Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File:                     HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier:          djPpHZQc8ED6DdtvbAa2UDJOJO6GRbPBWj3FWvROvTM=
Subject key identifier:   27:F1:F7:FF:1F:27:5E:92:D8:C8:7E:89:9D:85:84:37:C5:9A:09:60
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer:       /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial:       0197C614265705CFCDB74CF7E7841A22B717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number:          080C
Signing time:             Tue 01 Jul 2025 13:01:38 +0000
Manifest this update:     Tue 01 Jul 2025 13:01:38 +0000
Manifest next update:     Wed 02 Jul 2025 13:01:38 +0000
Files and hashes:         1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: VVBGz/4BbAb3pva79aomTCH8q/IE0ClbRaJ4mdihq3g=)
                          2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
                          3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:14:26:57:05:cf:cd:b7:4c:f7:e7:84:1a:22:b7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
        Validity
            Not Before: Jul  1 13:01:38 2025 GMT
            Not After : Jul  2 13:01:38 2025 GMT
        Subject: CN=27f1f7ff1f275e92d8c87e899d858437c59a0960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:91:e4:ca:e5:95:f8:7f:bc:ea:70:db:d1:e7:
                    8a:2f:f4:ee:39:0d:f5:f7:29:2f:ed:59:de:b9:4c:
                    fa:90:73:3c:d9:5d:2b:37:e0:ae:e7:d7:09:42:77:
                    b8:2b:93:1f:b7:73:25:f5:93:87:08:80:18:4e:32:
                    c0:34:d5:df:f5:a0:00:fa:df:85:2a:58:73:df:04:
                    17:80:59:e6:ae:b8:58:6b:65:54:67:41:7b:52:e9:
                    58:11:3d:5f:e8:9b:f2:dd:e0:59:5d:c3:63:f7:87:
                    15:bc:d7:a3:45:24:8d:3d:c4:73:5d:38:f6:99:d9:
                    25:50:a4:66:49:de:1f:e0:5d:f9:79:61:1b:1d:81:
                    d5:0f:cc:0a:81:8e:83:73:a3:c5:0d:12:69:df:11:
                    3b:52:15:aa:d5:2f:59:1b:b1:f5:dc:7e:e8:82:5e:
                    87:5c:6a:1a:47:67:52:09:ba:ca:e1:6b:48:fb:4a:
                    b7:17:16:b6:c7:92:6a:c4:5f:e0:bf:0f:e0:82:d2:
                    26:b0:cf:f3:d0:9a:08:a5:cd:16:e0:a3:30:3a:61:
                    50:33:5f:bf:8f:96:a2:28:b4:bf:27:d4:67:3e:81:
                    1b:1d:ee:bd:93:13:6f:fc:2b:37:90:39:f2:c0:75:
                    90:e5:0a:c2:28:99:47:6d:a5:44:76:d4:4f:14:b4:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F1:F7:FF:1F:27:5E:92:D8:C8:7E:89:9D:85:84:37:C5:9A:09:60
            X509v3 Authority Key Identifier:
                keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:37:87:e7:9f:78:96:a7:10:19:be:aa:ca:c8:02:ff:86:93:
         49:1f:d2:9d:9b:20:6e:e7:02:54:21:00:58:be:b8:81:9f:5e:
         57:98:1e:3f:19:b6:4c:a9:74:96:ee:4c:b2:d7:95:f7:1a:5b:
         3a:6d:dc:ca:ee:d5:9a:dd:e9:53:95:e6:40:8a:34:7e:c0:00:
         68:34:03:31:98:b3:35:0f:9e:fb:7f:aa:28:78:fe:ce:60:92:
         b2:93:2e:20:16:a2:6a:d8:e8:a8:0a:42:3a:53:bf:82:53:a0:
         a4:a4:28:23:30:de:ef:2c:6b:07:e9:10:cb:bb:f5:83:ff:f8:
         5f:96:77:e2:34:55:0a:74:7e:7d:55:77:bf:17:d6:70:86:c2:
         88:55:3d:dc:e0:c9:0a:05:3c:c9:e6:86:cb:73:e6:0b:e0:4c:
         9c:cb:7d:13:3f:5b:1f:d5:2c:0f:5f:0d:d4:b2:84:21:80:0f:
         73:22:67:be:fa:10:3f:04:83:9b:47:75:ac:17:b6:48:3f:b6:
         b4:ba:f3:ba:5f:26:db:67:be:03:6d:a3:b4:89:21:d7:f8:43:
         2a:99:ea:6c:80:16:1f:0e:7e:b5:a4:2b:31:7b:25:41:bd:85:
         3a:7e:1f:ba:0e:bd:47:fb:ad:c9:56:24:c5:57:74:d8:d9:07:
         4c:78:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:05:15 2025 by rpki-client