Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File:                     HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier:          WgfGpiIUNgmV3Nv3kvCTx657g9t2FI2YpkE8icgBPKw=
Subject key identifier:   97:F6:88:0C:2D:EA:88:E0:9F:69:96:EF:60:13:9A:53:66:CE:11:00
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer:       /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial:       0197B6A208ACCD06911B86D532238C42FA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number:          0E17
Signing time:             Sat 28 Jun 2025 13:02:41 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:41 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:41 +0000
Files and hashes:         1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: Dg4BZyH8KUPHYeFYMyJ9u/Lu0PxfI7y+SappJ06KYxY=)
                          2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:08:ac:cd:06:91:1b:86:d5:32:23:8c:42:fa:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
        Validity
            Not Before: Jun 28 13:02:41 2025 GMT
            Not After : Jun 29 13:02:41 2025 GMT
        Subject: CN=97f6880c2dea88e09f6996ef60139a5366ce1100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:1c:0c:f0:c7:7e:ab:22:9e:4e:8f:a1:11:
                    1d:58:b2:32:88:11:0f:56:53:be:ec:86:f5:dc:57:
                    b2:69:ed:96:01:2f:23:3f:79:27:d3:40:39:c6:1a:
                    b5:52:54:68:3c:34:f1:a5:19:d8:ba:af:48:15:7b:
                    f3:6b:b7:c9:9f:a1:58:8d:59:14:b1:58:3e:71:8b:
                    38:9e:d1:ca:c6:0a:5a:b6:17:7c:d4:01:d6:18:4b:
                    8c:3b:2a:18:a4:d1:ed:46:c4:cf:66:9f:9c:cb:3e:
                    ee:1b:9f:6d:a5:0c:97:22:96:0d:99:5d:f2:17:36:
                    4a:1e:5c:0b:64:45:6c:4e:1d:af:40:cc:88:a3:35:
                    96:6e:02:55:73:d0:ad:6e:50:01:89:19:94:5f:e5:
                    ef:b5:dc:84:a4:a1:cd:f6:02:e0:5e:f5:0e:f9:45:
                    cf:b3:24:60:8b:0e:a4:49:0f:83:c3:59:3a:8a:af:
                    56:60:75:57:78:d7:3f:9e:d7:db:ee:2c:b4:d3:bc:
                    d9:7e:cf:42:87:22:a3:da:ff:c9:ce:c1:a9:99:9a:
                    d1:84:ab:31:83:42:95:c2:5c:98:e3:7f:8e:ac:ec:
                    a1:b0:c0:4c:8b:e2:f4:f0:46:81:54:af:cb:d0:15:
                    5b:f5:cb:19:c3:9a:2c:bb:dd:d7:62:96:3f:4e:be:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:88:0C:2D:EA:88:E0:9F:69:96:EF:60:13:9A:53:66:CE:11:00
            X509v3 Authority Key Identifier:
                keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:11:a6:5e:ea:c5:fe:93:6c:82:82:6b:ee:69:f1:2d:bb:29:
         08:59:df:bf:bd:f6:9d:fa:db:7d:88:b3:dc:1c:0c:50:21:ea:
         6f:98:1f:49:99:eb:4d:ac:5b:8d:69:43:c9:88:ea:12:90:07:
         5c:77:4b:80:e9:34:bf:55:2a:c4:75:a2:d6:ae:85:6f:db:47:
         b3:59:1d:fe:43:ff:d7:45:d7:18:5b:d4:59:43:f3:40:24:0c:
         6b:8d:af:07:3c:7a:aa:64:75:c8:5b:c7:51:7c:99:e2:f5:c2:
         bf:c5:28:14:f8:40:e8:fd:34:a8:11:7d:04:74:26:33:05:ce:
         78:88:1e:5e:a0:85:34:80:ab:04:f6:db:4c:e6:ae:57:b4:5a:
         8f:af:e0:b2:00:8b:ba:c6:1a:0a:2b:88:77:14:2f:ff:f5:9f:
         71:f6:c6:97:01:29:24:57:23:29:da:36:fd:03:5c:cd:0b:63:
         28:c6:18:5c:9a:e9:74:c9:d0:80:9c:46:d1:d9:3d:26:28:52:
         24:9d:98:6d:f0:34:f6:d5:7f:7c:ba:55:27:b5:c1:18:2d:8b:
         b2:a1:27:d6:ed:22:8e:78:63:ee:ae:a6:cf:ef:a0:5d:66:d0:
         5d:fc:ad:f7:e9:0c:28:4c:57:e9:58:92:ee:fb:03:cb:6d:f2:
         b2:5e:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:05 2025 by rpki-client