Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File:                     HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier:          1HYoaABRM2lXZFezk3Id6mTfr+2lppw6RTvEDN1JKcY=
Subject key identifier:   E5:94:A8:5F:EE:B3:C9:C4:F1:3C:31:BB:67:5C:E9:3A:E2:A7:41:6F
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer:       /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial:       019923A0BC88A20438A09035A695B86A5256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number:          0783
Signing time:             Sun 07 Sep 2025 10:02:40 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:40 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:40 +0000
Files and hashes:         1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: o+Gi9l8HLHeYwsWoeIvURHa5/dh04saA6EsZoe6/6fY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:bc:88:a2:04:38:a0:90:35:a6:95:b8:6a:52:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
        Validity
            Not Before: Sep  7 10:02:40 2025 GMT
            Not After : Sep  8 10:02:40 2025 GMT
        Subject: CN=e594a85feeb3c9c4f13c31bb675ce93ae2a7416f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:c6:26:99:ec:b2:1a:b9:5f:7e:17:e8:51:
                    38:3e:5b:7e:a7:d2:d1:67:5e:de:66:31:f8:3e:65:
                    9c:6c:4c:f2:84:c0:d3:16:69:ee:f8:5b:91:d7:70:
                    67:70:c8:52:03:de:28:26:32:b0:ab:8e:7b:57:a8:
                    46:b5:ca:d3:5f:e8:a0:47:3d:ff:39:c6:05:7d:78:
                    e5:01:4f:e5:34:db:0a:8c:db:89:e5:e3:ea:da:ee:
                    02:eb:17:fa:09:6e:32:e7:96:4f:ba:e9:58:6e:4e:
                    1c:3f:17:ec:fd:12:b9:7b:5a:b5:f0:20:94:8c:c2:
                    a3:5d:7a:59:83:54:b4:a0:1f:2d:7b:61:eb:3a:4d:
                    2a:f6:11:de:d1:be:ad:0c:8e:af:42:d9:61:07:cf:
                    e1:a4:1a:39:1b:f8:6c:9f:db:05:59:9d:7a:42:79:
                    dc:e8:00:b0:8a:53:7d:57:8a:3f:98:42:57:be:66:
                    1a:e6:3a:ea:44:81:a8:74:3b:dc:05:db:6e:14:c9:
                    65:d3:21:5a:db:07:85:de:b6:2c:ee:bc:92:25:9d:
                    62:e5:7c:71:eb:dc:91:da:5a:1b:c7:2d:49:19:b8:
                    21:96:ef:81:cc:81:ee:13:07:e6:a6:7b:82:7d:aa:
                    9b:dd:3a:b3:8e:7e:56:9b:90:ab:a6:b3:76:03:fb:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:A8:5F:EE:B3:C9:C4:F1:3C:31:BB:67:5C:E9:3A:E2:A7:41:6F
            X509v3 Authority Key Identifier:
                keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:2e:e5:14:82:c8:2d:3d:2f:c9:64:91:86:f9:2b:83:0d:
         2d:cd:0b:54:83:34:3d:a8:d1:0a:33:8d:7e:c3:f2:9b:31:05:
         f8:24:dc:19:48:d7:ac:1b:1d:81:11:53:aa:2f:c0:98:ef:1a:
         74:d7:e5:98:84:e5:4d:df:ab:3a:df:6c:45:8b:bc:a0:f0:58:
         47:bc:f9:f8:5c:22:f0:d1:0c:a6:12:86:fe:e7:bf:d8:dd:d5:
         41:de:d5:73:55:70:70:e9:10:97:d1:8c:86:8b:07:fa:9b:e5:
         41:fe:d6:90:b7:87:b1:b7:58:9e:5d:2e:a5:78:87:28:70:ec:
         92:e5:60:d1:ed:45:fb:a2:a9:55:9b:8c:f2:a9:f8:50:f3:a2:
         11:e0:1d:e2:fa:0f:c9:3e:99:eb:8b:52:61:87:fb:3a:ca:a8:
         56:8a:89:6f:39:9d:d7:9b:11:ad:76:12:b6:37:8d:ef:bb:98:
         00:0e:78:c0:4d:1b:cc:24:38:b6:d2:ee:08:ec:5a:dd:5b:0c:
         a2:23:c0:40:95:39:df:c7:5f:be:f1:4a:f3:a9:b8:e6:47:c9:
         68:0c:28:b6:0d:34:6e:72:8f:4a:cd:6a:2d:0d:44:1a:08:7e:
         24:3e:80:41:18:65:a5:f8:46:9e:32:8d:b7:22:6d:aa:f6:be:
         b7:84:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client