Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
File:                     hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft (raw, json)
Hash identifier:          4GQTyRu/P3f7XUO+R96DK6vu2+hko8+W/HFfk5qSlBs=
Subject key identifier:   20:21:36:B3:D7:19:F9:68:8F:1C:96:A5:5D:A6:48:EE:21:4F:8A:1C
Authority key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
Certificate issuer:       /CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Certificate serial:       0196AD9F41456F33F8BDD8A9B3CB6B0766D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
Manifest number:          152E
Signing time:             Thu 08 May 2025 02:00:17 +0000
Manifest this update:     Thu 08 May 2025 02:00:17 +0000
Manifest next update:     Fri 09 May 2025 02:00:17 +0000
Files and hashes:         1: RIDaaDvlCW6kZ_Qmkvg7iHhvkxs.roa (hash: TtEPT7gUdS6PVf0+fJoFxhyGOnl72shQIlFVnXWjJd4=)
                          2: hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl (hash: TVrt8/TVwNui7hRrIwVvkpY6ENbYDXNVHTqqgJbmDIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:9f:41:45:6f:33:f8:bd:d8:a9:b3:cb:6b:07:66:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
        Validity
            Not Before: May  8 02:00:17 2025 GMT
            Not After : May  9 02:00:17 2025 GMT
        Subject: CN=202136b3d719f9688f1c96a55da648ee214f8a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:ae:8d:6f:1e:2b:1d:9d:4d:d6:1e:56:5c:
                    62:00:57:5b:0d:15:aa:40:9b:be:8f:94:50:b0:81:
                    ae:1f:4d:ab:2b:d4:fa:ad:6d:98:1e:0b:71:9e:94:
                    86:3f:cc:66:de:53:6d:a8:6a:b7:82:39:e7:89:4f:
                    22:81:63:57:f9:a0:04:e0:f6:99:d2:8d:fc:0c:0f:
                    58:72:58:4f:d4:30:09:34:51:75:e1:aa:6f:28:60:
                    e8:17:f1:4e:76:4e:ce:89:68:f5:36:63:e6:48:26:
                    84:9a:04:78:f7:20:93:21:af:3b:f5:e7:1d:4a:ae:
                    02:46:91:99:7a:20:b5:17:29:54:31:07:1f:9c:af:
                    12:45:be:fa:59:86:a2:d0:cc:e8:71:dc:ec:3f:c6:
                    e8:c5:ab:93:73:7b:b5:3c:46:26:33:4c:72:10:5d:
                    25:68:4d:a9:f8:a4:c4:2d:e7:6f:27:82:bf:b5:03:
                    28:a8:fa:a8:2e:d3:08:85:8d:44:45:ea:71:c6:6c:
                    a5:0a:09:e2:2b:2c:a9:7e:47:2e:37:09:c5:70:14:
                    2c:ad:22:d9:db:6d:c4:2a:dc:26:cb:60:08:f3:af:
                    4f:64:9f:8f:6c:f5:9f:2c:f0:19:be:6e:e4:49:05:
                    4d:19:b0:fd:c7:7b:17:a2:e4:34:90:62:bc:92:34:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:21:36:B3:D7:19:F9:68:8F:1C:96:A5:5D:A6:48:EE:21:4F:8A:1C
            X509v3 Authority Key Identifier:
                keyid:84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:57:f8:14:4b:9d:45:54:4f:67:47:f1:c7:49:0a:f4:7b:99:
         1e:3b:1c:3e:c8:05:7e:02:15:5c:8b:9e:19:36:1d:d7:6e:7a:
         76:01:bd:53:84:3e:32:38:22:ee:9a:48:a9:05:ec:8d:d3:64:
         be:a2:e5:53:6e:c7:88:eb:cd:00:73:fb:42:f8:cf:18:da:f8:
         88:ad:b7:1d:5b:84:14:cf:47:86:8c:99:b1:90:d0:83:a7:aa:
         f0:0d:37:8f:9d:c1:4d:1f:c2:04:26:3e:13:9a:6b:b2:0c:ec:
         c2:2e:1c:04:ed:04:b4:32:5e:01:f5:9c:be:8f:9c:7f:5c:31:
         cf:5f:20:b3:c4:3c:02:12:29:b9:62:bb:db:ee:35:1a:f5:5a:
         8a:75:41:aa:74:89:ed:91:cb:be:0c:bb:93:81:0a:d7:b7:14:
         39:3a:d5:5d:72:bc:3a:03:91:16:53:84:40:b7:0f:c7:bd:95:
         3f:51:b7:93:88:94:9b:38:d4:4d:de:a9:f4:3c:0a:c8:6f:b7:
         29:7b:b6:ee:3d:12:14:7f:18:61:6e:b9:54:05:44:43:9d:6e:
         15:67:b6:9b:fa:f1:10:5b:0f:b2:15:65:f8:9d:90:99:c5:ff:
         7d:34:e8:b2:9e:ef:17:9d:b8:0e:63:ea:9e:a6:fe:da:85:56:
         79:b8:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:21:16 2025 by rpki-client