Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File:                     1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier:          hbQ3j9hndFL6HSrN5/+ZiDdSFDjJ3RRdJtW1wHOQSsw=
Subject key identifier:   82:2D:0D:1A:A9:22:B2:66:2D:15:9F:0D:4F:0A:D6:F7:B8:33:75:21
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer:       /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial:       019848F7964CB5DE21441294F7515A4F89D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 23:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:42 +0000
Files and hashes:         1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: KIw9GvEsLzFH9wasswVdiguVJ+vk7qQgyi35HTK8qOQ=)
                          2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:96:4c:b5:de:21:44:12:94:f7:51:5a:4f:89:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
        Validity
            Not Before: Jul 26 23:00:42 2025 GMT
            Not After : Jul 27 23:00:42 2025 GMT
        Subject: CN=822d0d1aa922b2662d159f0d4f0ad6f7b8337521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:0d:17:c3:0d:09:a8:7d:8b:61:3f:9b:af:
                    fb:c3:61:40:5a:41:f8:55:fa:04:38:11:35:84:2e:
                    9e:5a:8f:23:df:71:c4:7c:44:f3:c5:22:92:c3:26:
                    2e:21:b3:46:34:49:db:ad:06:1b:db:ca:0d:0f:dd:
                    eb:b8:74:47:6a:24:08:48:23:1f:72:12:b3:66:02:
                    b2:78:9c:e7:72:4a:af:cb:ac:c0:59:ef:0b:51:9c:
                    2b:5f:6c:2c:11:c7:2f:80:02:a2:d5:05:c9:28:34:
                    4f:0d:1d:78:77:fa:7d:ae:0e:1c:d8:cb:d3:a4:40:
                    6f:50:e7:fb:5f:c8:20:2a:3f:bc:24:85:88:9a:cf:
                    ef:81:f1:39:9d:d4:f4:c0:8e:52:21:35:0a:43:34:
                    ba:57:a4:19:14:f1:69:f7:d0:60:25:10:a1:cc:e1:
                    4f:b4:b4:b2:ff:38:93:d3:b3:c3:0a:e1:40:da:8c:
                    26:77:8e:56:12:bc:f2:c4:6a:63:33:9e:9e:01:73:
                    82:2e:76:fd:60:76:ab:e6:c9:2f:95:a6:38:91:84:
                    ee:5e:e1:53:5c:1a:6a:ea:75:71:05:77:33:14:96:
                    64:ce:8a:e7:dd:a9:10:7b:7e:ef:36:07:cf:7f:99:
                    53:77:5a:c9:6f:84:db:23:48:b4:81:d6:27:0a:46:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2D:0D:1A:A9:22:B2:66:2D:15:9F:0D:4F:0A:D6:F7:B8:33:75:21
            X509v3 Authority Key Identifier:
                keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:99:72:4c:a5:31:96:ff:e6:8b:ca:c3:15:6b:80:b8:bd:eb:
         d3:fb:f4:9d:2f:fa:3e:26:44:37:15:8e:e7:03:19:78:df:da:
         5d:43:38:62:58:45:c6:86:d0:bd:b1:69:20:dd:65:46:f0:80:
         8e:87:47:0d:5a:07:34:3a:59:c3:85:35:0d:93:85:a2:58:23:
         3a:dc:7a:c6:6a:cf:b5:cf:02:2f:4e:7e:0b:26:cf:9b:24:3d:
         90:ca:04:2c:a9:7f:98:64:c0:91:bc:52:c5:40:95:37:4c:a4:
         f3:80:e3:b1:02:49:86:a2:9c:58:57:c7:c7:d7:79:a9:15:79:
         7e:09:fc:f4:18:7c:f7:c2:60:79:e6:69:9c:d3:40:db:69:c3:
         ab:47:d9:46:4f:69:a7:30:1d:fd:5d:16:08:9a:44:c6:56:55:
         f6:b2:0a:23:42:55:30:4b:ec:b2:de:f7:bb:5e:21:c0:2a:b3:
         c0:c2:4d:44:67:ad:b5:85:e1:9c:80:43:36:af:a9:a4:9a:06:
         61:1f:4d:fa:d2:dd:3a:ec:00:b9:f3:53:41:6b:ba:28:d7:a0:
         53:c9:6d:ed:e6:65:13:f3:32:89:82:5a:9c:3c:14:d6:71:60:
         d0:71:c3:b2:90:07:31:46:6b:0d:0f:7c:68:57:b8:5c:57:e4:
         93:85:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:47:33 2025 by rpki-client