Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File:                     HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier:          RTENAtKGwk5XMt/Tnvr0+rpcbJNKFH12NyjJBSszTi8=
Subject key identifier:   1F:FB:4D:2C:33:F5:22:FB:B6:9A:E8:2D:2C:16:DD:77:8C:74:C7:5A
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer:       /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial:       01983684119B17048B221CCD79121A9996EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number:          15F5
Signing time:             Wed 23 Jul 2025 09:01:21 +0000
Manifest this update:     Wed 23 Jul 2025 09:01:21 +0000
Manifest next update:     Thu 24 Jul 2025 09:01:21 +0000
Files and hashes:         1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: CxjkrDoHMYJWXCafbLwsOyu1sXZ+lnbRoKeG8U/cReU=)
                          2: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (hash: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:84:11:9b:17:04:8b:22:1c:cd:79:12:1a:99:96:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
        Validity
            Not Before: Jul 23 09:01:21 2025 GMT
            Not After : Jul 24 09:01:21 2025 GMT
        Subject: CN=1ffb4d2c33f522fbb69ae82d2c16dd778c74c75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:23:3a:4b:14:9b:0a:0b:2f:e5:d7:b7:86:
                    61:ec:a2:8f:58:d9:5e:bd:9c:83:e8:d4:21:9d:fa:
                    73:f4:13:b4:ac:c0:41:02:b7:0a:68:5b:9f:0f:35:
                    c8:c6:67:5e:25:90:9c:08:8d:3c:48:d2:ab:9d:8d:
                    08:dc:64:6b:22:24:73:4c:1e:57:b5:43:58:f8:33:
                    30:48:96:3c:96:77:19:37:13:c7:28:38:f1:51:ba:
                    00:db:84:24:62:74:e0:39:e0:2d:9a:7c:62:4c:32:
                    00:f5:29:b4:81:d3:4f:ba:f1:99:b8:10:67:0c:5d:
                    68:68:4f:27:a2:2d:08:e3:37:e5:f3:31:7a:9b:07:
                    bd:44:71:87:b8:77:0f:1a:9f:df:68:db:93:fb:e7:
                    db:f6:3a:83:6f:55:09:ed:c1:3e:64:e1:d4:6b:f7:
                    ee:38:e3:e4:02:0d:0f:93:43:1e:60:fe:7e:59:9a:
                    d6:71:61:f1:eb:64:91:84:79:35:1f:bd:5c:48:cf:
                    6f:76:66:1a:91:09:22:ec:cb:bd:0c:20:d8:8b:b2:
                    26:84:d1:58:c5:81:c3:50:97:e6:22:92:49:f3:ab:
                    e4:c5:61:4b:b5:ad:6f:99:ab:86:ef:1a:ce:d6:8c:
                    33:53:05:f5:d9:d3:30:91:3a:8a:9f:33:1d:3e:02:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:4D:2C:33:F5:22:FB:B6:9A:E8:2D:2C:16:DD:77:8C:74:C7:5A
            X509v3 Authority Key Identifier:
                keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:9f:5b:1d:7e:af:8c:61:eb:2c:e5:10:d8:a2:a0:a8:56:
         ca:c9:57:91:44:0e:08:41:ca:db:29:e4:36:42:38:77:f5:88:
         af:52:62:b2:e0:4c:46:2c:bd:7a:93:ef:2d:0b:0f:22:28:ae:
         75:8f:6e:41:69:8e:cc:42:d0:9d:41:ad:33:e4:91:f9:25:7d:
         48:20:fa:6b:68:b2:ba:9f:ce:86:ee:8c:d6:5a:2c:3c:b0:ea:
         4a:d1:8e:7e:2a:3d:ba:4d:a8:78:92:f6:2b:ad:b9:0e:fc:8e:
         bc:b4:70:94:32:7e:d5:f6:85:df:e8:45:24:7a:79:e1:26:45:
         ed:e2:59:b0:85:8d:02:48:1e:ae:26:96:01:07:aa:5a:6b:df:
         54:a3:cd:4b:d6:72:12:b6:72:28:f5:89:91:53:71:9e:ea:5b:
         69:be:a6:e8:a0:b5:19:ea:92:de:3d:ad:5f:69:5a:33:01:7d:
         95:06:15:bb:5b:8e:84:28:18:b4:0b:04:84:8d:98:e2:62:2d:
         78:76:6e:9b:28:9e:87:a2:ed:ab:31:e2:2d:5b:ca:13:0f:f2:
         da:1f:b0:28:c4:a5:ee:e8:3c:a2:3c:7f:c7:e8:18:6e:b4:47:
         1b:d0:75:7b:cc:a7:e3:6b:9f:ea:af:29:5b:81:ec:a2:b0:e6:
         c4:be:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:27:13 2025 by rpki-client