Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          AymBm6vS9cmjJ6jF0v4H6NPPY8vd09c4p9qvb5WxknI=
Subject key identifier:   58:99:21:C5:66:D6:A2:D2:50:BE:D0:C4:6A:74:B7:C7:F6:1E:C9:52
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       0196C9F2AD46260A96E7392CD265A9CC828C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          1493
Signing time:             Tue 13 May 2025 14:00:46 +0000
Manifest this update:     Tue 13 May 2025 14:00:46 +0000
Manifest next update:     Wed 14 May 2025 14:00:46 +0000
Files and hashes:         1: MbStNmXQF3r8BjIEIY6alBv8fXM.roa (hash: qBMHoSNp30r52ggSq1NF5Ja+ou1kpfZ0GNdRTXuZlMk=)
                          2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: WKgbYk9db7UJfnn9FDloC+8phMW9TVUaXELxTMQgzps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:f2:ad:46:26:0a:96:e7:39:2c:d2:65:a9:cc:82:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: May 13 14:00:46 2025 GMT
            Not After : May 14 14:00:46 2025 GMT
        Subject: CN=589921c566d6a2d250bed0c46a74b7c7f61ec952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:cf:13:f2:2e:bf:a9:aa:66:8f:3d:55:65:
                    05:ba:de:ba:d6:ae:b9:2d:fa:e4:da:d8:e2:b6:2b:
                    0c:0e:d9:e2:38:f9:a0:35:85:8d:c5:17:fa:92:bf:
                    e9:2f:7b:6f:0f:94:40:63:ff:2e:8f:97:48:09:ef:
                    b5:a9:58:d5:3e:f7:d9:0a:e9:9c:32:8c:a4:fe:70:
                    33:69:af:6c:45:e0:8c:f1:78:ca:a6:21:bc:a5:a4:
                    60:02:7e:17:32:4c:11:25:59:51:b6:80:c2:03:6f:
                    da:87:f9:d7:80:12:a8:f4:30:f4:49:d4:e3:a9:a7:
                    38:ae:43:50:dc:8c:5a:38:93:8b:ff:76:52:8f:2d:
                    e2:06:74:ba:26:7b:d7:79:62:61:0b:02:05:93:b7:
                    23:12:86:51:fd:c2:6f:e9:1d:65:22:e7:60:df:93:
                    2f:13:30:bd:6f:7d:99:8a:76:d2:d9:b0:65:af:21:
                    2c:f7:93:20:b5:28:61:a4:1c:d0:b2:10:ab:56:e8:
                    30:14:59:ae:46:dd:f3:ef:61:f3:1e:7a:24:ce:6d:
                    90:45:72:72:88:16:86:1e:c9:cf:d2:97:fd:3b:9a:
                    01:01:85:54:f5:95:d3:ec:b8:1f:61:88:c0:ea:ca:
                    c2:68:1c:ba:f4:fa:e2:a1:ee:fc:7a:be:61:13:c0:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:99:21:C5:66:D6:A2:D2:50:BE:D0:C4:6A:74:B7:C7:F6:1E:C9:52
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:c9:39:7d:4e:a2:da:1c:64:69:7e:ed:c6:89:eb:f2:a7:
         c7:4c:01:98:43:83:3b:d8:5b:07:57:0d:f5:cc:e7:82:84:f1:
         e5:50:d6:84:21:24:d6:eb:f7:0d:3c:6f:bb:02:11:a2:56:67:
         cf:f1:e8:a4:c1:7a:40:81:70:c4:09:e4:6e:f3:88:f1:87:ff:
         ad:ee:b2:5e:28:04:89:99:07:82:c0:db:54:08:23:16:40:28:
         16:55:6f:82:c7:32:49:ca:f6:88:c7:ca:bf:6d:86:cf:af:78:
         4f:44:fc:61:ca:2b:ee:d7:01:dd:4b:9f:af:f3:54:8e:e9:40:
         95:5e:04:90:13:b2:6b:f6:c2:5b:11:4d:8b:89:fe:0b:87:91:
         92:eb:2e:1d:1d:8a:53:e0:2a:bc:41:39:ae:24:e5:00:3b:be:
         9e:17:31:2c:8c:61:20:b3:0b:1d:1d:09:49:6b:82:f2:5d:ee:
         21:05:b0:a1:7a:10:81:4a:9c:4d:de:52:ae:e2:b3:c7:a2:8e:
         6d:0f:c7:53:91:d8:7a:2c:aa:3c:78:7e:d7:e9:08:b5:fe:5a:
         64:88:80:d8:b5:68:93:7d:a5:ee:41:76:4f:ae:65:52:65:77:
         10:f5:03:ba:ce:4d:1f:ee:92:c7:ed:42:1d:ef:8b:d9:53:6e:
         09:5c:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:25:04 2025 by rpki-client