Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File:                     Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier:          Gon4r2Kvl6UGYYYAy3sezeizkJn1NXuazm6aIl87rbQ=
Subject key identifier:   C7:20:5C:A2:79:79:F3:13:C8:2F:92:E5:7A:6D:97:F6:99:19:17:86
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer:       /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial:       0196A089358560DCC4A789B9232A7E8F504C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number:          0C00
Signing time:             Mon 05 May 2025 13:01:08 +0000
Manifest this update:     Mon 05 May 2025 13:01:08 +0000
Manifest next update:     Tue 06 May 2025 13:01:08 +0000
Files and hashes:         1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: vCQva7xHC7ZmONRVILzTJ7fgzNrVDveU4knxL+o9SGw=)
                          2: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (hash: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:89:35:85:60:dc:c4:a7:89:b9:23:2a:7e:8f:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
        Validity
            Not Before: May  5 13:01:08 2025 GMT
            Not After : May  6 13:01:08 2025 GMT
        Subject: CN=c7205ca27979f313c82f92e57a6d97f699191786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4d:eb:10:82:66:c2:d9:91:9c:e5:a4:cc:10:
                    49:21:c0:ff:fe:e4:48:71:d7:38:99:50:46:97:26:
                    54:7c:79:a4:86:f3:82:8e:8d:c5:65:cc:2a:e5:58:
                    ab:d8:50:da:41:04:41:a7:22:87:4d:3c:b6:a3:d4:
                    db:3b:25:57:57:4d:0b:8a:9d:b6:fe:d7:6e:1d:65:
                    82:2c:20:41:88:4c:f8:6c:4a:01:2b:51:50:d0:1b:
                    d5:ac:61:50:f8:6a:5e:dc:50:87:be:87:16:c3:d5:
                    ff:d2:ef:c7:32:1b:83:b5:1a:db:10:18:1f:52:86:
                    da:c4:7c:b7:4b:0b:e9:75:27:5e:c0:3a:77:78:13:
                    f5:97:dc:3b:97:53:5d:32:11:9d:89:ed:ba:44:3a:
                    2f:59:84:89:94:87:08:b5:ec:ad:41:15:8b:52:4f:
                    92:a3:ff:2e:78:c8:fd:e7:a5:0c:08:4f:58:ed:03:
                    1a:d2:84:64:7f:f1:ab:86:be:ae:96:fe:25:5e:f0:
                    f2:94:d7:c5:c1:e2:44:14:e5:3d:23:d0:73:9b:30:
                    d3:61:8f:80:67:2b:f9:d5:83:f6:43:00:69:ad:ea:
                    1d:c4:e2:52:fe:f9:7f:15:ca:2a:76:01:0a:ff:e8:
                    e4:f3:3c:db:7b:43:06:0a:a2:ee:69:6f:ab:34:ba:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:20:5C:A2:79:79:F3:13:C8:2F:92:E5:7A:6D:97:F6:99:19:17:86
            X509v3 Authority Key Identifier:
                keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:20:80:8c:30:a0:9f:f2:99:23:21:f1:dd:71:3a:6c:f8:
         9c:94:4a:df:3b:30:0d:c6:d5:00:82:ba:93:bf:67:ad:31:c3:
         cd:cc:e9:da:91:59:ab:8f:d4:6a:b7:00:30:f8:3c:ce:8d:80:
         a9:00:2d:99:b0:ad:bc:16:2f:87:cf:7e:ba:ff:2a:05:d8:8f:
         1c:2c:2b:b1:92:d1:c4:fb:76:87:52:ba:9a:42:b7:e0:ef:cf:
         ac:16:dc:10:5e:4c:71:99:96:ef:39:6f:94:d5:24:10:10:ab:
         b4:23:4c:3b:5e:78:59:77:c0:3b:f5:e9:5a:72:77:fd:62:e9:
         15:72:e9:21:23:3c:af:a2:2f:0c:bc:eb:d9:ca:ea:d6:ca:0d:
         11:1a:68:26:0a:13:1a:3b:47:a5:60:d7:7f:b2:c6:2c:c8:6e:
         a8:8b:77:43:af:5a:36:64:a9:da:77:57:0e:cf:ec:66:99:e0:
         22:ca:bb:97:c8:c4:52:cd:63:c2:ad:7c:cd:7e:55:3f:94:77:
         1c:fc:bd:6f:17:c9:c9:9c:65:65:53:f3:b1:f3:27:17:fd:91:
         5b:9c:a4:ec:2a:94:92:6b:00:c6:14:75:6d:90:e7:da:ca:e3:
         82:85:55:db:7c:85:f6:ef:15:7b:5c:fd:92:f4:cc:01:4e:5d:
         93:33:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:26:22 2025 by rpki-client