Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File:                     HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier:          Hn9JRkqULGuW6iUV8kRjEomz9P4366rwB3OB1LpfRww=
Subject key identifier:   D7:58:29:5E:6C:8B:E8:68:6A:2E:08:28:B6:6B:A2:BD:A7:68:A3:C0
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer:       /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial:       019748559F5AA7BE280EF32939EEA64FEFAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number:          0F0A
Signing time:             Sat 07 Jun 2025 03:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 03:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 03:01:00 +0000
Files and hashes:         1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: e9qUT7ylGHrNHoUmmIV1yGk2bkUvdQihek9luKZ7Gr8=)
                          2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:9f:5a:a7:be:28:0e:f3:29:39:ee:a6:4f:ef:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
        Validity
            Not Before: Jun  7 03:01:00 2025 GMT
            Not After : Jun  8 03:01:00 2025 GMT
        Subject: CN=d758295e6c8be8686a2e0828b66ba2bda768a3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:e0:c7:bf:02:05:8a:b2:58:79:ad:e7:11:
                    14:fc:15:2d:b3:8a:a9:a5:9b:21:fa:71:94:81:d2:
                    f6:57:56:1b:9a:bd:30:72:fd:66:90:50:ac:9c:09:
                    46:03:37:65:de:97:f8:7d:c5:a3:8c:d5:7c:c7:b5:
                    8b:8a:5d:76:28:e9:ee:d3:b3:12:62:c4:28:0f:05:
                    20:e7:59:bb:4c:cf:cf:c4:f1:04:d2:b6:6e:8e:a6:
                    f4:d5:fe:bf:77:2a:88:9c:14:e7:0a:41:31:cc:27:
                    d8:51:fd:83:ea:64:0f:8b:86:3c:5a:e4:20:32:28:
                    6c:25:32:f8:9e:8f:3c:f7:f0:56:c1:07:bd:7f:de:
                    c0:16:b3:46:a3:cb:15:78:32:3b:8c:b9:98:15:a5:
                    7c:33:4d:fd:c4:20:5e:42:9e:be:f6:02:ae:6a:ac:
                    20:e1:58:99:46:69:1c:e3:23:cf:29:1e:e2:d6:79:
                    12:c1:51:9e:45:39:f8:c3:d3:56:03:c5:78:37:f7:
                    aa:01:5b:52:fa:fc:9f:1a:d9:77:2d:34:99:f6:1e:
                    7e:a7:f2:83:2e:c0:e6:57:d2:fa:f6:8e:ca:27:c2:
                    1e:2a:08:40:4c:1d:1e:45:a6:c3:47:21:28:dc:9a:
                    15:6f:86:40:66:77:1c:a6:4b:2e:3f:f1:15:92:2f:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:58:29:5E:6C:8B:E8:68:6A:2E:08:28:B6:6B:A2:BD:A7:68:A3:C0
            X509v3 Authority Key Identifier:
                keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:1f:cc:ec:17:9d:6c:fe:46:c9:8b:81:2d:29:ff:2d:c7:
         17:10:18:f3:00:bc:d0:51:67:3f:a0:5c:08:dc:61:f2:22:67:
         94:b3:00:4e:be:38:ba:16:1e:c2:dc:12:39:6f:b3:83:d0:cb:
         c5:26:b6:4e:e8:17:19:a8:dc:6b:2c:f7:fb:a7:16:70:84:40:
         aa:bb:a5:59:f1:68:a3:e6:b4:ce:03:7d:cd:b9:49:77:69:40:
         df:22:be:a0:38:cd:4d:a8:ac:a4:0b:42:00:70:88:24:1b:a9:
         60:08:db:07:97:5a:cf:90:44:7d:14:b6:7a:7a:f1:78:43:68:
         87:e0:ad:e5:59:1d:46:d4:44:30:e3:27:e8:8e:d2:ee:41:51:
         07:00:63:9a:2b:40:60:3e:a0:8e:ac:09:03:cb:1a:e5:de:dc:
         dc:e9:ec:c7:bd:93:cf:1c:34:95:82:b1:1d:ba:d6:2a:a4:11:
         c2:10:3b:8c:10:35:4d:ff:14:79:6f:88:41:8c:6b:f0:d6:fa:
         82:1b:d4:76:84:51:73:c7:09:e7:6c:f1:59:31:19:3f:1b:c3:
         67:59:01:c1:59:f4:8b:a2:bf:2b:b9:d0:e0:72:dd:d2:1b:47:
         a5:5e:ab:85:61:2c:af:3d:85:01:8b:06:16:e9:0a:9f:97:98:
         f5:9f:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:31:37 2025 by rpki-client