Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File:                     HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier:          BwcICTr/irTfuMFioGfXNimDH9+ejyuH7xfrMTfjRIk=
Subject key identifier:   D2:A4:FC:23:96:8C:3C:24:10:99:E0:46:3F:CE:9F:06:10:AA:07:32
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer:       /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial:       01983683A933374EDEA1AA65EE6292072610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number:          1641
Signing time:             Wed 23 Jul 2025 09:00:54 +0000
Manifest this update:     Wed 23 Jul 2025 09:00:54 +0000
Manifest next update:     Thu 24 Jul 2025 09:00:54 +0000
Files and hashes:         1: 4VZ9cyXhGhxm5Tn9Idx--URlnKM.roa (hash: Cia+lcB5DKt9KwiNDJP0PQVbg2qQjwIiWHZ3vsXGfh8=)
                          2: 4e2_MxEbAwSKyK_yMLyvMMWQTvc.roa (hash: Nw78uZqDKd/Z7FYgKDCdKH3T/mzlREHr9wc28wcO45A=)
                          3: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: 18xvKYl7bQpEWsyubEbdOPukJ9GmuruefW0nz8X8vY8=)
                          4: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:83:a9:33:37:4e:de:a1:aa:65:ee:62:92:07:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
        Validity
            Not Before: Jul 23 09:00:54 2025 GMT
            Not After : Jul 24 09:00:54 2025 GMT
        Subject: CN=d2a4fc23968c3c241099e0463fce9f0610aa0732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:77:c1:d8:ed:a4:af:1c:6d:72:96:2d:16:
                    33:c8:5d:2e:1f:1a:71:c5:24:12:0e:d9:71:27:b3:
                    5a:f8:df:c4:c4:3f:c8:dc:5a:24:0e:f7:50:1a:aa:
                    23:ca:fa:2a:15:6e:d2:ea:6f:86:b2:96:02:87:c8:
                    24:12:c2:22:bd:bb:8d:f9:be:c0:b9:b2:33:ff:4f:
                    b7:84:2b:20:92:db:63:9d:4c:29:7b:40:4c:b4:4d:
                    20:4f:fd:88:4a:2f:59:6b:9a:4a:00:4b:f5:df:30:
                    e4:89:dd:64:42:72:7b:ee:49:92:21:4c:e3:ce:8e:
                    a2:48:f7:1a:3d:ee:73:ef:10:67:1a:ee:b9:90:42:
                    c5:ed:e7:ae:1d:7d:78:de:1b:18:a7:64:fa:49:21:
                    2d:9e:de:f9:b5:9c:ee:3a:92:f6:bb:c6:7c:b2:e3:
                    c1:71:18:48:4c:23:4b:b3:b2:bd:29:bc:81:ba:87:
                    c9:c0:f6:5b:0c:3d:09:79:f9:33:30:d9:22:4a:4a:
                    19:d1:ad:b2:4e:e6:e2:0a:29:cf:c9:30:4c:49:d5:
                    41:3e:7d:28:43:a5:30:1e:35:f9:d3:87:be:d4:e3:
                    4a:5c:a6:99:43:97:0b:46:6e:bd:61:a3:2c:98:f5:
                    03:91:f2:c7:88:18:de:29:29:8d:22:d2:da:0f:b7:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A4:FC:23:96:8C:3C:24:10:99:E0:46:3F:CE:9F:06:10:AA:07:32
            X509v3 Authority Key Identifier:
                keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:ac:4b:87:a8:06:4f:b0:ca:a6:8d:12:65:7d:e2:46:0f:
         13:62:a2:0d:aa:b7:8c:a2:94:88:ef:3e:e6:1a:06:a2:fb:7f:
         79:6d:ba:38:0e:1e:ac:2d:f2:09:33:9c:f2:23:2f:91:8c:ca:
         be:45:11:02:4c:d7:5b:d9:1c:cb:02:d1:85:66:8b:29:c9:99:
         aa:34:55:3a:a1:17:26:59:9d:e5:c9:0c:79:7c:04:27:30:38:
         cc:0d:7b:8f:69:e1:1c:61:8e:b0:e8:11:ef:08:c4:bb:8d:92:
         3d:b5:41:b9:b4:82:e5:d3:57:f8:86:56:0c:35:c3:36:a1:8c:
         99:04:32:06:ab:19:d8:f8:d5:95:28:77:42:b8:60:19:d9:fa:
         03:cc:18:ce:dc:d9:29:87:25:18:64:a3:ec:e1:57:be:ae:61:
         a7:dc:37:87:90:13:a5:03:76:ba:e3:dc:9a:cb:01:cd:97:b1:
         8d:45:ea:07:83:24:5b:06:4f:7b:73:66:87:1c:fd:1c:7e:c0:
         f3:2f:14:b4:5c:ed:6c:66:85:69:c8:c2:68:d4:47:6e:aa:d8:
         9a:4a:ff:17:f6:ca:c1:a9:e6:ce:27:b6:59:a1:64:a5:d3:90:
         32:c0:ee:b1:db:19:a4:81:31:c1:f5:3a:11:91:f1:0b:3f:8a:
         1a:3d:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:44:35 2025 by rpki-client