Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File:                     hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier:          iG3869i7zU9a9hh5PWJXk2GLxgLXhMN6td9cw0mroU4=
Subject key identifier:   A6:61:5F:85:42:C7:0B:63:7C:DC:E1:A4:33:C8:F9:A6:49:2F:14:20
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer:       /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial:       0196BB92855F3286F1BB33FB2F6566D17E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number:          1535
Signing time:             Sat 10 May 2025 19:01:03 +0000
Manifest this update:     Sat 10 May 2025 19:01:03 +0000
Manifest next update:     Sun 11 May 2025 19:01:03 +0000
Files and hashes:         1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
                          2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
                          3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: imYX6XhsIjNHF3BPNdo1IZ0P7n5+yzFEJy4H9K4ESSQ=)
                          4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:85:5f:32:86:f1:bb:33:fb:2f:65:66:d1:7e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
        Validity
            Not Before: May 10 19:01:03 2025 GMT
            Not After : May 11 19:01:03 2025 GMT
        Subject: CN=a6615f8542c70b637cdce1a433c8f9a6492f1420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:cb:f1:e3:e6:c7:69:a6:21:c2:d1:54:f7:
                    53:59:0a:58:bc:3f:99:5d:f3:60:9f:c8:9c:4a:0d:
                    79:41:c8:4f:54:89:b0:b8:fc:d8:db:e3:4e:c5:42:
                    aa:f1:81:8b:2a:1c:51:04:75:c5:f6:f8:2b:8a:ac:
                    99:91:7d:9a:b6:11:4d:7d:25:83:56:17:b8:21:be:
                    16:68:b8:17:13:e0:db:0f:18:a1:39:d9:ab:03:d6:
                    b7:00:18:9f:dc:b0:d0:0e:30:e2:28:ed:29:a4:79:
                    65:53:92:f9:f8:bd:ad:5d:fd:29:bf:73:1a:d4:7d:
                    2a:cd:24:61:4d:b8:61:65:d5:49:f9:78:85:a9:77:
                    3e:f6:67:29:cd:21:e2:2e:e3:71:05:35:24:63:b3:
                    f4:c5:45:62:cd:0a:a9:97:81:10:5d:70:57:fd:ab:
                    0c:b3:9c:9c:0f:fe:4b:9d:65:82:82:da:c0:5a:85:
                    2c:5b:ef:96:0e:a5:f0:83:c3:63:5c:4c:99:e5:b0:
                    f1:19:32:19:68:b7:42:89:52:79:0c:06:29:bd:72:
                    19:72:98:68:04:69:01:cf:44:68:37:be:cb:5b:67:
                    fc:b8:ef:11:cf:e0:d2:e0:c8:af:0e:be:24:13:ca:
                    ef:6f:e1:ba:17:08:26:6c:d2:a0:a4:8c:aa:f0:b3:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:5F:85:42:C7:0B:63:7C:DC:E1:A4:33:C8:F9:A6:49:2F:14:20
            X509v3 Authority Key Identifier:
                keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:54:e0:66:72:4c:96:65:7b:30:47:6d:0a:fc:e5:24:a1:
         1c:c1:52:4d:18:7e:47:92:ef:7a:6d:de:0f:49:67:9c:c9:5f:
         39:2d:f1:f8:44:32:53:f1:7e:ad:1e:5d:d6:15:df:3f:7d:f5:
         03:a5:2b:31:0b:30:b6:93:9c:99:87:cc:70:09:d4:2a:7c:53:
         70:cd:f1:7d:f0:f5:cd:4f:ed:77:37:df:ab:90:ce:c4:23:85:
         a2:1c:26:08:71:ec:e5:67:ea:c7:93:b5:48:2e:4b:d3:06:e8:
         53:da:77:a8:5e:d2:5b:05:36:9b:93:c1:93:0a:d5:b8:41:8e:
         f3:d0:c0:8e:9d:8a:2b:64:a2:f3:2c:0d:25:07:ea:ab:03:8a:
         40:cd:7a:da:71:10:d9:75:2b:a4:4f:dc:70:41:20:9b:96:5f:
         f0:bc:d2:13:8a:d1:03:62:c8:98:9c:ed:e6:a0:fc:f5:b2:05:
         0f:74:90:cc:af:b0:e6:30:bd:7f:94:9f:37:68:db:9c:22:bd:
         88:ef:82:e8:4c:76:a0:f9:31:f5:98:66:d5:2b:7d:57:65:8a:
         eb:03:1e:2c:6c:59:57:20:81:e9:0c:a1:14:95:27:89:5b:e9:
         50:cb:9c:77:9a:45:4c:fe:8f:90:d0:65:bf:73:c4:0f:33:61:
         52:b8:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:23:43 2025 by rpki-client