Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File:                     HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier:          /X5JzjojCYPP+qv15rFv06K/Hv9eolLtMtcSKtv1NtI=
Subject key identifier:   7B:7A:2D:E6:A9:C5:F3:90:18:8F:95:DE:B3:62:BA:12:D5:83:27:A5
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer:       /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial:       0199FB0F1E238588D63501770F25CC8DCEC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 06:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:35 +0000
Files and hashes:         1: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: ty3gcNhMte+BvYghD53ka9KKGU1pD9y7s/Oda7ad3N4=)
                          2: OqLUCxtgxChqlU1u5DSrV7o7hUE.roa (hash: 137N4QJ5LT3R5FaNUW+c79pvczICoEGACd1IGeCfKGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:1e:23:85:88:d6:35:01:77:0f:25:cc:8d:ce:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
        Validity
            Not Before: Oct 19 06:01:35 2025 GMT
            Not After : Oct 20 06:01:35 2025 GMT
        Subject: CN=7b7a2de6a9c5f390188f95deb362ba12d58327a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:26:66:d3:54:c8:a3:9c:50:b6:b5:b6:db:
                    7b:5d:59:ac:d8:c3:9d:bd:bf:60:3e:55:54:72:ed:
                    f3:7a:09:9b:b5:77:f2:f9:0d:23:6e:69:93:49:01:
                    eb:e0:6f:ae:2a:20:86:51:95:fe:ce:5f:ae:8d:28:
                    bb:d1:c6:d6:c1:8c:8b:16:60:8c:f5:35:8b:47:4b:
                    84:5a:18:bd:49:0d:ac:01:97:18:99:82:e8:71:b5:
                    90:83:f6:70:ec:f0:a2:fb:69:77:6f:81:ea:f7:6a:
                    61:9e:a1:a3:f1:f9:4f:be:01:d7:b8:70:54:78:e6:
                    cf:10:a5:92:ef:86:df:1d:e9:cd:2e:70:a5:50:44:
                    a5:c3:54:a4:eb:a8:3f:90:6e:6f:c9:fb:33:9a:1b:
                    2a:cd:fe:f1:e5:dd:2d:d2:80:5b:99:e8:f4:75:26:
                    34:cf:60:fc:5b:67:ef:33:6e:b2:c8:b1:49:64:95:
                    06:ce:47:ee:49:d9:2d:32:6b:98:f0:c5:3a:52:ed:
                    92:d1:1a:20:69:ff:1b:31:14:2f:a8:41:05:1a:78:
                    26:55:51:f2:3a:34:5f:d4:25:0f:5f:86:69:05:af:
                    26:d4:f2:67:f3:8d:db:7c:87:d6:15:11:ce:de:1f:
                    2b:bd:34:78:83:5e:27:20:49:77:2e:d1:12:83:59:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:2D:E6:A9:C5:F3:90:18:8F:95:DE:B3:62:BA:12:D5:83:27:A5
            X509v3 Authority Key Identifier:
                keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:37:71:01:b7:1c:9c:71:d5:be:e0:02:3f:da:2e:a8:53:
         18:b2:24:db:bd:23:7a:8b:e5:97:e8:79:d6:9a:eb:f9:34:e2:
         e5:79:93:d5:4e:c1:de:83:65:83:cb:b1:03:02:c3:13:69:2f:
         36:f4:b6:75:bc:92:62:96:d4:2a:4a:fa:dd:d6:b4:ce:e4:4c:
         a4:fa:4e:8c:b2:7d:58:48:87:5f:77:14:70:23:c1:5c:6b:33:
         32:13:c5:6f:cd:40:20:0d:94:19:69:b7:e7:fe:3e:79:d0:1f:
         bc:46:a0:9b:d7:fb:39:7f:0b:46:81:47:1f:1c:c0:d9:cf:63:
         dc:c1:4f:bd:30:3a:16:ec:16:18:83:a4:79:ca:37:38:16:3f:
         0f:14:f5:1e:d6:2d:e0:92:8c:d2:5c:b4:f2:36:03:1b:20:0a:
         89:73:9a:9c:19:39:20:73:68:8d:ee:28:78:41:ee:39:8d:3c:
         00:1d:ee:e1:bb:33:86:fd:4e:51:92:7d:7d:a5:05:b1:f7:be:
         48:90:2b:f8:8a:88:8c:50:0c:da:d1:04:92:6d:0b:9c:bf:b7:
         f2:98:bd:91:1c:a4:94:0b:26:79:db:37:a3:af:49:64:5b:63:
         93:8d:9e:cd:e0:bc:fa:b5:59:bb:df:33:d4:8f:5c:df:b1:ba:
         64:0c:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:00 2025 by rpki-client