Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File:                     Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier:          aBrs+Nb4CpTnKR2+P5GBQu0c0fWYE2Thj4IWwNQckP0=
Subject key identifier:   53:8B:24:BE:4B:5A:F0:FF:D0:21:C8:FB:7D:DB:BA:7F:6C:F2:2A:98
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer:       /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial:       0199FE102B2D8D9CD7B7AE908F04AA260BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number:          0EA8
Signing time:             Sun 19 Oct 2025 20:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:36 +0000
Files and hashes:         1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: z8VJjeP1arLZME3ekkh/us9jrv3FkM82fua4JFBHYWA=)
                          2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:2b:2d:8d:9c:d7:b7:ae:90:8f:04:aa:26:0b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
        Validity
            Not Before: Oct 19 20:01:36 2025 GMT
            Not After : Oct 20 20:01:36 2025 GMT
        Subject: CN=538b24be4b5af0ffd021c8fb7ddbba7f6cf22a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ea:21:6d:1a:1c:09:24:c4:03:0d:8f:f6:e2:
                    54:3c:b7:90:b4:92:cd:42:ef:b6:b0:cf:7f:20:bf:
                    37:c0:fa:1c:ca:3b:a8:c2:b1:77:7e:37:46:59:15:
                    e8:50:79:ba:99:9b:7c:6c:fb:35:44:fe:28:13:c3:
                    3c:06:d2:f3:e3:35:1a:0a:a8:3a:ba:3a:1d:46:86:
                    9d:91:af:b2:74:cf:c7:1b:3c:bc:ab:41:52:b2:32:
                    4f:c7:68:e3:95:53:9f:3a:a5:35:42:c1:9e:49:ee:
                    0e:f1:a0:d3:8d:12:1d:a4:9a:08:1b:d5:e6:7b:83:
                    77:2f:1f:82:e1:6e:8e:05:b9:2c:e5:b7:63:56:6b:
                    f8:53:9c:c0:ec:ec:af:44:d6:d8:66:d1:d7:9b:bf:
                    53:a8:82:5c:34:12:ac:54:99:82:53:3d:f8:7c:f3:
                    68:01:b8:d6:36:6f:9e:ad:53:e3:72:b8:37:c9:9f:
                    6c:19:1d:bc:d7:55:e4:4f:55:e9:9b:ab:f7:16:77:
                    e5:ae:2e:23:c4:65:28:61:ff:57:88:df:86:f9:6a:
                    9c:54:e1:02:a6:16:db:26:96:8f:51:54:df:95:9c:
                    58:19:10:e6:95:8d:46:00:6b:97:e9:b1:7f:81:f2:
                    86:93:8f:17:f9:66:02:60:8d:71:2f:36:e9:9a:f9:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8B:24:BE:4B:5A:F0:FF:D0:21:C8:FB:7D:DB:BA:7F:6C:F2:2A:98
            X509v3 Authority Key Identifier:
                keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f1:bd:3a:48:b0:53:ce:00:48:5a:41:52:53:2d:c4:57:89:
         ce:af:27:90:06:1f:a1:7f:36:a3:26:e5:0b:b9:25:3e:b6:bd:
         d1:11:54:6f:20:ea:56:d6:86:24:76:95:fc:4f:1c:29:3d:55:
         a1:6a:e2:15:fc:29:cd:6e:9f:49:b3:a7:0d:44:5b:50:83:42:
         58:68:78:5c:b9:f3:9f:2d:0e:6b:38:da:d5:01:37:24:4e:7e:
         e2:e5:b8:75:5c:2f:cb:68:ce:5e:e4:4b:22:18:5b:c7:7d:ac:
         e8:25:83:65:78:85:7f:54:03:24:66:ea:fd:e7:a0:50:2c:50:
         31:8e:12:0b:5f:6d:2d:db:6f:d9:5a:05:5c:37:01:d0:ab:1d:
         11:9e:8f:51:d5:4d:9d:e8:18:bf:23:32:7b:20:7b:6c:06:cf:
         45:f0:85:96:30:da:13:93:e0:94:12:27:67:bd:16:b5:03:9a:
         f4:c9:a4:2f:14:b2:4c:46:49:73:ff:fc:f1:9b:dc:53:d0:05:
         2a:c0:0f:1c:a3:7f:96:b6:1d:24:8f:14:85:8d:d0:33:7a:78:
         31:c3:2e:16:62:f7:1f:e0:9e:46:d1:54:d9:45:4d:36:13:91:
         78:41:10:80:99:b4:43:02:c1:f2:83:af:b4:5f:95:41:5c:a4:
         c2:2a:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:07 2025 by rpki-client