Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File:                     HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier:          EATalUUqqr2Rna9XO0RWTVRhwVbok7HzjUppK2Q5XZ0=
Subject key identifier:   0F:54:BF:C2:B2:6C:12:88:45:D5:7A:6E:13:8B:28:54:A1:31:99:84
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer:       /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial:       0196BA48C997CC32F30E2D093B58997C91A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number:          1538
Signing time:             Sat 10 May 2025 13:00:54 +0000
Manifest this update:     Sat 10 May 2025 13:00:54 +0000
Manifest next update:     Sun 11 May 2025 13:00:54 +0000
Files and hashes:         1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: oEhOQ3h5X0z0JQgf2n5RzqObQHLNb62FniU6tuBEjkk=)
                          2: HNpMhKMf-UOKB_2xrTd5Ah5Jh4E.roa (hash: wTidaPS7G17Hoeusbm7EV9pgsdks7oYQI4PUUl46YEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:c9:97:cc:32:f3:0e:2d:09:3b:58:99:7c:91:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
        Validity
            Not Before: May 10 13:00:54 2025 GMT
            Not After : May 11 13:00:54 2025 GMT
        Subject: CN=0f54bfc2b26c128845d57a6e138b2854a1319984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:1e:ca:60:c6:16:00:30:0c:8a:0a:e9:95:
                    ff:89:d3:97:0d:e3:cd:dc:c3:87:1d:c4:8a:45:27:
                    8b:3e:70:52:97:7c:28:72:16:df:86:9a:1c:00:a4:
                    53:97:51:17:7d:66:4d:80:88:16:d4:ac:33:19:41:
                    d7:8f:a8:21:2f:63:b5:92:6d:78:f9:28:b3:92:8a:
                    ad:a0:bf:e4:64:d3:c5:12:ec:22:23:1a:26:9f:84:
                    9b:2f:f5:8e:f9:0a:15:39:5e:fa:f0:31:75:1c:95:
                    3d:33:ee:f8:3c:9d:94:70:c8:c8:cf:90:cc:00:38:
                    3d:a0:cd:72:1d:9d:c4:50:ca:fd:66:24:04:fa:73:
                    38:b4:34:da:d5:a2:8c:7b:95:0f:af:d9:20:3e:ef:
                    1f:1d:08:ea:e7:a6:1c:cd:b9:42:75:0b:e1:9e:e8:
                    37:9e:cf:bf:f4:43:b6:57:61:d5:c5:3b:fd:e7:92:
                    c3:46:99:72:0a:44:99:63:cc:e2:df:39:de:9a:46:
                    2f:1a:01:c5:29:ab:98:29:bf:fd:b1:87:d3:4a:a0:
                    93:0d:bf:fe:44:7f:12:06:6a:60:e9:ba:2a:03:c3:
                    fb:75:f7:42:04:d5:62:6a:53:ec:a2:b9:7f:c7:60:
                    89:6a:84:23:b7:50:40:90:6c:a4:c8:8e:e1:48:15:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:BF:C2:B2:6C:12:88:45:D5:7A:6E:13:8B:28:54:A1:31:99:84
            X509v3 Authority Key Identifier:
                keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:99:3a:f5:ed:bd:00:06:88:3c:b9:f2:57:fa:92:5a:98:26:
         2a:1c:38:51:f8:12:72:55:ab:27:59:c3:92:82:bb:02:c6:8b:
         0f:03:be:67:4e:82:74:53:f7:21:7d:4e:24:0d:3f:39:56:3d:
         23:8a:26:32:86:ad:dd:4d:d5:c9:fe:e4:97:27:38:36:8d:a4:
         17:ab:71:5b:fa:b4:14:98:11:61:24:48:3f:8e:f6:83:e9:64:
         a1:cc:bf:6d:8e:27:bf:e9:2e:8d:6b:f8:a9:c3:86:db:29:92:
         4f:c4:39:bf:85:77:54:be:8b:b6:dd:c0:cf:1e:e0:f3:05:65:
         ef:eb:d6:88:b1:67:bf:97:b2:0a:b0:75:4c:04:72:ce:3c:65:
         65:c6:35:42:02:b9:d3:08:cb:4a:3e:63:86:ea:70:07:06:f4:
         23:e4:ef:ff:14:30:f0:44:bd:05:5b:38:f7:ba:04:f9:01:03:
         36:90:8f:e0:f7:fa:cb:e3:41:8b:bf:27:83:20:a1:c8:85:b0:
         84:6c:c5:25:85:99:89:cc:7b:9c:25:fc:b5:ee:12:4c:4d:dd:
         cc:63:81:ea:d7:4b:a8:f6:bd:33:69:db:c7:1b:6e:47:24:fe:
         d6:ec:43:b0:f8:fb:5e:11:1b:3a:41:68:58:f7:e3:91:7d:35:
         06:39:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:27:25 2025 by rpki-client