Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          Xs1Qb7z1RyfmiNI5ETVjg6mNH9pN1AcxPiz8O+0v8ZQ=
Subject key identifier:   6A:AB:28:8B:FC:9D:63:D6:6E:70:7C:9A:A5:E8:64:08:12:B1:12:7E
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       0196A3F7B1C25551E3532CEA540379FF41F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          123B
Signing time:             Tue 06 May 2025 05:00:41 +0000
Manifest this update:     Tue 06 May 2025 05:00:41 +0000
Manifest next update:     Wed 07 May 2025 05:00:41 +0000
Files and hashes:         1: 88WU_lo-nSRGdQfY40VdogAMLxE.roa (hash: Hb+L5mbmqk3uGoKDZkv33m+okuLc3B+yQYtGc3eHLEs=)
                          2: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: xXaryePmhJ/uDvtqKysZdP8kbbwZp4UiXWvlIPohBSo=)
                          3: qitb7VLMgvff1nrPh9k84ZNCZis.roa (hash: 5aKxoc3/ZFGyn8GlrxxZrkPDb3gc2rupmpy/hBVwGfg=)
                          4: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (hash: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=)
                          5: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (hash: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:f7:b1:c2:55:51:e3:53:2c:ea:54:03:79:ff:41:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: May  6 05:00:41 2025 GMT
            Not After : May  7 05:00:41 2025 GMT
        Subject: CN=6aab288bfc9d63d66e707c9aa5e8640812b1127e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:33:79:2f:d8:5c:57:d1:1f:fd:e7:86:1f:
                    f8:48:18:17:07:36:25:02:aa:dd:06:3d:99:7f:53:
                    42:5b:0c:fc:8e:ac:21:13:a7:dd:f3:12:58:f1:39:
                    d9:6d:81:93:2d:45:4f:0c:08:94:e8:07:16:40:d5:
                    8b:74:c6:e6:35:ce:74:23:93:56:96:14:51:03:33:
                    3d:00:f6:5c:07:c1:2f:b6:cd:ca:d8:d8:cc:5a:68:
                    80:20:30:d9:06:16:d2:bd:fa:46:1b:34:a3:68:88:
                    d8:54:ef:43:7d:da:9f:be:3b:5e:83:3e:89:31:ca:
                    e3:cf:7b:59:f1:f3:ac:5a:da:1b:fc:06:fd:5c:1c:
                    d6:74:6a:f1:68:5b:af:64:c3:be:c4:df:ec:3c:67:
                    91:a8:be:47:d9:fa:38:aa:f0:a0:32:0d:3d:0e:6a:
                    ed:c7:9c:c8:84:e2:75:19:86:0c:8b:2e:6d:59:9a:
                    e5:0f:06:30:71:3e:97:d4:42:3b:ca:02:9f:23:07:
                    54:70:9d:2e:d6:d4:2b:f1:53:bb:19:0b:7c:b8:93:
                    13:22:c3:2a:1a:94:30:1b:25:ec:71:05:d2:cd:6d:
                    b1:49:e9:cb:ce:61:5f:29:4b:fa:20:74:42:01:10:
                    72:8d:1f:4c:2a:ee:4b:06:c5:ae:3a:f6:a6:14:58:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AB:28:8B:FC:9D:63:D6:6E:70:7C:9A:A5:E8:64:08:12:B1:12:7E
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:b0:89:e1:13:bf:8a:0f:e1:e4:0b:07:1c:ef:59:50:4b:
         13:f6:b7:55:2b:b4:e2:2a:cf:70:2e:7d:89:4f:5f:81:87:a0:
         2f:a1:77:f8:a7:2a:49:5c:e8:73:41:3c:b7:e4:d3:7b:e9:5f:
         2c:f9:c3:ec:b9:fd:1a:04:dc:b7:a0:7c:d6:7b:bd:ca:43:cd:
         c6:30:d2:ca:11:d6:06:16:62:04:71:67:ed:6f:e4:3a:30:7f:
         62:92:94:3d:40:f7:00:ca:3c:d9:f9:4e:c8:87:62:cc:c0:73:
         42:03:0c:eb:83:d9:e9:cf:17:28:8c:c8:8c:0e:e1:6d:eb:15:
         e9:0e:71:fb:dc:48:b1:e5:66:83:25:39:85:ab:f1:01:da:de:
         21:c9:11:35:e2:47:b0:d0:4d:9d:eb:5e:5c:8e:01:28:10:04:
         fe:12:da:81:17:fd:47:dc:a6:ed:bd:ff:a4:57:94:d3:62:75:
         53:df:5e:34:d8:37:6d:7d:a1:91:b8:16:e3:a2:7c:a8:ab:ac:
         49:99:4b:d5:5f:8b:c4:4a:aa:87:0a:c0:46:68:32:66:be:8b:
         98:2f:f0:24:c7:5b:b0:a6:f9:9b:30:3a:cd:bf:75:d9:47:f0:
         fd:a9:85:32:c9:75:39:e0:71:d2:6d:03:fd:e3:2e:40:82:23:
         0a:d8:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:17:23 2025 by rpki-client