Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
File:                     hWlFRtV2UOyEZtOS0X-jQylgFUA.mft (raw, json)
Hash identifier:          KWmscHNhCSdYfQ9xQjcxAdSdalDodwq2B+Ef/NIGyGE=
Subject key identifier:   25:E2:80:5E:E7:82:CC:61:99:DC:47:9B:D3:D5:A3:0F:99:B2:A4:6C
Authority key identifier: 85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40
Certificate issuer:       /CN=85694546d57650ec8466d392d17fa34329601540
Certificate serial:       0198D6298E9D995A8FB17F8C16991F37D5A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
Manifest number:          2B
Signing time:             Sat 23 Aug 2025 09:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:44 +0000
Files and hashes:         1: hWlFRtV2UOyEZtOS0X-jQylgFUA.crl (hash: hCc0XrM6D5QonuTe5k//8twtI7nPG3RDS/0IaF77dQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:8e:9d:99:5a:8f:b1:7f:8c:16:99:1f:37:d5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85694546d57650ec8466d392d17fa34329601540
        Validity
            Not Before: Aug 23 09:01:44 2025 GMT
            Not After : Aug 24 09:01:44 2025 GMT
        Subject: CN=25e2805ee782cc6199dc479bd3d5a30f99b2a46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:cf:0f:a8:f4:85:3f:89:a2:2f:e4:2c:e5:
                    11:ad:32:7a:b0:04:39:07:1a:7a:87:eb:23:c2:66:
                    78:66:a2:7f:4f:33:18:27:05:7c:09:3c:f9:99:4e:
                    38:92:2d:2c:f6:3b:fe:bf:ac:60:15:f2:f9:64:23:
                    25:81:d4:da:49:67:33:22:47:2a:92:37:f2:be:28:
                    86:1c:35:82:ed:7a:9f:06:9b:03:23:f5:a9:87:3e:
                    14:07:17:e9:aa:e8:3f:18:41:80:a0:f5:7e:96:8e:
                    21:a4:cb:2d:a9:08:1e:dd:a5:80:1d:40:1c:40:2e:
                    99:5a:f3:3b:08:19:a7:66:66:df:d9:2a:7a:55:0e:
                    d6:e8:b1:3e:23:33:a8:63:11:59:6e:7f:2f:d9:bb:
                    28:7f:89:fe:fe:cf:f9:86:29:73:45:9a:55:6b:f2:
                    8d:10:79:be:63:2c:1a:0d:d1:54:5b:19:a2:02:6d:
                    aa:de:16:86:da:f0:36:72:4d:e9:89:09:80:0b:36:
                    3c:f3:21:6b:60:e2:a3:04:29:71:22:3c:57:8d:e9:
                    1d:74:d2:11:16:ff:55:6f:a1:f8:08:b6:ce:1e:9c:
                    b3:74:74:21:75:b6:25:38:c5:99:09:e6:e3:41:ee:
                    0f:5e:d6:aa:28:02:d3:d4:71:ae:11:e8:a6:18:92:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:80:5E:E7:82:CC:61:99:DC:47:9B:D3:D5:A3:0F:99:B2:A4:6C
            X509v3 Authority Key Identifier:
                keyid:85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:7a:17:ac:8c:22:e1:b1:c0:19:89:51:91:57:c1:4c:97:
         9e:dd:3b:c3:5a:43:15:e0:6c:08:70:74:34:a1:f8:ad:39:97:
         9e:a5:34:5a:39:2f:1b:e9:67:47:db:6d:67:0e:ac:61:5b:2d:
         69:5b:af:12:9b:3d:6d:8f:ea:bc:19:80:cf:38:80:f6:8d:fd:
         ce:6e:be:e4:56:a0:31:4a:e7:1d:20:4c:10:71:9b:26:fb:8d:
         8d:ad:78:93:09:d9:ff:cb:96:ff:48:bc:4e:2c:81:fd:00:23:
         e5:70:da:37:8c:c6:71:75:ea:98:18:b7:ba:a9:a7:fa:e1:7e:
         71:22:3a:6a:be:5a:b5:30:b5:d3:45:7d:fa:ac:37:d6:6b:97:
         1b:d5:97:c1:ef:69:d2:9f:f7:f7:58:3b:bc:21:72:bc:83:b7:
         c5:2a:f0:7f:17:40:49:f4:c1:50:4b:eb:e8:1c:dc:2a:e6:b1:
         f5:6d:94:60:5a:00:61:d8:f8:e4:0f:0c:89:11:5d:57:91:a0:
         e7:f0:67:e9:f4:37:59:41:96:38:68:52:f8:e7:96:76:20:e5:
         bc:15:d0:43:0c:61:6a:f1:fd:bd:39:4a:7e:fa:d2:87:36:4d:
         e4:9a:12:a5:84:48:11:95:5c:3e:45:c7:c0:ad:66:ac:f2:7b:
         f0:b0:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:44 2025 by rpki-client