Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
File:                     Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft (raw, json)
Hash identifier:          6bBp+zBZJ6PHenEfXqqSUSW1X/TlEOVME/uwrM1ljsw=
Subject key identifier:   C3:BF:B0:E2:40:1A:B4:0A:06:2F:18:3B:22:8C:73:48:D8:D5:00:CE
Authority key identifier: 1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
Certificate issuer:       /CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Certificate serial:       0198D54DFDA9AB885473F6A76ADB0609F1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
Manifest number:          0A58
Signing time:             Sat 23 Aug 2025 05:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:54 +0000
Files and hashes:         1: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl (hash: JUYlPb7o4KrQGPoqBAMt9yr6NZU4heZkg6Hv04WtCpo=)
                          2: tylNMSSvS99Dcyy-HHi_PFuMqa4.roa (hash: ccMlffzxJqfYWwFrr0eYQi/P7Vh6cNEU7oOeSOxzYpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:fd:a9:ab:88:54:73:f6:a7:6a:db:06:09:f1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
        Validity
            Not Before: Aug 23 05:01:54 2025 GMT
            Not After : Aug 24 05:01:54 2025 GMT
        Subject: CN=c3bfb0e2401ab40a062f183b228c7348d8d500ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:25:b6:e9:ab:2a:ac:34:45:e4:21:e5:91:
                    ba:af:a7:39:15:77:5d:21:55:59:98:4e:61:45:fb:
                    e6:58:37:01:07:e4:53:12:af:5e:38:df:03:48:bb:
                    2d:00:46:e4:30:0a:01:dc:f1:f4:6d:cc:d4:57:5a:
                    ad:a0:64:ed:6a:65:df:be:54:3b:f3:37:6d:5e:53:
                    68:f3:ac:bf:d6:6c:7f:b6:84:26:0c:24:e7:e5:8c:
                    5e:ef:ef:45:fd:f4:47:4c:97:f5:08:e3:a3:8e:2e:
                    cd:ac:4c:18:8f:62:7d:fa:b1:b0:ee:a1:05:29:2e:
                    66:98:ca:f4:e1:fa:f3:3a:ad:58:f7:cb:9b:50:96:
                    48:33:3d:11:16:4a:e9:dd:7f:73:21:f5:02:9f:d7:
                    da:ff:3b:bd:dc:e6:6c:32:56:09:7e:d9:93:4d:77:
                    73:9c:35:df:cb:a7:a7:c8:28:ed:58:f7:a2:07:cc:
                    0c:bc:12:6d:a6:a7:b6:94:8d:3c:5f:a6:72:63:66:
                    11:7f:0e:2c:34:18:7a:18:14:67:49:29:c9:3a:e2:
                    a3:2c:e4:83:48:ac:81:09:cb:08:ec:14:c0:ba:8d:
                    f5:e9:29:e4:c9:a2:d6:db:a4:6d:ea:15:13:12:6b:
                    b9:73:bb:f8:bc:d1:c6:cc:8f:68:be:52:15:80:f4:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BF:B0:E2:40:1A:B4:0A:06:2F:18:3B:22:8C:73:48:D8:D5:00:CE
            X509v3 Authority Key Identifier:
                keyid:1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a1:2c:14:6a:a4:f3:62:2a:49:5e:d3:dc:05:6b:4e:32:72:
         24:66:c1:96:89:a2:cb:43:b0:76:a8:92:5c:91:af:e7:0b:df:
         cd:a6:c4:42:31:4a:68:04:2c:3b:96:b7:e9:2a:43:c4:cb:a4:
         62:47:3b:a9:99:7d:1e:f5:cb:c7:a6:ae:91:a4:13:5e:b6:92:
         20:19:a0:68:e4:cb:d2:8e:be:97:fa:eb:02:29:df:e0:77:f8:
         4d:32:40:e1:c2:02:fd:a7:29:43:b5:28:3b:23:ee:f9:aa:13:
         23:31:dc:16:89:fd:51:f2:9f:0b:e3:26:41:6d:6b:59:00:bc:
         09:37:15:bf:a2:a5:09:e7:f4:9e:38:08:10:fa:f3:73:50:60:
         fb:aa:1a:76:45:6b:51:75:15:ae:96:d6:2d:41:cc:cb:9d:ab:
         a9:52:c1:fa:20:bd:50:65:52:7c:7d:03:8f:70:7e:1d:df:e4:
         db:69:66:07:7f:d2:51:72:98:37:03:ff:ce:5a:6f:d4:1b:68:
         ee:85:9e:dc:a1:79:ab:38:11:54:9d:5d:64:b0:a0:9e:7d:a4:
         af:67:66:31:4b:00:4a:1c:ee:39:51:96:ff:bb:aa:af:c7:38:
         91:07:f2:89:5f:ae:d6:16:5e:84:b1:45:82:c8:9c:46:56:f6:
         94:e8:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:29 2025 by rpki-client