Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File:                     I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier:          1HtOlWjRcEYdMFMC88/tIeA0lJFRxR74l1JR1omo79s=
Subject key identifier:   46:B0:F9:5B:04:77:7D:EB:E1:DA:DE:B1:46:A7:EC:85:26:44:00:23
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer:       /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial:       0196C49582FCFB06164C5570577574F74A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 13:00:54 +0000
Manifest this update:     Mon 12 May 2025 13:00:54 +0000
Manifest next update:     Tue 13 May 2025 13:00:54 +0000
Files and hashes:         1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: Rvb8Egrx/tvA61OVQ4+3VayL+mluK8XDcmMs95B8Mh8=)
                          2: Tp4BAItGYlXYP71Yl1jvkjdBkns.roa (hash: BUC2R1hzU4lwEDEogKCUTPLUZZa/Hz8pj9j9ce25uwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:95:82:fc:fb:06:16:4c:55:70:57:75:74:f7:4a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
        Validity
            Not Before: May 12 13:00:54 2025 GMT
            Not After : May 13 13:00:54 2025 GMT
        Subject: CN=46b0f95b04777debe1dadeb146a7ec8526440023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:54:58:a9:58:42:8e:f6:02:40:7a:27:ff:
                    9e:4d:80:88:21:20:20:87:a8:0e:de:59:03:ec:6c:
                    41:d9:2d:46:9c:ab:51:1c:e8:5c:c5:06:04:be:da:
                    59:d4:59:d0:38:ff:a6:75:fe:f1:ef:ae:b5:65:1e:
                    a3:fa:43:f8:c2:59:57:90:4f:bf:7e:4e:89:cf:87:
                    34:6b:ec:14:80:a2:51:29:c8:f1:1e:a8:c7:f9:b8:
                    bb:a7:f5:b7:69:ba:0c:83:f3:25:2c:ae:85:30:6b:
                    09:f2:5f:59:56:5f:b3:9f:00:04:38:35:a7:f4:dc:
                    b6:40:4a:9e:2b:39:d4:8f:4b:bc:f6:aa:7f:5c:f8:
                    38:e9:14:db:2f:31:0e:14:1d:60:90:52:cc:70:52:
                    4e:44:1c:63:86:bd:15:e8:89:93:aa:42:29:16:09:
                    f5:3f:33:7d:bd:87:83:23:a8:9d:99:15:55:96:5c:
                    f5:7e:4b:10:cc:d2:29:0f:29:5e:79:98:77:1f:5d:
                    e4:2c:54:f2:4a:aa:38:68:46:d8:a3:92:e0:4e:85:
                    59:03:35:1c:9a:05:a9:7e:67:bb:12:71:c7:2e:87:
                    cc:d7:6f:74:0e:4e:2c:c0:b0:fc:d1:4e:e6:72:91:
                    db:70:a2:26:9e:36:3a:62:66:5a:8d:5d:9f:73:3a:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B0:F9:5B:04:77:7D:EB:E1:DA:DE:B1:46:A7:EC:85:26:44:00:23
            X509v3 Authority Key Identifier:
                keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:39:ee:1b:95:a8:6c:30:b2:95:42:63:c7:2f:ed:43:0b:7d:
         93:8e:cf:af:59:3b:e5:5b:26:9f:e5:22:50:bc:d1:c3:e2:44:
         e0:33:a9:fa:bc:de:d6:63:a3:e2:84:f1:d6:dd:36:b1:72:ee:
         b2:6b:b3:b4:b0:ec:94:60:8a:e5:b6:1c:e7:0e:f7:3a:bf:85:
         df:7d:3b:b1:40:e9:0e:c4:e6:35:21:1c:16:ef:fa:40:30:e8:
         06:3e:98:42:ce:e4:e0:9c:3a:af:4b:01:9c:cd:32:be:4e:04:
         17:22:9e:df:68:0f:2f:cb:f8:bb:66:26:10:03:3c:91:12:21:
         0b:9d:d6:fe:36:80:e0:b8:35:fa:50:d6:c7:25:fa:60:e6:94:
         74:16:6f:c3:00:92:13:52:ce:e0:f9:d0:5a:3c:9b:16:45:63:
         fd:48:72:9f:29:72:25:c6:da:f2:a3:0a:43:34:8f:08:29:1b:
         35:3b:49:43:b9:b8:52:56:c6:b7:ee:12:ef:3d:04:5c:f6:a0:
         1f:82:c3:2d:22:c0:46:fd:04:10:f4:b2:ee:26:9a:cb:cb:75:
         ae:dc:a7:18:85:b0:81:41:eb:ca:3f:60:38:fb:ec:8f:a0:60:
         2b:df:02:82:c0:50:70:1f:ed:d3:ea:7c:52:62:a4:5d:50:7b:
         99:ff:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:50:59 2025 by rpki-client