Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File:                     HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier:          ibpYnsHmtxEFMz57OTsHOhGT0xCoHACYddy++Md6E88=
Subject key identifier:   AD:0C:00:80:C0:E7:96:84:23:4E:6C:5B:B1:FD:56:30:8A:12:62:7A
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer:       /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial:       0198D5834513282C24658A864507B7B1802B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number:          13DE
Signing time:             Sat 23 Aug 2025 06:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:06 +0000
Files and hashes:         1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: VA/bTwd4MMnCB2p9+PynCZxoM3EQVGF1zC1IgL8fg3E=)
                          2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
                          3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:45:13:28:2c:24:65:8a:86:45:07:b7:b1:80:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Validity
            Not Before: Aug 23 06:00:06 2025 GMT
            Not After : Aug 24 06:00:06 2025 GMT
        Subject: CN=ad0c0080c0e79684234e6c5bb1fd56308a12627a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:ca:3d:08:98:7a:37:0a:4a:d5:33:3d:28:
                    b1:aa:74:3e:9a:1b:88:cf:8a:bd:ad:34:23:54:b9:
                    51:d4:14:ae:bc:c3:7f:1d:98:85:e3:87:5c:c2:dc:
                    f9:d3:4d:85:6d:13:a3:d6:be:08:f5:cb:8e:09:cb:
                    4a:73:9f:ce:4a:dd:f4:b9:29:41:7b:93:60:ff:8b:
                    f8:57:02:25:cf:2a:4b:e7:d5:93:58:2f:aa:8d:10:
                    77:ad:5a:66:6c:e2:80:cc:27:9b:54:fb:0b:c2:ba:
                    ee:2a:d0:2a:72:fc:4b:cd:f2:34:e9:2e:3f:32:f2:
                    63:f7:85:79:48:d9:f7:7a:de:47:82:5a:ea:52:f0:
                    85:58:2c:1b:03:64:80:63:f9:71:fd:49:5e:12:98:
                    48:cb:83:19:74:af:50:c5:62:30:ac:22:4e:0f:62:
                    64:6e:c4:9a:06:fd:81:b5:d5:11:bf:01:87:3d:bd:
                    c3:01:f9:1a:7d:5d:58:2f:80:8e:f3:9e:17:2f:3d:
                    b2:aa:10:22:89:92:dd:01:3f:0f:dd:d2:97:5b:e8:
                    8b:50:e6:4d:ce:99:b8:01:ac:0a:e8:f6:be:b0:ae:
                    3e:f9:cc:57:54:ea:de:80:c7:f1:f2:db:fc:1b:e5:
                    96:4f:97:52:11:53:f2:51:cc:04:5e:13:be:73:cd:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:00:80:C0:E7:96:84:23:4E:6C:5B:B1:FD:56:30:8A:12:62:7A
            X509v3 Authority Key Identifier:
                keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9c:10:72:b6:71:88:e4:f0:9a:fe:83:96:c7:d2:d8:f9:fe:
         24:26:0c:f6:19:e6:c9:8b:cf:5b:e3:4d:34:93:a8:ff:00:5e:
         6d:0f:96:f1:70:b4:78:cd:81:49:c2:7c:ca:85:79:a0:b1:e5:
         bf:a0:88:c1:a8:1b:97:0d:b5:5a:3b:24:c3:60:93:ef:52:f9:
         07:16:8a:5d:ed:cf:6f:fc:f1:98:2d:58:38:f6:49:c9:08:f8:
         57:79:8f:0c:aa:ea:37:bd:87:f3:e3:2c:e6:a6:fb:24:24:15:
         cb:91:e6:64:44:b6:68:13:5a:21:41:60:cb:c1:b6:aa:9a:89:
         d8:e3:03:08:79:f5:5a:96:f2:1c:63:e3:56:98:ce:f4:c4:88:
         d1:3c:1c:9c:bd:c3:53:3b:42:f7:7d:23:43:9e:0f:56:ed:d7:
         5b:a3:5c:85:a3:38:96:d5:ad:54:2c:9f:9d:a4:5f:d5:1a:78:
         9b:6c:63:53:07:5e:07:8c:09:7e:15:79:af:df:fe:74:8d:9b:
         05:c0:3f:14:4b:6e:bf:a8:8f:38:2a:37:b1:9a:04:ef:2c:28:
         7a:43:86:f9:70:42:fb:64:3b:66:e6:90:0b:e7:03:57:ed:b0:
         81:56:6d:3b:0b:00:95:c2:15:d6:6d:7b:34:f7:0b:79:1c:4b:
         0b:ba:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:37 2025 by rpki-client