Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File:                     hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier:          O3+58UJhU22mFa/NZ8Y314i0QvdNhrblkUVxVihRo24=
Subject key identifier:   7E:03:85:BD:29:14:FF:74:8F:4F:D5:D1:93:91:7A:05:A1:15:56:78
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer:       /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial:       0196BA48F881A115F47B9484A69E1039005F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number:          0599
Signing time:             Sat 10 May 2025 13:01:06 +0000
Manifest this update:     Sat 10 May 2025 13:01:06 +0000
Manifest next update:     Sun 11 May 2025 13:01:06 +0000
Files and hashes:         1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
                          2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: RO+JkKrjaLrlYUwr4dKQLl3aOFXuusbz9koR0mHauZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:f8:81:a1:15:f4:7b:94:84:a6:9e:10:39:00:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
        Validity
            Not Before: May 10 13:01:06 2025 GMT
            Not After : May 11 13:01:06 2025 GMT
        Subject: CN=7e0385bd2914ff748f4fd5d193917a05a1155678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:78:2e:b4:4c:d5:aa:db:74:e6:d4:43:89:
                    c0:ad:29:7b:59:70:0c:21:12:ff:2b:26:63:ab:67:
                    d8:15:35:02:c9:26:28:35:4b:d1:b5:1a:3f:d8:30:
                    4c:11:69:14:74:53:e8:30:fb:2f:06:8f:b9:45:ae:
                    31:67:3d:e1:0a:8d:2c:20:d6:20:33:00:80:bd:37:
                    dc:71:26:64:11:0a:a0:62:2f:d8:21:38:da:df:2e:
                    fe:11:ff:03:3a:5c:53:3d:90:4e:39:e3:81:28:16:
                    74:39:0c:ac:91:d9:33:43:d3:bf:1e:67:30:70:a2:
                    3d:9b:64:92:5c:4c:e7:fa:b3:0d:ef:e0:a4:b9:32:
                    7d:7b:e8:69:18:14:2a:b8:74:e7:31:24:1e:0d:69:
                    ab:05:71:99:13:de:a0:d2:b2:3a:5b:a7:43:0d:3d:
                    95:dd:5f:9a:9c:95:01:0f:3f:70:42:ca:6b:56:1f:
                    20:f1:12:ec:70:c1:6e:92:b1:4f:3d:fb:7a:ec:fe:
                    ab:29:c3:29:ad:91:4e:90:28:b5:56:6b:e6:f9:59:
                    d1:3b:d6:e8:52:e4:44:7d:b6:ea:2a:24:ce:f8:58:
                    ee:cf:f9:de:24:69:a8:5b:38:3f:ed:b0:12:22:3b:
                    82:80:fb:bb:2b:a3:e7:d1:b8:73:94:21:c8:a6:88:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:85:BD:29:14:FF:74:8F:4F:D5:D1:93:91:7A:05:A1:15:56:78
            X509v3 Authority Key Identifier:
                keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e7:90:b5:01:a3:51:8d:01:b8:b3:51:95:b8:65:80:6b:86:
         a4:34:00:12:fb:5d:b8:de:86:9c:07:58:e1:3e:0b:29:6c:3c:
         62:c0:da:23:c0:3f:2b:11:bb:a1:94:af:fe:5c:7a:29:a4:c2:
         e8:cf:1a:d5:c3:fb:6b:8f:d0:a0:68:ad:59:8d:3b:de:45:b4:
         e7:bb:f6:33:e5:4d:9d:29:a1:5a:ef:ff:ce:2b:2a:43:a6:f8:
         3e:0b:8a:a2:1e:88:23:14:ee:b2:2f:ac:da:65:05:15:a6:cd:
         0d:28:f1:7b:26:71:d8:ad:22:9f:c8:12:8b:df:9d:1e:7c:a0:
         bf:cf:4a:8a:95:0e:8d:9a:9d:cb:cf:0a:ab:cd:b8:be:6f:ed:
         86:29:6d:e3:a2:69:8a:a3:35:b5:ad:3f:de:f7:cf:6c:e9:7d:
         9a:a3:41:e9:66:fd:e5:b6:1d:52:b8:14:f5:b9:20:b1:37:e0:
         6c:3c:ef:78:71:ac:7c:8a:53:ac:f3:03:4c:d9:df:64:bf:7b:
         52:ed:60:c8:a7:e1:b0:ed:9d:52:12:f9:d6:ac:89:29:37:86:
         b0:66:5f:c7:c5:96:ab:fc:50:d6:90:61:6e:a1:08:89:dc:f2:
         97:d6:ed:83:ec:55:f0:ea:ba:d9:77:15:96:c6:2e:b0:ad:67:
         da:3e:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:02:09 2025 by rpki-client