Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File:                     HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier:          H6oLcq5ptr5OXqHGeNr7PLLf6fulleBphad6cxPhBqA=
Subject key identifier:   8A:8C:E7:76:96:5F:DE:0F:8D:59:82:2F:57:1A:0B:9B:6F:85:91:83
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer:       /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial:       0198FBB62B347E6DDDE4FE533CF3F108A80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number:          0113
Signing time:             Sat 30 Aug 2025 16:01:16 +0000
Manifest this update:     Sat 30 Aug 2025 16:01:16 +0000
Manifest next update:     Sun 31 Aug 2025 16:01:16 +0000
Files and hashes:         1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: W7zFvT+zLanX604WT+ASrOlau9WWsNOPAJTMM9sQb/Q=)
                          2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 31 Aug 2025 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:fb:b6:2b:34:7e:6d:dd:e4:fe:53:3c:f3:f1:08:a8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
        Validity
            Not Before: Aug 30 16:01:16 2025 GMT
            Not After : Aug 31 16:01:16 2025 GMT
        Subject: CN=8a8ce776965fde0f8d59822f571a0b9b6f859183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:5c:46:17:a3:d6:10:e4:ca:9b:99:c8:8f:
                    10:b2:03:c7:b1:6f:70:87:54:b3:b8:fc:b2:eb:34:
                    6a:d7:fd:f1:33:a9:72:c5:3b:60:f0:a0:f1:ba:1e:
                    ce:6f:39:e3:5b:3a:8e:b0:a2:43:21:03:d8:be:63:
                    b9:6f:0c:44:46:d4:fe:2e:15:75:77:bb:7f:7d:bd:
                    4f:3d:4f:98:65:b3:73:4b:ac:cb:a2:49:05:b2:b9:
                    30:7b:e1:b2:5f:26:0a:13:23:c1:da:1b:92:fd:40:
                    ed:04:4a:fd:10:88:3d:7f:91:a6:54:2e:74:de:2a:
                    d9:d1:44:33:b6:a6:79:b2:5b:95:1a:9f:cb:7b:c4:
                    90:26:1f:81:00:e0:2d:dc:6a:94:74:3d:9f:07:2f:
                    b3:d3:3c:90:64:df:8c:f0:28:59:4a:ed:37:d0:de:
                    39:9a:3e:00:d3:59:6e:db:f4:e4:52:de:82:f2:8c:
                    7d:54:2a:a6:33:4a:30:38:0f:50:4f:77:61:1d:4a:
                    b9:6e:f4:76:33:07:d7:f9:e8:a6:90:96:fb:e4:ec:
                    27:4e:b7:c1:3f:24:56:27:b3:7a:a7:82:9a:d6:79:
                    c9:0e:fb:1d:4b:95:ed:72:85:72:3d:97:49:a6:1d:
                    3b:a7:cb:dd:a1:a9:12:88:ac:ed:8e:a3:96:eb:79:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:E7:76:96:5F:DE:0F:8D:59:82:2F:57:1A:0B:9B:6F:85:91:83
            X509v3 Authority Key Identifier:
                keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:10:ae:cd:0d:8f:32:fc:2d:53:9d:72:7c:d9:5e:e2:af:ef:
         f4:ab:25:f2:0c:da:a7:de:49:fa:25:1f:5c:e5:bc:24:5b:b6:
         41:28:e4:a6:d2:f7:b2:1b:f2:eb:5e:00:46:31:4e:7d:96:93:
         97:42:fa:0a:eb:f9:67:09:93:bb:b6:8d:3d:07:b4:e1:61:b3:
         03:a5:6e:50:11:e7:d7:cd:7e:ae:60:bb:36:d3:40:4c:ed:21:
         ee:b7:ea:46:f0:1a:2f:53:c7:b0:a3:06:27:00:b5:55:73:09:
         45:18:ea:5d:a9:92:82:df:5b:aa:5d:15:98:70:a5:e2:41:18:
         c0:e3:8e:db:95:d9:c8:79:45:53:29:74:a5:db:95:bb:28:e9:
         5c:56:44:ed:29:55:b4:ef:f3:bf:62:38:6b:17:85:a1:c5:de:
         c5:d2:8a:7b:86:df:f4:61:43:71:4c:19:f9:cb:c3:fe:1d:f3:
         cf:24:e6:b6:e7:cd:c0:5e:26:85:60:b5:78:82:f1:89:af:d0:
         9b:a3:3a:c0:8d:ca:4d:2a:82:e7:4f:f7:6a:35:24:45:06:00:
         a4:91:0b:49:7b:db:80:fb:f0:ef:c0:95:2d:31:5f:d9:af:75:
         ad:1a:b5:77:11:e7:17:a8:ce:68:40:01:fa:fe:7d:61:c8:59:
         5d:55:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 00:44:15 2025 by rpki-client