Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File:                     hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier:          gXots7AkYwOUBna9gJKmdidjkGdlVc2iAXRKea6v1WE=
Subject key identifier:   E9:C1:DB:AD:15:3B:20:E9:65:E0:B6:D0:1E:E5:95:6F:CA:AF:81:2E
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer:       /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial:       0198D473D771BDB1D7DFC86CF11E7CA19F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 01:03:38 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:38 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:38 +0000
Files and hashes:         1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: gJ7PYlZJMj7VqSWWqNrjN50E9wnmwztotD1u4wPmc4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:d7:71:bd:b1:d7:df:c8:6c:f1:1e:7c:a1:9f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
        Validity
            Not Before: Aug 23 01:03:38 2025 GMT
            Not After : Aug 24 01:03:38 2025 GMT
        Subject: CN=e9c1dbad153b20e965e0b6d01ee5956fcaaf812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:78:c6:fe:2d:15:2b:f8:b9:a7:35:0a:8e:
                    9d:67:a3:67:48:f0:df:e7:dc:2e:f6:9c:36:c8:f9:
                    58:48:4d:d0:91:fa:2a:f0:c6:72:2e:12:db:98:79:
                    2f:3d:9b:08:7e:3e:7c:eb:10:dc:6f:1e:78:ba:e0:
                    5d:10:e7:00:4f:15:75:24:eb:1d:93:96:21:43:40:
                    54:b2:94:80:f5:f6:e0:c7:08:f9:c2:13:ab:cb:22:
                    c6:94:6c:08:7f:af:84:2d:11:98:97:c4:4e:ca:52:
                    72:2d:47:cb:a9:24:4e:2e:3a:6a:b2:d0:e4:59:f6:
                    4b:87:b1:be:04:04:7d:78:5d:09:7e:14:39:33:2e:
                    67:16:ac:7a:f6:c1:7f:8e:16:b1:b5:40:bd:ac:1b:
                    05:9a:a4:b1:bc:dd:de:b7:88:38:68:a3:04:87:c5:
                    af:51:5f:41:78:3f:b9:06:4f:67:0a:7c:0e:b2:bf:
                    22:c2:f4:ad:45:66:dc:f6:ec:85:14:82:59:ae:be:
                    3f:3f:7a:e2:9a:05:cc:19:03:9b:a4:2f:c6:e4:30:
                    e4:98:49:00:95:da:49:bb:50:63:ad:97:4f:cf:fe:
                    d6:dd:47:c6:ff:81:ea:9c:49:91:2b:9d:b7:3f:84:
                    0c:88:b1:f9:39:df:7e:30:50:da:b8:7b:0f:0d:e4:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C1:DB:AD:15:3B:20:E9:65:E0:B6:D0:1E:E5:95:6F:CA:AF:81:2E
            X509v3 Authority Key Identifier:
                keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:64:d8:e1:08:b0:f1:86:36:17:3f:48:bc:15:fb:ec:f5:
         f2:f0:98:a7:94:d5:91:d1:cf:8c:54:21:92:60:99:a5:61:77:
         2d:d4:16:68:54:78:53:2c:96:62:1c:c4:1c:78:a9:e9:1a:6a:
         9c:94:6d:e8:5c:49:43:18:c9:76:0a:6a:57:76:ed:51:99:1c:
         86:14:19:6e:70:96:e8:7e:73:6c:73:84:cf:5b:ac:31:33:72:
         28:75:56:a8:d5:02:9e:62:4f:ce:78:9f:55:a9:d7:f0:f8:fb:
         51:d4:da:dc:dd:b7:88:79:0e:88:6f:d8:32:bc:88:7a:cb:f2:
         58:82:a0:61:79:01:51:49:37:3e:f6:5d:f0:27:85:32:08:0d:
         01:45:d5:09:d0:ce:40:4f:3a:2e:43:da:bd:7a:e8:5d:9d:e6:
         55:ab:45:c4:45:7e:07:38:b7:68:27:97:a8:38:48:25:1c:58:
         e3:5d:16:ff:9e:01:16:ba:c1:f4:fb:88:32:8f:c7:40:9e:e9:
         d0:16:4d:80:95:39:80:19:fe:cb:76:21:92:c3:31:37:29:69:
         b7:cb:f8:95:57:40:ae:dd:c0:13:c9:19:ad:04:61:aa:6b:18:
         88:0a:bb:3e:69:62:f5:d0:7f:ad:05:ca:3e:cf:87:35:6e:96:
         c2:50:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:02 2025 by rpki-client