:E7:DF:C2:99:75:62:A6:C0:9D
Authority key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
Certificate issuer:       /CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
Certificate serial:       01989336460712E59965BAF6DFD93914C9EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
Manifest number:          0493
Signing time:             Sun 10 Aug 2025 09:01:04 +0000
Manifest this update:     Sun 10 Aug 2025 09:01:04 +0000
Manifest next update:     Mon 11 Aug 2025 09:01:04 +0000
Files and hashes:         1: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl (hash: MuBJeyKk5kg33ps0jW70a/rvJWBvLBw9uHTzY7RG43w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:46:07:12:e5:99:65:ba:f6:df:d9:39:14:c9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
        Validity
            Not Before: Aug 10 09:01:04 2025 GMT
            Not After : Aug 11 09:01:04 2025 GMT
        Subject: CN=3a1630b3bdf113f79d0456e7dfc2997562a6c09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:12:d7:7f:59:2f:f4:d0:ab:e7:cb:56:8c:0d:
                    63:ce:54:26:6a:7a:0f:85:65:8c:c9:20:0d:25:ab:
                    3d:29:a4:4a:4c:f0:e6:5e:4e:59:d3:2e:1a:36:d9:
                    fc:33:5b:d1:8e:e6:48:2e:f3:80:84:26:c5:6c:14:
                    af:70:80:2b:ec:1e:5d:eb:29:c0:21:12:d1:e9:cc:
                    b8:a7:4d:77:6c:3c:fb:02:e0:a5:0d:07:e6:b2:a4:
                    21:d9:09:da:5c:f7:68:f3:aa:bc:43:42:c9:c8:02:
                    51:69:8c:12:b6:a9:3a:fc:d7:15:ae:bc:b1:72:24:
                    1f:de:a2:36:2b:17:8e:31:c8:db:76:c0:fe:9f:8e:
                    25:bf:f3:eb:07:d1:12:4e:46:73:37:ae:e2:37:74:
                    5b:f6:ff:fe:3f:c9:2a:b3:be:9b:d8:40:92:a4:ca:
                    d4:31:9e:cd:4e:8b:36:93:06:da:22:73:e2:e6:f6:
                    dd:42:13:90:44:2a:2d:fb:44:4c:f8:1b:6e:ea:9d:
                    20:92:34:ca:ca:ed:01:26:f6:81:db:88:cc:5b:60:
                    b1:03:5d:10:9f:a1:b2:73:cb:7b:06:49:59:f7:9b:
                    9c:30:49:8d:6f:02:ca:b4:85:ff:fe:dc:07:8a:12:
                    b0:ad:6e:b7:3a:e6:3b:dd:77:f7:4d:cd:ca:fb:b8:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:16:30:B3:BD:F1:13:F7:9D:04:56:E7:DF:C2:99:75:62:A6:C0:9D
            X509v3 Authority Key Identifier:
                keyid:1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:79:63:bf:57:b2:2f:ce:f0:b7:18:1a:d5:6e:95:48:12:87:
         e9:ca:55:bb:a7:2e:2d:b7:8e:89:da:ba:3b:2d:df:52:05:17:
         10:2c:56:24:5e:dc:41:c5:e8:e3:52:1c:07:0e:51:81:6c:1d:
         ab:77:85:80:13:58:f4:02:ec:ee:2c:01:93:51:a7:d0:fb:bb:
         ce:54:49:90:91:94:6a:6c:29:d0:80:42:d9:e5:f4:39:8e:33:
         aa:52:be:2a:95:d1:3b:c3:b4:49:b9:d9:ca:c3:86:60:a9:c3:
         b1:fc:56:7f:54:bb:13:b6:e8:2d:76:38:7c:a3:a8:05:54:74:
         87:77:41:9b:bb:be:dc:af:19:9a:04:c7:0e:13:15:dd:2f:09:
         90:1f:1a:9c:cf:d2:b9:43:99:37:c1:5f:b7:57:2f:53:85:87:
         85:6f:71:eb:a4:f9:01:5c:ef:e5:50:f6:cb:b4:ce:ef:8a:2a:
         82:05:d7:21:52:7c:8f:84:a4:3c:14:47:54:da:49:e6:f9:4c:
         ce:29:29:e6:ce:97:93:68:6d:91:3e:b1:ef:d8:aa:a8:44:c0:
         a9:fb:73:89:74:c1:e8:32:63:91:9a:5b:ab:9a:4f:e7:61:c6:
         78:1c:47:ea:d0:14:fe:d2:eb:6e:83:43:3f:91:96:7c:a2:65:
         df:c2:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:03 2025 by rpki-client