Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File:                     HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier:          EsW0l5QusOBbgHhJ5m1szwH9/zZPsAXtfvKWMAzxRFM=
Subject key identifier:   4E:D6:ED:46:AC:57:69:94:05:C3:7A:81:07:76:66:5D:FA:B8:59:DC
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer:       /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial:       0197B9A15C4BFC6A9195F01FA89CFE48A68F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 03:00:49 +0000
Manifest this update:     Sun 29 Jun 2025 03:00:49 +0000
Manifest next update:     Mon 30 Jun 2025 03:00:49 +0000
Files and hashes:         1: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: kXN2jEHzb4xc31DSHWhVvpMkJjlpP/LtF3CB4uDFQd4=)
                          2: Rk8F0_O96bWnV23XOY1ym8DMObc.roa (hash: mN43AwUntAXDuv+4vVnXFfluzZ73Kps3qVN8w0gCSEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:5c:4b:fc:6a:91:95:f0:1f:a8:9c:fe:48:a6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
        Validity
            Not Before: Jun 29 03:00:49 2025 GMT
            Not After : Jun 30 03:00:49 2025 GMT
        Subject: CN=4ed6ed46ac57699405c37a810776665dfab859dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:ac:53:47:41:80:c9:c8:4f:1b:d8:d5:90:
                    e1:c4:63:b7:a9:18:5f:e9:cc:7e:fd:da:e8:b0:79:
                    8d:f4:b4:4a:9f:c6:cf:ac:22:df:7d:dc:d9:ae:5b:
                    49:29:d8:08:69:42:25:b4:74:0c:9a:fe:a1:59:0e:
                    2d:9d:80:95:ba:8d:91:8f:58:85:e3:ef:5e:ef:ce:
                    e5:dd:ff:af:e3:5e:c6:cf:ab:dc:87:6c:dc:8f:de:
                    bf:63:f4:da:9f:bd:56:fd:ee:e6:13:36:ed:a9:7d:
                    cb:78:18:ac:5f:d1:cb:25:c6:c6:c0:3e:3d:88:fb:
                    1e:ce:b5:5b:b6:28:a0:6c:da:8a:8c:2c:27:4d:a1:
                    d1:c6:42:14:0c:f7:2d:c8:f4:d0:84:58:de:23:67:
                    16:3d:a6:5f:66:f2:db:84:18:a0:66:eb:f0:32:c7:
                    a8:11:59:ba:04:07:74:c9:71:37:b3:2d:30:ae:7b:
                    f4:80:d5:ba:23:5d:f4:2a:af:2e:1e:94:02:17:0d:
                    ec:02:7c:e0:fd:ea:ef:70:81:b5:10:ec:09:d6:43:
                    6a:2e:35:00:89:d6:78:6a:b6:80:1c:1f:f9:3b:ad:
                    cc:e1:1b:5f:ff:94:b5:5c:e3:c9:ef:c9:83:25:68:
                    88:b1:33:8e:69:e4:68:f1:08:1e:eb:50:47:e2:06:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:ED:46:AC:57:69:94:05:C3:7A:81:07:76:66:5D:FA:B8:59:DC
            X509v3 Authority Key Identifier:
                keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:06:34:34:9f:a5:ca:50:f9:b2:69:c5:8e:cf:aa:b6:67:a4:
         24:31:d8:cb:24:f8:b2:f2:ce:d9:ae:a1:49:e2:55:76:94:e8:
         f4:62:02:e4:b9:67:74:b6:a3:a2:c6:63:6e:d7:ad:98:88:50:
         de:4d:52:78:e7:3f:c9:32:f3:c8:10:be:f8:2a:56:58:03:00:
         fa:26:be:4b:ad:b6:b0:27:46:eb:20:bd:18:be:2d:9d:50:ca:
         51:ab:c2:69:f9:d3:fa:18:dc:ac:9d:d7:21:09:a4:18:cb:80:
         7f:bc:41:b3:af:ee:a6:39:87:31:43:12:4f:74:be:e0:33:d4:
         2d:19:27:91:4c:0b:ef:e1:49:49:27:b0:d8:d6:c9:f7:f3:75:
         74:fd:a4:36:f7:27:a3:85:2f:a1:c1:08:d6:c3:b0:77:57:e5:
         bc:e3:18:dc:8e:0b:89:93:f2:f5:2c:ed:9c:ea:e1:19:a0:9a:
         7d:1d:cd:c3:5a:f5:36:ac:c1:86:de:36:9c:6e:91:e1:89:bc:
         69:3a:19:1f:e3:d2:cc:96:43:f2:f7:61:e6:6c:42:f5:df:72:
         ff:91:dd:2e:47:d9:8e:c8:82:8e:be:df:d9:82:28:4e:6c:0f:
         d5:42:d7:1c:f4:c3:c5:fe:3c:7e:b1:f5:72:a3:23:c0:ed:d9:
         42:27:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:19 2025 by rpki-client