Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File:                     1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier:          1THVqyoPKEgS0XMYlbEfw9Dn0F3YcgTstdnPpbw/D9w=
Subject key identifier:   F3:AB:43:38:8C:F5:3C:2D:CB:33:05:75:68:61:94:F2:23:35:F4:24
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer:       /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial:       019846D2746CE677477604060BB9A01914C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number:          13B5
Signing time:             Sat 26 Jul 2025 13:00:54 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:54 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:54 +0000
Files and hashes:         1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: cF9fzDdbFVq1jowYIoeyZf8/d4wSFU1DpGuUNPJT25Y=)
                          2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:74:6c:e6:77:47:76:04:06:0b:b9:a0:19:14:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
        Validity
            Not Before: Jul 26 13:00:54 2025 GMT
            Not After : Jul 27 13:00:54 2025 GMT
        Subject: CN=f3ab43388cf53c2dcb330575686194f22335f424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:e6:06:8a:a8:ee:ae:6c:cc:ea:bf:a5:18:
                    48:2d:f7:a6:da:fd:75:75:da:79:e3:ba:b8:fc:2a:
                    4c:30:3b:ab:91:3e:07:d3:4b:7c:fc:e9:3f:41:1d:
                    b6:8e:21:fc:2b:9e:8a:ee:1a:d8:fa:20:6f:04:95:
                    85:c5:21:ab:9f:07:24:75:76:f3:c8:a7:da:be:1a:
                    a6:c8:cb:ab:d1:3e:fa:e7:2a:fd:92:8e:57:92:02:
                    31:89:61:e5:b9:16:2d:2e:d7:c6:83:fc:de:80:2d:
                    b8:1c:64:08:5c:eb:86:a4:8c:36:f2:cf:1e:a9:a6:
                    a9:70:f4:79:2d:66:03:01:81:f4:d7:0b:26:c3:8a:
                    3b:28:59:59:17:0c:a9:b9:4d:30:fd:7f:b2:ec:55:
                    34:fd:d7:ad:ab:f2:71:e2:95:b3:3d:4b:ee:d5:50:
                    54:df:1c:d0:68:67:f7:e1:a6:eb:23:7b:1c:c4:0d:
                    ce:a4:61:4c:23:4a:e6:26:a1:fb:59:d2:88:3a:a3:
                    b8:73:11:5a:fb:7d:4d:fc:30:4a:9d:7b:65:b0:55:
                    dc:92:14:4a:3b:46:4a:9c:72:bd:d1:a1:e9:5f:e0:
                    e0:88:d3:53:79:86:f6:73:20:12:c9:07:fa:8b:31:
                    e6:d2:98:31:96:38:0d:2f:f5:69:72:2e:37:13:a0:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AB:43:38:8C:F5:3C:2D:CB:33:05:75:68:61:94:F2:23:35:F4:24
            X509v3 Authority Key Identifier:
                keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:cc:e7:45:9b:47:01:77:29:c5:53:4b:08:75:81:bc:5a:
         69:4d:a9:dd:db:dd:52:ad:58:ff:da:66:4b:1b:64:8b:c2:05:
         c7:55:87:e4:08:dc:4c:10:fc:2c:74:8f:3c:fa:4a:57:8c:8c:
         40:4e:c0:2b:0b:a4:19:c1:bf:3b:58:d9:3f:20:33:ea:0a:2c:
         db:77:26:ea:37:ff:94:ec:e7:15:18:6a:33:79:30:79:d6:37:
         b0:e0:81:90:df:13:36:16:81:66:e2:1c:04:6f:6d:f3:8d:bd:
         11:f8:b4:02:0f:4c:c0:d0:44:8d:d2:db:63:b1:fa:15:c5:88:
         4f:0b:20:af:fa:05:45:fb:7b:4d:d8:ea:05:00:8c:ce:e7:38:
         5c:07:ff:01:9b:83:d3:29:fb:1e:2e:52:ac:99:66:73:6d:ff:
         0a:2b:e6:67:5d:2c:07:32:6d:bc:0c:28:d5:cb:32:25:22:13:
         43:87:bb:8f:bd:60:97:fd:02:00:0f:a4:5f:9d:cb:25:16:5d:
         74:15:ce:f6:94:6f:18:7a:57:5f:bc:ac:cd:72:75:6b:5f:d6:
         da:b0:77:d1:12:f3:3e:7e:f4:77:c4:fc:a9:e5:a3:ca:75:83:
         68:12:4c:9b:3c:ae:14:d0:16:94:8f:d0:25:2a:99:68:b3:b2:
         1b:f2:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:20 2025 by rpki-client