Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File:                     Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier:          ykbDPvcFBSDYDIcf7uF1oMnuiLjxSdZJ27Z1ujrEmuk=
Subject key identifier:   D9:5A:0A:E5:DE:A6:0C:B9:3C:BA:87:19:66:A7:09:75:CF:99:8A:D5
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer:       /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial:       0196A6C1ACBDFCB000621E2B5084E049B385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number:          05B9
Signing time:             Tue 06 May 2025 18:00:32 +0000
Manifest this update:     Tue 06 May 2025 18:00:32 +0000
Manifest next update:     Wed 07 May 2025 18:00:32 +0000
Files and hashes:         1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
                          2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: dAR85TBNiXHcDOa76WcfasqiIYaYQEfuyIAN3ml2ke8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c1:ac:bd:fc:b0:00:62:1e:2b:50:84:e0:49:b3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
        Validity
            Not Before: May  6 18:00:32 2025 GMT
            Not After : May  7 18:00:32 2025 GMT
        Subject: CN=d95a0ae5dea60cb93cba871966a70975cf998ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b8:47:dc:40:78:ad:2a:46:09:e1:c5:ea:67:
                    56:e2:b7:f0:f9:d9:d2:6c:e5:9f:1e:25:e9:aa:23:
                    f4:dc:b0:4d:5f:73:df:3f:83:df:5b:04:7a:6f:78:
                    d9:5e:83:fa:87:e9:38:18:73:f2:11:3a:89:ef:02:
                    ca:4e:7a:7d:4b:28:08:16:4d:f3:02:1a:0e:20:3f:
                    8b:22:53:3e:fe:58:72:6b:bc:b5:5c:f8:19:45:f5:
                    db:0d:5c:e3:15:a9:b7:18:22:1b:62:35:bb:bf:c0:
                    d5:6c:50:a6:fc:6b:7d:0f:1f:55:bd:fb:9b:63:99:
                    51:49:d9:d1:18:ab:32:b2:99:73:01:2e:c0:25:68:
                    86:2e:80:05:62:f9:24:4b:32:38:93:f8:f5:7a:5e:
                    5a:a0:b7:f9:1f:d1:d6:94:4b:2c:5e:3c:78:1d:64:
                    76:f2:c5:7b:1c:77:b5:12:67:43:cd:19:6f:12:79:
                    4d:da:e8:7e:23:ef:d9:06:d3:b2:cc:36:11:83:1f:
                    bd:15:00:f9:18:c3:b6:13:d4:38:2d:60:9b:4e:18:
                    d2:2b:f8:58:b3:83:fb:4e:ec:d7:46:3f:ac:cf:f5:
                    d0:76:11:10:93:ec:c4:36:a6:5f:f6:98:6f:3e:e2:
                    b5:94:e5:6b:17:2a:cd:e4:d3:ef:49:b0:a9:c4:e1:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5A:0A:E5:DE:A6:0C:B9:3C:BA:87:19:66:A7:09:75:CF:99:8A:D5
            X509v3 Authority Key Identifier:
                keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:fa:12:d8:50:a8:93:1f:49:2b:8d:70:5e:e9:e0:de:4c:
         be:0c:8f:55:63:8b:21:c7:7e:31:eb:11:b0:32:44:84:2a:fc:
         8b:ea:09:66:43:86:a2:8f:0a:f3:93:73:d6:ea:ae:95:16:89:
         44:aa:c9:b4:f9:23:4b:f3:ed:86:94:a6:2d:8f:26:73:1f:3d:
         20:d9:bf:7c:2c:c5:e6:73:31:26:0d:27:1d:df:83:fd:10:78:
         c7:5d:a5:ab:98:9d:c2:e3:40:4d:bd:0d:2a:15:9b:3c:5b:39:
         d2:20:a3:aa:18:59:ee:91:09:f4:af:81:c8:ca:e6:a8:b3:93:
         6a:9b:5b:58:23:f8:5d:bf:0f:49:13:c5:68:2d:e7:76:01:03:
         9a:32:9a:aa:bf:f7:3f:5c:f6:ef:76:09:fb:6d:98:00:a3:13:
         17:93:56:54:b1:f8:95:bc:3b:32:13:4a:12:31:cb:34:4f:9f:
         1b:a5:7c:db:47:70:f0:53:06:19:ee:df:66:19:7e:84:08:b7:
         99:c3:01:d5:82:71:e3:df:d7:2e:7b:21:2f:06:6c:9c:67:d9:
         c5:99:d5:96:7d:d9:7c:92:3f:58:e5:09:58:ec:a4:11:86:80:
         78:3d:05:32:b3:d6:8c:f7:07:b0:14:ef:95:57:97:e8:d9:c0:
         b4:53:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:54:43 2025 by rpki-client