Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File:                     HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier:          H4s6vFd6zd5rw9s3R1lOUWC9hn9KCB4JrzfNyxgfiq8=
Subject key identifier:   78:69:CB:AF:02:3C:35:AB:3F:3F:E8:51:B5:C8:D1:3A:E5:78:28:F7
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer:       /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial:       0198D660D169E143BF2C95729DF559BFA9E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number:          0D71
Signing time:             Sat 23 Aug 2025 10:02:05 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:05 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:05 +0000
Files and hashes:         1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: 0XG7MnqHKxQVGoEH4Q8x/bbbAGjn6wW+mhkka8qqtdE=)
                          2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:d1:69:e1:43:bf:2c:95:72:9d:f5:59:bf:a9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
        Validity
            Not Before: Aug 23 10:02:05 2025 GMT
            Not After : Aug 24 10:02:05 2025 GMT
        Subject: CN=7869cbaf023c35ab3f3fe851b5c8d13ae57828f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:3f:51:3f:a5:50:a7:1e:60:3e:fe:61:a9:
                    5e:b3:00:d2:bc:7c:d6:a9:b5:5d:3d:95:9f:f6:8b:
                    d2:a5:b0:b8:81:b2:64:b8:b2:ec:7d:0d:f5:c3:65:
                    6f:b8:ce:b4:b5:d1:f6:74:48:28:a5:29:30:06:dc:
                    eb:4c:fb:2e:65:c3:84:d0:14:80:77:d4:a3:1e:78:
                    ea:7f:2e:b6:8b:16:5e:4b:6f:bb:ad:a3:e0:a3:13:
                    0e:c7:d3:f5:bb:9f:20:2b:17:0b:67:6c:62:47:2d:
                    76:1f:7e:8e:a0:4b:ab:b8:7c:32:2a:f9:86:00:bd:
                    ca:b1:c6:39:8e:a9:b5:4a:20:1f:55:c6:c5:45:01:
                    ca:6c:e5:d9:8c:6a:6f:d5:06:30:b5:99:4e:9b:2d:
                    41:39:fd:22:de:c4:b0:57:d6:43:2f:1d:2b:8b:9b:
                    12:eb:3a:0e:1f:b1:2c:2c:64:2a:a8:29:8a:03:64:
                    fc:92:00:8e:1a:7b:e2:8b:a9:df:ae:58:55:89:3e:
                    14:5a:3d:08:ea:37:94:be:28:b7:43:0a:6e:01:b3:
                    9c:77:e0:df:82:ac:96:a0:b7:74:9e:e9:d3:ac:1e:
                    be:ba:ad:d6:ae:8b:07:0f:0e:04:4c:86:9a:6b:5b:
                    32:f4:d6:7d:b4:ba:ed:1d:ed:2b:ea:ca:07:6e:51:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:69:CB:AF:02:3C:35:AB:3F:3F:E8:51:B5:C8:D1:3A:E5:78:28:F7
            X509v3 Authority Key Identifier:
                keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:98:4d:43:3a:fa:f4:86:47:84:9d:9f:36:53:97:71:c7:b1:
         68:9c:85:af:e3:6f:ac:57:61:97:62:90:62:ce:d8:25:08:47:
         79:73:43:51:f0:1a:34:f5:ac:ae:0d:bd:8a:78:c4:75:fd:81:
         ea:f0:95:7d:96:d7:4c:ac:5d:4e:4e:c4:32:a5:7f:41:1a:dc:
         e6:28:18:ef:f8:ba:d6:f9:33:d2:61:3d:e1:60:78:bb:ca:d7:
         9a:96:12:65:59:81:58:c0:a2:65:55:f2:3e:c3:b8:2e:53:9c:
         7f:35:c8:7b:f6:28:71:c4:32:8c:ac:3d:2a:7c:8e:f9:d2:db:
         ba:ac:44:46:c0:bf:1d:ee:ab:50:a8:95:ea:17:ed:6a:16:3f:
         1b:b7:d8:f7:8d:7b:61:b8:ec:be:65:3d:f6:29:b2:11:fd:51:
         28:1c:27:1d:3f:15:22:58:46:57:5a:85:a3:56:09:60:96:68:
         7f:74:aa:ad:47:1e:37:3e:06:bf:61:08:87:8a:f6:34:22:47:
         37:b8:e8:fd:6f:72:ba:f5:54:67:bc:6a:89:3d:ae:d2:a9:89:
         5a:b0:74:c6:80:59:ff:94:80:0f:0f:e2:56:ae:6c:23:b1:3b:
         4e:af:c3:bd:42:0e:e3:34:2c:af:d5:58:64:bb:95:e9:60:e3:
         03:bb:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:08 2025 by rpki-client