Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File:                     HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier:          c4Aa5DT58D8m2UHkd/1RkfWq5ZLHcw4JEe5wqVSG5VM=
Subject key identifier:   EE:24:BA:F4:E1:E2:ED:8B:18:AF:36:33:C5:E6:13:21:62:B9:53:63
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer:       /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial:       0198C67F7F1037F2FAF76B7D3BA1B726DB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number:          1382
Signing time:             Wed 20 Aug 2025 08:01:40 +0000
Manifest this update:     Wed 20 Aug 2025 08:01:40 +0000
Manifest next update:     Thu 21 Aug 2025 08:01:40 +0000
Files and hashes:         1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: B2EM97f726ZzMhQlHmEwQCc4ED8sYN1M2nYxIQbdku8=)
                          2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c6:7f:7f:10:37:f2:fa:f7:6b:7d:3b:a1:b7:26:db:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
        Validity
            Not Before: Aug 20 08:01:40 2025 GMT
            Not After : Aug 21 08:01:40 2025 GMT
        Subject: CN=ee24baf4e1e2ed8b18af3633c5e6132162b95363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:9c:c2:9f:10:6b:82:66:8f:52:6a:4b:27:
                    8a:7d:71:79:ac:38:11:d8:35:ec:b1:15:71:b2:6d:
                    04:b9:90:f8:fb:87:7b:33:93:c8:23:76:a1:48:ab:
                    81:64:19:ee:1f:ea:b9:86:bc:0d:64:6b:c6:ce:ec:
                    ea:bf:da:a4:02:5e:c6:20:4f:87:8b:e6:20:a0:e7:
                    41:48:15:47:3a:a6:9b:0e:e1:62:f3:ff:19:55:79:
                    9a:90:ec:61:ed:49:43:2d:d9:32:ad:ee:c3:81:b7:
                    99:9f:eb:83:c1:52:bc:c2:61:05:2e:5c:73:d4:a9:
                    20:13:f9:47:55:62:9f:a1:2a:e7:dc:89:7d:46:21:
                    f6:54:55:0d:21:25:5a:72:a9:d6:69:14:27:2f:5f:
                    98:e6:ae:5a:39:e9:e6:49:32:cb:a0:b9:30:41:e4:
                    8e:2b:fc:c9:41:3a:e9:9a:66:9b:f7:99:b0:64:01:
                    ca:8c:d8:ce:ae:e3:82:eb:ef:1e:b8:a2:34:cd:92:
                    b1:e9:03:de:9e:3a:a2:80:be:f4:4b:f8:7d:49:09:
                    de:6d:98:7a:d3:8b:fb:30:9f:9c:b8:49:2e:c4:4f:
                    1b:ba:52:8d:dd:91:38:df:3e:49:31:18:7c:25:1d:
                    66:7e:ad:a1:fd:8b:1a:8d:b9:99:04:01:48:8d:b3:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:BA:F4:E1:E2:ED:8B:18:AF:36:33:C5:E6:13:21:62:B9:53:63
            X509v3 Authority Key Identifier:
                keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6b:56:aa:0e:1d:e4:2e:1a:41:ef:8f:8d:ca:a1:d6:cd:96:
         e5:5e:68:d3:65:43:8f:e4:1d:98:ac:7b:35:ed:69:77:ed:4d:
         2b:e6:c7:02:ec:d8:78:3c:41:57:8e:bf:72:74:f8:e7:24:ca:
         d5:dd:84:e6:55:cb:5b:2a:97:de:ca:23:48:97:09:6b:0d:be:
         f0:57:9d:d6:6a:e5:ad:46:63:d9:a1:b0:bb:43:1a:14:9d:6d:
         00:32:c2:3d:9c:95:86:85:08:93:1b:72:e2:fd:e3:8d:9c:c6:
         72:bc:b3:17:51:ab:d1:60:b5:6d:8c:2a:86:fd:a0:b5:5a:10:
         1b:3d:44:ae:b4:02:d6:16:6d:d7:6c:91:fa:9e:0e:c2:53:4e:
         4a:54:9f:32:1b:03:1d:bf:59:9a:53:08:c9:ca:6d:ab:3b:9e:
         e0:eb:51:63:f1:71:37:cd:bd:9b:28:7d:e6:61:7b:37:ec:86:
         52:c0:0a:11:f6:01:d2:b0:95:2f:ce:8e:a8:72:66:0e:86:81:
         3d:ce:6b:78:30:cc:9c:78:4c:ca:1b:f9:4f:04:2b:76:e9:d8:
         13:8d:3a:4a:58:f4:f9:7e:8f:99:02:c5:83:7e:ec:23:1b:f5:
         d5:d6:16:b9:6d:73:44:02:25:da:fd:1d:50:e4:98:c4:56:22:
         69:55:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:29:39 2025 by rpki-client