Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
File:                     cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json)
Hash identifier:          vlp9fwHzmhUtTSTLgg9E93IpKbMjJU0s7+dAlwoh9ME=
Subject key identifier:   21:84:57:29:36:97:69:BB:28:CE:8E:41:AD:A4:DF:04:85:02:08:E8
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Certificate issuer:       /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial:       0196A5AF18C53937A9D8117B4834196E23B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 13:00:37 +0000
Manifest this update:     Tue 06 May 2025 13:00:37 +0000
Manifest next update:     Wed 07 May 2025 13:00:37 +0000
Files and hashes:         1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: bxvhkvapQwLXhxj13dp55T0QdPGTGAnxvvGgwhy+fwM=)
                          2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:af:18:c5:39:37:a9:d8:11:7b:48:34:19:6e:23:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
        Validity
            Not Before: May  6 13:00:37 2025 GMT
            Not After : May  7 13:00:37 2025 GMT
        Subject: CN=21845729369769bb28ce8e41ada4df04850208e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8e:aa:5e:8f:d8:29:bf:3e:83:d0:6e:e5:61:
                    99:d2:93:ac:6d:27:99:91:df:f0:2d:38:07:ca:bc:
                    d5:48:37:47:27:d1:6b:c7:6f:93:d7:2f:2b:5e:b8:
                    28:73:ea:0b:e8:06:46:48:d4:07:84:c8:f5:bb:46:
                    6f:a8:66:31:7c:c3:7d:05:09:b8:90:8c:9f:ee:06:
                    d5:79:39:8d:30:c5:6b:5f:a4:25:95:a5:da:df:42:
                    55:e0:a6:da:4e:fb:30:b7:16:18:e7:d1:a8:24:11:
                    ce:25:ba:19:af:ca:b5:2a:73:7f:5b:b0:20:73:70:
                    40:71:9a:e4:f9:0a:2b:71:ab:5f:5e:99:67:0b:b0:
                    13:fb:e6:46:1c:e8:61:63:c6:83:c3:e7:21:36:0f:
                    17:b1:cd:01:1d:5f:7d:af:f4:2a:ef:c1:63:12:7f:
                    65:02:6d:9f:6b:50:d9:b3:9c:49:ab:14:41:47:11:
                    36:a3:ed:76:ee:14:2d:49:16:d5:86:6e:38:64:ca:
                    d8:4a:7b:b7:80:01:77:83:d6:73:f6:7f:3c:d7:8d:
                    f4:88:a8:1b:50:c2:97:31:47:b9:50:66:c3:04:5b:
                    c1:5c:e1:f1:66:c9:9a:b3:e5:67:f5:14:e5:28:32:
                    df:d7:39:76:84:18:bf:a2:18:33:73:17:09:25:a6:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:57:29:36:97:69:BB:28:CE:8E:41:AD:A4:DF:04:85:02:08:E8
            X509v3 Authority Key Identifier:
                keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:84:d4:33:a5:2b:92:9b:ea:2e:ee:b3:3c:45:ac:ce:79:2f:
         65:3b:56:56:c7:8a:5c:5e:51:a1:4f:c4:2e:9c:16:b2:e5:08:
         18:49:ff:4f:5c:c5:b3:3d:02:1b:57:8e:52:9f:ca:d4:f6:7f:
         9e:6a:75:0c:b9:b3:96:ad:e5:3a:d6:64:6f:cb:b4:ca:67:61:
         fe:0a:b9:f0:f0:1c:2f:6e:db:07:a4:80:c5:3b:e4:f3:63:57:
         7f:51:41:b2:46:bc:13:23:75:e7:2a:d6:d4:24:26:85:86:66:
         33:54:c6:e1:c9:27:47:3d:e3:ad:e1:5c:2a:4f:b7:aa:fe:8b:
         6c:cf:98:39:e6:4e:2a:23:16:87:71:e1:ad:37:fe:6d:82:4d:
         b2:e6:0e:9b:64:ec:a7:81:26:ae:4d:e3:a7:d8:c3:9d:e8:9c:
         fa:bb:b1:f8:e2:9c:e3:06:96:6d:03:66:d2:d2:46:48:e8:a3:
         b8:1b:73:11:8c:b1:01:d9:d8:b8:3a:75:38:0e:1b:bc:4f:e2:
         9d:b2:cf:c5:39:4d:d0:3e:e4:89:6a:70:f5:f3:9f:a0:d6:fe:
         6c:77:2d:dd:61:5f:63:5d:a6:f9:1c:ef:ef:49:f4:58:ec:16:
         69:20:3c:4f:0c:b7:25:8b:d4:17:99:7f:eb:4d:c3:20:17:a1:
         fb:91:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:34:11 2025 by rpki-client