Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File:                     HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier:          KOOg1QjfQyPD7FkW7zN+xtIWFgC0CWOYjvLGbSUyPUk=
Subject key identifier:   2E:BD:C7:88:26:A3:D1:87:DD:E1:61:64:11:41:F1:E3:16:3D:90:22
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer:       /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial:       0196A0F63F0A51960399D9E727E05BFED5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number:          1525
Signing time:             Mon 05 May 2025 15:00:14 +0000
Manifest this update:     Mon 05 May 2025 15:00:14 +0000
Manifest next update:     Tue 06 May 2025 15:00:14 +0000
Files and hashes:         1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: csTzB9mwbNw1z9MWPo9/7us6qUWJbX2HcYVKFSUZcPg=)
                          2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:f6:3f:0a:51:96:03:99:d9:e7:27:e0:5b:fe:d5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
        Validity
            Not Before: May  5 15:00:14 2025 GMT
            Not After : May  6 15:00:14 2025 GMT
        Subject: CN=2ebdc78826a3d187dde161641141f1e3163d9022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:2a:52:68:28:0e:cf:07:17:35:1d:1c:88:
                    cd:51:3b:75:39:d3:d9:2e:1d:11:ef:47:34:ed:8d:
                    d8:2d:82:6c:9b:26:bb:5d:49:ed:ad:6c:16:1b:cf:
                    83:46:1a:8b:c8:7b:35:03:fc:15:68:8f:c8:77:c9:
                    d6:a5:da:92:7d:93:5f:67:47:05:ad:df:0f:c0:d1:
                    ad:ae:6d:d7:16:65:54:90:52:25:87:02:87:ef:12:
                    44:e3:17:df:c6:25:87:12:2b:01:14:44:81:dc:b5:
                    2b:cc:df:85:04:30:a0:8b:6d:a3:5b:4e:f3:db:72:
                    91:8b:aa:fd:c6:f2:06:0b:bc:86:30:24:61:2a:6d:
                    86:ef:27:cc:5b:c2:c4:2f:a7:84:2e:81:6f:1f:93:
                    ea:61:14:f2:5b:fe:b5:3f:a9:e3:2f:99:06:c1:2d:
                    0b:35:b5:b1:8a:26:6c:8b:1e:85:51:5e:5b:6f:cb:
                    fa:ab:e8:c3:e1:2a:9b:d7:c6:62:16:85:1d:9b:f9:
                    2e:c5:35:c7:d9:24:1a:18:62:6e:3d:7c:ca:fc:5c:
                    b4:3c:50:27:e6:77:b8:d7:c5:56:2b:11:94:0e:18:
                    09:30:4f:7e:90:ee:2f:62:25:d7:6e:10:f3:85:f2:
                    38:7d:1b:73:4e:e7:8d:05:d4:88:eb:c5:d1:67:e4:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BD:C7:88:26:A3:D1:87:DD:E1:61:64:11:41:F1:E3:16:3D:90:22
            X509v3 Authority Key Identifier:
                keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:7a:77:53:c1:f5:99:5e:48:eb:18:8e:30:7e:75:60:92:
         83:a0:d1:4c:32:3a:07:dc:3d:23:1c:08:89:ce:2c:cc:48:3d:
         63:cb:09:2a:dd:0e:7b:70:1f:94:5a:5d:56:c3:45:2c:e7:de:
         11:25:0d:0b:2d:74:9a:74:a6:df:06:b3:fa:36:c5:ed:f2:4d:
         42:e8:6d:78:41:59:54:50:49:10:2b:d4:34:9b:59:1d:0d:1c:
         c3:ec:61:fc:dd:a8:39:37:58:90:f8:1e:63:bd:f3:37:58:cf:
         bf:47:cb:48:cb:95:ec:60:a5:5c:a5:97:28:2a:84:81:81:e1:
         a6:63:23:bc:37:b3:b3:05:ed:c0:16:3f:f9:f2:aa:b7:a1:eb:
         35:2e:8a:d3:b5:f5:a5:e0:9d:d5:24:f8:99:bc:3d:47:29:7f:
         08:56:85:9a:16:35:f2:d8:54:37:96:66:c6:97:bf:fd:67:1b:
         f6:ec:b6:44:87:41:59:15:8f:43:08:aa:a5:69:e7:18:e5:f7:
         36:1e:9c:e8:fd:aa:4b:b7:a2:c9:24:9f:49:1a:e0:55:cd:ca:
         f0:8f:7d:06:dc:38:83:04:dd:e8:ea:48:5c:5c:2e:78:6e:72:
         68:01:19:f7:d3:fa:41:62:3b:b0:f8:6a:26:89:7b:e9:08:12:
         88:de:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:46:32 2025 by rpki-client