Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
File:                     Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft (raw, json)
Hash identifier:          qnd7FCtWj3tNmsdy8bWpeuZYryeEwU8Jd1ltWpki8E4=
Subject key identifier:   61:8F:1A:73:24:92:68:7C:C6:5C:DD:60:1A:C6:B3:02:CC:AB:FD:77
Authority key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
Certificate issuer:       /CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
Certificate serial:       019849D34E2273DC45EE7F696ABB5447CBDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
Manifest number:          046D
Signing time:             Sun 27 Jul 2025 03:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:41 +0000
Files and hashes:         1: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl (hash: ShalVObpZYQaKhpF10wcyN7xaxdOcCPq5hlT+poH3Qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:4e:22:73:dc:45:ee:7f:69:6a:bb:54:47:cb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
        Validity
            Not Before: Jul 27 03:00:41 2025 GMT
            Not After : Jul 28 03:00:41 2025 GMT
        Subject: CN=618f1a732492687cc65cdd601ac6b302ccabfd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:85:37:b2:04:d8:f0:e2:48:50:18:e5:6c:
                    81:75:f7:66:c6:e3:46:2d:83:d4:dc:e4:c8:1e:67:
                    d0:e8:35:cc:e8:2c:b5:dc:d3:dd:d7:85:a6:be:c3:
                    42:3e:45:f5:27:f5:86:20:e8:ea:80:f6:89:f8:f5:
                    c9:53:2c:b7:d9:f7:3c:82:03:81:66:58:96:5c:19:
                    59:37:5a:1b:94:f8:e1:24:0e:47:7e:f6:e5:c3:9e:
                    65:9a:a2:06:56:88:3c:3c:ef:ef:82:3a:ff:39:3d:
                    87:4d:f1:0c:99:88:a0:95:c0:f0:33:bf:ac:1c:54:
                    e4:87:61:5d:73:93:22:11:50:e1:62:4c:86:05:f7:
                    47:df:1a:8c:1b:74:22:46:ac:6b:eb:54:13:f8:54:
                    66:31:b6:f8:08:03:79:d1:ca:2f:86:96:3d:4d:33:
                    ea:c5:82:b0:ee:e9:ad:16:ea:2c:da:79:65:d6:c2:
                    a6:64:1b:6b:95:59:cb:f1:7b:18:5e:7e:d4:fe:2b:
                    d4:e6:0b:46:2d:18:36:e5:df:22:82:65:f1:6d:c1:
                    da:f8:38:b4:7d:ae:62:7d:cf:4b:c4:3b:9b:f5:f6:
                    5e:fa:60:fc:33:45:88:f0:4f:61:f4:37:a2:f8:7d:
                    7d:d5:f1:88:6c:39:78:51:6d:12:33:89:9e:2e:38:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8F:1A:73:24:92:68:7C:C6:5C:DD:60:1A:C6:B3:02:CC:AB:FD:77
            X509v3 Authority Key Identifier:
                keyid:1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:88:73:b3:33:a0:a0:24:a1:d7:bf:fd:27:9e:80:2d:fb:5e:
         f9:8e:5a:49:d9:2a:a6:1a:a3:2f:fc:86:16:18:43:26:a1:d8:
         3d:94:e1:7c:2f:d9:5c:c0:b3:86:ea:2d:d0:e4:e0:34:92:c5:
         fd:29:fa:1a:17:62:27:04:3b:94:77:19:51:79:59:7b:68:53:
         80:b2:25:7e:46:ae:d7:2d:cc:ef:7c:47:ad:4d:c3:4e:08:63:
         2c:0b:a5:91:ee:7e:32:d6:80:8d:04:c3:c8:69:d5:be:30:7c:
         a5:42:2e:81:f4:99:ff:94:a7:21:43:ec:c1:a2:3e:cd:11:b1:
         f5:9e:1e:d7:86:51:b3:94:03:bb:3e:d7:e3:9a:f8:b8:df:fa:
         22:d0:9a:ef:7a:13:cd:ab:bf:fa:ed:37:6c:13:45:c2:f8:e0:
         9f:15:d5:8a:1e:bb:9c:db:4d:ec:93:c0:f9:25:02:30:1d:8b:
         fb:87:08:69:6d:06:1b:5d:61:4a:63:fa:5e:57:4b:68:9c:3d:
         21:f6:71:d1:95:09:01:0f:09:db:7a:0d:fb:39:a7:09:13:a3:
         e0:b9:38:3b:d8:97:f4:ce:a6:7c:f5:63:eb:0a:65:60:df:57:
         70:90:ce:2a:f6:f6:6f:86:d7:ac:a6:ad:f9:b3:ef:30:b3:99:
         26:3c:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:56 2025 by rpki-client