Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File:                     hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier:          R77VVuzHFLsEAxQ2aomsZvNlY2hahxORrw51CFYpW5A=
Subject key identifier:   6D:2B:4E:BD:F5:CE:B5:DD:16:27:2E:C5:C8:DA:66:86:7C:57:1A:7A
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer:       /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial:       0198D5BB7B705B5B2579EA93F49AE7781B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number:          1264
Signing time:             Sat 23 Aug 2025 07:01:30 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:30 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:30 +0000
Files and hashes:         1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: RtqGe86Xs2AMmt7PbjQJGEwiNVOUqRqmTVnzUjochMY=)
                          2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:7b:70:5b:5b:25:79:ea:93:f4:9a:e7:78:1b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
        Validity
            Not Before: Aug 23 07:01:30 2025 GMT
            Not After : Aug 24 07:01:30 2025 GMT
        Subject: CN=6d2b4ebdf5ceb5dd16272ec5c8da66867c571a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:05:dc:5c:3c:e9:71:e1:4e:c7:91:25:dd:
                    f2:7b:b9:cb:c9:ed:c1:34:14:2c:9b:80:d3:a9:a7:
                    33:e8:bd:04:3d:d8:46:a3:a5:f0:52:2f:06:6e:9f:
                    47:3e:1c:d9:f5:14:89:96:d2:54:70:59:07:41:a1:
                    63:9c:d4:c6:3a:93:af:ad:43:cf:4d:f3:6a:1b:7b:
                    76:18:ce:80:b3:32:19:a9:22:77:c7:fd:d2:03:ab:
                    db:73:b4:c3:87:18:51:1e:81:0a:97:f6:1c:dc:14:
                    70:df:30:3c:8b:cb:c8:87:bc:87:53:89:55:75:d9:
                    06:58:26:87:89:7c:41:ba:e3:1c:e3:50:6f:03:d1:
                    d6:de:41:2f:10:4f:bc:b6:a9:58:c0:4b:ed:ed:f5:
                    b9:eb:f2:96:11:a1:79:5f:69:74:0c:dd:52:77:50:
                    f3:33:7d:88:fe:e1:46:2e:42:16:76:d4:5d:06:a2:
                    4c:22:3e:a3:e7:3a:1b:19:e8:cc:4e:6d:f7:ab:88:
                    d8:00:5a:79:05:33:ae:d5:78:e6:b1:ea:99:29:f5:
                    2b:f0:d9:3a:56:b1:58:f1:cd:29:a3:af:f0:8b:97:
                    a2:77:63:b0:d3:de:98:6c:33:b5:2a:d9:9a:92:cd:
                    f3:85:ae:05:78:f9:13:8e:e2:86:ca:91:d5:cd:12:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2B:4E:BD:F5:CE:B5:DD:16:27:2E:C5:C8:DA:66:86:7C:57:1A:7A
            X509v3 Authority Key Identifier:
                keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:79:71:ee:ee:b5:0b:59:74:82:8f:45:e6:57:55:47:8e:f6:
         44:c6:8c:46:cb:d4:a7:87:8a:2d:1a:1f:85:4e:fc:3b:c3:2b:
         b9:38:e0:01:b3:4c:9e:10:b2:b3:8d:74:70:01:e9:0a:19:9f:
         be:bc:cd:45:b6:a1:a4:a0:61:3a:de:5e:4a:60:a6:0f:d9:d1:
         0c:ac:c0:47:24:9f:0b:5f:80:ae:fb:39:76:d5:e8:97:fd:11:
         cd:53:7b:9e:f4:a8:7b:11:f7:24:87:5e:24:c8:92:f8:d1:98:
         5d:a1:fc:b3:dc:34:1a:48:1b:8f:76:1a:40:99:f2:72:16:cd:
         cd:55:06:21:3f:f1:fe:b3:f2:79:d3:8e:fd:f1:00:66:99:72:
         3f:08:31:28:a2:19:cd:19:62:bd:5b:3c:fc:2c:4a:e5:71:be:
         b5:11:23:be:e8:e7:50:0b:84:50:e2:79:92:3a:73:45:4f:5e:
         ae:b9:e9:27:53:00:eb:d3:c2:da:ca:fc:e7:4c:49:fe:ba:71:
         c5:ed:a2:0c:f5:a4:47:d0:95:2a:6c:3e:65:3e:f1:82:99:3c:
         2d:29:5f:5d:0b:10:92:51:fa:30:f7:a3:25:d1:5e:37:2f:1e:
         0c:42:30:d4:6d:51:f0:6f:6a:07:22:8f:32:1c:8e:44:e8:62:
         bf:42:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:32 2025 by rpki-client