Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File:                     HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier:          /8NzQ4wucv+c6+fvk4d5ycDvI66ggHaDne8pzCJujlU=
Subject key identifier:   F4:7A:00:77:DA:1B:F1:3E:63:08:67:79:64:EC:50:2A:E6:CB:24:20
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer:       /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial:       0197B5C517CEB1E712683B9F4B1B192E5EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number:          1349
Signing time:             Sat 28 Jun 2025 09:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:22 +0000
Files and hashes:         1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: a3oMczB0LwCcHSG/lYpUXyGyRGpbxeSTA/+Ai4cxMa8=)
                          2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
                          3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c5:17:ce:b1:e7:12:68:3b:9f:4b:1b:19:2e:5e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Validity
            Not Before: Jun 28 09:01:22 2025 GMT
            Not After : Jun 29 09:01:22 2025 GMT
        Subject: CN=f47a0077da1bf13e6308677964ec502ae6cb2420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:d1:13:17:dd:7d:ed:82:4e:99:7d:d3:ae:
                    a9:ff:88:17:7f:da:8d:f5:75:6a:1e:8f:8e:86:bf:
                    81:e9:49:87:e8:61:10:af:3e:31:d3:45:0e:9c:5b:
                    cb:38:65:f0:16:3e:43:41:81:f0:6f:e2:7c:87:ae:
                    b0:a6:6f:d5:d8:53:1f:5b:b5:53:98:a7:d7:df:92:
                    b5:b1:68:b9:da:2d:85:09:78:8d:59:6f:e3:88:85:
                    64:a5:00:14:65:b1:09:c8:19:d1:f1:19:ce:1f:30:
                    90:30:f2:d9:98:06:5e:f7:9c:7d:10:10:1e:66:24:
                    c8:ca:0f:ac:de:1a:17:cd:e5:64:fb:89:b8:21:71:
                    55:a1:30:93:20:70:f3:66:60:ae:15:da:cd:f9:1d:
                    6d:f9:ed:82:39:52:9e:45:9e:7b:f2:78:09:2c:52:
                    5c:d4:54:e3:68:8e:83:9e:a9:99:50:68:01:2a:59:
                    e8:4e:06:81:68:4d:08:4d:86:36:fd:23:34:2c:0b:
                    79:f3:e4:96:b5:16:77:fe:c2:b7:fa:3c:cc:5d:cd:
                    f8:e1:25:17:d5:7b:d2:da:7f:86:75:9c:00:67:fc:
                    c8:87:6e:ce:ff:cf:ad:d1:bc:5b:a8:9d:3e:6f:f5:
                    4c:d5:2a:d4:16:4a:cd:69:ad:69:2c:1b:31:33:5c:
                    1c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7A:00:77:DA:1B:F1:3E:63:08:67:79:64:EC:50:2A:E6:CB:24:20
            X509v3 Authority Key Identifier:
                keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:6f:bb:e0:5e:7d:b0:eb:73:94:e0:1b:2e:b1:22:3a:fc:
         8f:1e:6e:17:52:c7:ab:e1:fc:a1:65:26:6b:6b:38:d7:ec:30:
         60:fb:a6:22:11:e8:96:ba:34:92:d2:6e:15:dc:b3:1c:1e:9a:
         ea:a5:a4:a6:d8:60:16:4c:33:76:48:b7:7b:bc:3d:47:a6:d0:
         95:cc:15:1d:5a:d3:c5:30:8a:d4:ab:6c:1b:e9:ca:81:4e:6e:
         cc:5d:07:b7:81:5f:39:7a:48:c8:33:a9:91:fb:60:12:39:66:
         ee:0b:5f:92:74:28:25:17:f1:da:a7:97:1c:fb:cd:a7:4c:d6:
         7e:ce:65:28:ca:b2:51:ad:7d:df:0d:ce:61:53:fb:2a:e2:b3:
         59:09:ab:98:1e:4b:10:c0:79:ce:fd:e7:8e:11:36:8c:c3:66:
         65:2c:bc:d1:24:74:c5:53:ad:01:fb:6f:4f:c6:2b:51:02:51:
         68:aa:5e:9e:98:22:7c:c6:b1:f5:11:cc:ba:30:a8:21:a4:ec:
         4c:a0:f2:0e:3c:90:e1:ec:d4:4a:c5:39:0a:df:75:e3:f2:88:
         1f:6c:d6:1b:31:43:c1:a1:53:06:53:42:b4:18:dc:70:a5:6f:
         a8:75:8c:2a:35:be:31:5e:47:57:8d:7a:3b:60:c8:b7:59:ff:
         3d:f1:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:32 2025 by rpki-client