Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File:                     tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier:          EncXOYLoEg/Aj0H+Hl4Xqd/3AaI0GtvVLasPaeGqXh4=
Subject key identifier:   AD:22:ED:2E:30:7F:F2:A2:5E:41:67:A6:F3:E0:8E:00:2B:E8:EB:7F
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer:       /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial:       0196D1072AF3015841C00505F300CFB18BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number:          1265
Signing time:             Wed 14 May 2025 23:00:29 +0000
Manifest this update:     Wed 14 May 2025 23:00:29 +0000
Manifest next update:     Thu 15 May 2025 23:00:29 +0000
Files and hashes:         1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=)
                          2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: kMofiqGJLv4zFXsO7fNaJdoNqexU5RLV+lO56XtGADE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:07:2a:f3:01:58:41:c0:05:05:f3:00:cf:b1:8b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
        Validity
            Not Before: May 14 23:00:29 2025 GMT
            Not After : May 15 23:00:29 2025 GMT
        Subject: CN=ad22ed2e307ff2a25e4167a6f3e08e002be8eb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:b1:f9:7e:22:56:54:a6:a2:ae:f2:d7:ed:
                    f8:9a:c0:a5:87:8b:40:e1:ff:04:08:8c:37:da:af:
                    8e:ef:e3:9c:1d:60:9a:5c:fa:ff:4d:53:7c:3f:f8:
                    2f:a6:c2:bc:81:4c:64:d4:22:cf:d5:78:37:2d:8c:
                    e0:89:87:26:65:b3:49:28:75:e7:ae:b7:23:31:e9:
                    8b:e3:d3:9b:85:e8:35:38:01:d4:89:77:55:76:72:
                    5a:c1:ce:e6:21:6f:bd:1c:c5:74:59:6e:bd:d6:cd:
                    ef:ee:24:ba:ec:09:cf:57:0c:18:83:29:0e:a4:c6:
                    1b:7f:cd:2f:8c:cf:c1:9c:f1:24:03:8c:9e:0a:7b:
                    99:f3:9f:4d:3e:dd:2b:48:d9:78:96:11:a0:37:00:
                    2f:ac:0a:b3:cf:78:97:5d:b4:6e:1b:77:60:c2:dc:
                    11:c4:2b:93:56:99:82:ab:da:9e:75:3f:e8:20:9e:
                    20:c5:ed:ff:c6:18:b3:b5:91:7a:fb:b6:f2:9b:e0:
                    99:44:82:23:7c:52:8b:37:0f:5b:82:79:0d:bf:0f:
                    c7:5c:19:4d:80:37:64:fe:db:fd:d5:7e:98:86:2d:
                    cf:07:68:3a:d9:30:32:60:97:50:e7:e3:c7:7e:bc:
                    d1:8d:5f:7f:b2:67:57:9a:51:24:0d:6c:31:4c:2d:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:ED:2E:30:7F:F2:A2:5E:41:67:A6:F3:E0:8E:00:2B:E8:EB:7F
            X509v3 Authority Key Identifier:
                keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6e:79:2f:7a:15:3b:6d:61:8c:69:36:71:4a:b4:86:32:17:
         da:a2:a7:01:07:c9:91:7e:75:0d:da:4c:7f:17:bf:5e:70:2f:
         ee:7b:0f:ef:2c:00:98:fc:28:d0:0a:f9:ea:af:6d:ea:cb:b3:
         9b:69:dd:f2:14:0a:ec:b6:e9:c5:7a:48:fc:20:06:00:48:94:
         ed:0e:b0:7e:c0:7d:0e:19:c2:c6:01:d6:38:c9:d2:f2:fc:8a:
         ae:e4:af:3e:a4:b3:04:6c:fe:33:26:30:3c:9d:98:c2:66:96:
         46:8a:e7:d9:25:8d:ab:aa:7e:c5:a9:90:b0:0d:5b:49:65:d3:
         02:70:16:ca:c1:a3:01:09:e7:d8:bc:c6:3d:81:36:06:25:8d:
         dc:be:0d:6c:11:1d:f1:a9:6f:c4:6e:5e:a9:a3:65:83:d7:1e:
         f2:36:49:6e:ac:c4:4d:d2:fb:40:43:a4:c8:71:f8:2a:5c:23:
         3e:03:45:74:de:14:7b:f1:f3:46:f9:ee:ed:eb:d1:14:d7:25:
         e8:76:a9:74:c9:67:ed:49:21:46:21:80:3f:00:94:77:d0:af:
         97:c1:81:6c:37:c4:4c:6a:14:22:5c:5d:89:d1:17:c3:11:df:
         80:24:33:8d:27:5c:11:ae:1a:86:92:a5:6e:f0:e2:9d:69:7a:
         c2:4e:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:25:19 2025 by rpki-client