Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
File:                     HWcc95_PZtKf7A13pmp9DqG7dZs.mft (raw, json)
Hash identifier:          1J5d+Cn2E21iH1D9ED9hgnyYlUbR3z3OBeUiwFaFjRg=
Subject key identifier:   94:A3:97:2B:A4:0E:25:77:6C:7C:DE:BA:91:E1:88:39:0B:95:47:28
Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
Certificate issuer:       /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Certificate serial:       019922C34CC59AFDA74D8FE9364DF44D3DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
Manifest number:          084B
Signing time:             Sun 07 Sep 2025 06:00:48 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:48 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:48 +0000
Files and hashes:         1: HWcc95_PZtKf7A13pmp9DqG7dZs.crl (hash: 87jVID0LzokCGDy+DzHUkuBpwjbPxNKrvN7mKaAfxII=)
                          2: rqzhVkzi0h4-wh5hdOyTariCyBE.roa (hash: JZPGst2h9b4mhNt9N69P+3mEwzrtYiQhlPMWkUbgxjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:4c:c5:9a:fd:a7:4d:8f:e9:36:4d:f4:4d:3d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
        Validity
            Not Before: Sep  7 06:00:48 2025 GMT
            Not After : Sep  8 06:00:48 2025 GMT
        Subject: CN=94a3972ba40e25776c7cdeba91e188390b954728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:5f:1a:25:36:45:18:be:0b:47:9d:2a:b8:
                    93:db:d5:ae:e6:b6:3e:97:6c:80:39:fd:82:d1:3b:
                    9d:9a:71:d6:ae:3d:46:a1:de:17:56:90:d4:ff:ad:
                    3c:b9:02:52:b3:f6:62:75:76:98:bb:63:71:df:89:
                    b2:3f:99:ba:86:e0:a1:38:7f:29:47:3b:54:01:55:
                    88:0e:e7:93:f4:05:68:f3:f6:b2:3d:62:f0:8e:5c:
                    8e:1f:01:f3:2d:0b:8b:70:ba:fe:bf:12:e1:a7:13:
                    03:89:8a:75:9f:87:3b:6d:b1:45:d5:3a:42:ca:ed:
                    7c:08:92:28:86:71:08:84:76:76:6a:86:bb:1a:c6:
                    35:5d:fb:dc:3d:d3:58:60:2f:b4:81:bf:eb:19:2d:
                    16:3e:cb:73:5f:fd:12:dc:8d:24:c5:df:fa:09:40:
                    8b:ba:37:94:b1:93:8b:09:7a:0d:53:ee:67:f0:a3:
                    49:ae:b9:7a:09:d6:0f:4a:94:1e:44:a8:17:93:85:
                    d4:af:c1:ce:e7:80:2a:8a:a1:63:87:b6:6d:cb:d8:
                    f5:fd:1a:d7:d0:28:1e:8b:8d:03:ca:71:d8:75:97:
                    60:d2:ca:55:75:85:53:34:e6:0d:fe:de:33:f0:24:
                    ba:34:0a:19:44:bc:53:1e:60:22:79:9b:ea:5d:67:
                    12:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A3:97:2B:A4:0E:25:77:6C:7C:DE:BA:91:E1:88:39:0B:95:47:28
            X509v3 Authority Key Identifier:
                keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5c:e2:4e:d4:92:70:9c:92:56:25:f8:04:a6:bc:25:96:84:
         53:f2:e0:9c:45:d8:6e:9e:58:b4:61:cb:9a:51:70:2f:a2:cb:
         6f:cf:81:7c:a9:0d:24:72:c5:44:36:b1:42:a3:5f:c5:38:24:
         d5:ef:e7:c2:cb:b9:68:e0:3b:5b:00:0e:ea:07:cc:dc:f4:96:
         ed:ab:18:2b:4f:ef:3b:68:1d:ec:78:cf:e0:e1:c6:fb:96:91:
         61:52:5b:a2:7a:df:70:da:f4:2b:60:ce:34:95:bb:d8:6d:92:
         53:a5:45:1f:53:05:fa:3c:8e:d5:db:1f:d5:a8:6a:f2:12:88:
         a9:28:ed:a3:b2:ff:b3:bd:b3:e2:25:cf:11:49:d1:c3:4e:f0:
         e6:f1:fd:a6:8e:05:41:74:a4:95:00:c9:37:1e:fa:da:4f:47:
         f4:62:69:00:88:ee:5c:32:c8:33:6f:aa:5a:0a:5a:68:7d:f3:
         d8:27:31:54:3f:c9:5e:5e:0a:b9:83:27:a7:11:1c:35:37:f8:
         89:89:92:d2:be:6c:67:0c:3f:a6:a9:f2:15:01:11:d3:2b:0f:
         5f:d8:02:4a:c2:25:78:70:bb:41:27:d0:11:0c:64:c3:71:10:
         d5:a1:89:fe:51:d0:e3:44:75:cf:45:c0:91:a2:2b:3f:e6:38:
         e0:67:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:10 2025 by rpki-client