Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File:                     HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier:          65idRUd90b8S/u0fC9F49l0MlUPHhAXTJqwySysFq5I=
Subject key identifier:   3A:61:57:77:35:AA:2F:E2:4C:64:21:33:21:26:40:2E:8C:1D:6A:83
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       0197B77C5739F45D72EE64291817D793947B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number:          1148
Signing time:             Sat 28 Jun 2025 17:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:08 +0000
Files and hashes:         1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=)
                          2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: 8CR18yLlrFHqf3dDBt6xoPciqRvyPxHpi5IHh3HvjDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:57:39:f4:5d:72:ee:64:29:18:17:d7:93:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Jun 28 17:01:08 2025 GMT
            Not After : Jun 29 17:01:08 2025 GMT
        Subject: CN=3a61577735aa2fe24c6421332126402e8c1d6a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3d:85:69:9b:fc:dc:63:c8:a2:5a:b8:b2:b8:
                    01:15:88:e8:02:11:8b:24:a8:36:7e:30:18:61:37:
                    c3:a2:82:a7:e2:30:d7:0b:0c:e8:4d:f9:f0:2c:bb:
                    24:f5:7f:27:fe:7f:41:f9:95:71:1a:cc:ff:f2:07:
                    14:dc:9e:f1:08:a0:27:b2:c0:0a:fa:25:82:c7:06:
                    ad:f6:81:05:f7:67:ad:39:8d:6a:f5:44:65:c0:3e:
                    94:71:fc:b8:e3:f6:1a:fa:7e:4e:d0:c0:f2:9a:cb:
                    5a:f7:b6:c0:99:4a:02:07:27:f6:29:8f:5e:d6:20:
                    f0:7b:49:54:ef:dd:2e:7c:11:58:51:dd:f5:6c:43:
                    a2:1b:b1:cb:d9:ad:1e:c8:fb:1b:78:4b:01:91:36:
                    de:8f:94:c5:79:7d:ca:9b:97:43:71:cd:39:02:04:
                    b7:58:69:2e:dd:4f:75:92:b1:a5:b7:64:63:9f:5d:
                    62:0f:03:19:c8:fa:8d:42:25:c9:53:7b:04:65:b4:
                    a7:54:13:a7:41:0a:06:ae:95:aa:0e:16:60:e0:d0:
                    c0:ec:26:f0:b9:f0:66:37:54:3a:02:3a:e7:62:a8:
                    2e:3a:85:5d:41:49:aa:bd:9d:51:ef:e1:4b:c0:c3:
                    3e:ee:65:94:88:9b:c2:59:45:bd:a5:12:ca:50:0f:
                    e1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:61:57:77:35:AA:2F:E2:4C:64:21:33:21:26:40:2E:8C:1D:6A:83
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:c3:02:0c:0c:73:2c:d5:df:56:4a:48:08:b8:e0:7b:cf:6a:
         09:aa:dc:c3:b8:bc:00:bc:ea:1b:b7:31:c4:6d:b4:f1:b5:b8:
         28:f9:61:6d:da:f1:ff:dc:74:ea:35:78:3e:79:d9:5c:9b:fc:
         38:f3:ef:da:9e:a2:e6:ba:be:94:2b:d6:d1:f3:8a:73:aa:12:
         57:86:cf:65:1e:d2:5b:8c:7d:91:a1:c7:2e:b1:91:37:55:24:
         fe:63:7c:50:6c:58:7b:2d:3a:34:31:21:6a:30:ee:ab:29:88:
         03:02:91:24:68:ec:9b:08:11:42:f9:d1:8a:ff:1a:3f:cc:97:
         d2:cc:1e:76:ea:ec:5e:a4:9c:f7:b3:5d:f6:22:b1:82:f3:b1:
         09:fd:b1:96:0d:96:7a:86:a0:67:a9:04:d3:b3:c3:ee:d8:c9:
         7c:b0:17:be:8d:16:02:c7:d4:00:42:bb:fc:75:c6:1b:03:e7:
         cf:77:01:58:cf:11:d2:6a:66:53:e9:5d:bc:80:16:31:27:90:
         39:b5:87:d8:7e:73:3f:8f:86:c1:82:8c:81:9c:58:e3:f4:be:
         92:3e:4a:d0:12:40:41:2c:09:23:d5:1e:cb:f4:4e:7f:b3:7b:
         df:cb:eb:cf:47:72:1a:2e:d9:c1:b2:60:3a:5f:3c:cc:f2:49:
         52:cb:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:18 2025 by rpki-client