Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File:                     HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier:          20R3wgUe/bUpgHBvosncgjEFcWAxbGjdomFpcdTY6ls=
Subject key identifier:   DB:0E:EF:CF:75:56:E6:B5:36:BA:E9:03:3F:B9:16:8C:9A:D5:0D:B1
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer:       /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial:       0196C3B91BDF803C970F183DB02BEAE80E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number:          14ED
Signing time:             Mon 12 May 2025 09:00:10 +0000
Manifest this update:     Mon 12 May 2025 09:00:10 +0000
Manifest next update:     Tue 13 May 2025 09:00:10 +0000
Files and hashes:         1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: bTaXQp7hEr0RXdgIx9wAvtr1XtGZ6PH2VsUAM479fuQ=)
                          2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:1b:df:80:3c:97:0f:18:3d:b0:2b:ea:e8:0e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
        Validity
            Not Before: May 12 09:00:10 2025 GMT
            Not After : May 13 09:00:10 2025 GMT
        Subject: CN=db0eefcf7556e6b536bae9033fb9168c9ad50db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:57:d5:65:bb:e9:cf:c4:29:13:22:f6:1d:5a:
                    95:4d:48:a0:ea:5e:53:55:08:5f:58:3c:85:83:48:
                    55:86:44:70:f7:3b:05:3b:17:35:a2:a8:cd:6f:f7:
                    4b:24:82:1f:9a:d4:8e:e5:c0:e7:3e:f8:fe:3c:a6:
                    83:b3:54:23:a6:b9:65:d9:da:4a:54:8f:c1:12:cd:
                    76:b2:dc:f9:c7:67:73:5e:66:e3:f4:16:80:01:e6:
                    39:3b:c6:5d:a9:f9:f9:85:7c:e4:b2:7f:56:17:c5:
                    7b:aa:ec:dc:e4:24:32:1a:63:4c:2a:ee:2b:a7:7a:
                    65:f0:fb:42:81:a4:5e:07:e0:15:aa:91:87:c9:93:
                    52:9b:9f:b5:8b:89:73:ea:d7:e2:4c:23:2a:57:ea:
                    87:0c:94:75:dd:48:81:91:fd:34:a4:15:f6:b0:f1:
                    ee:7b:21:77:c7:2d:7e:db:cd:3a:c1:3b:37:b5:01:
                    1e:e7:64:e3:7b:bc:da:00:a7:ba:4c:41:fd:59:ba:
                    4c:c3:d8:9d:01:d3:bb:89:72:49:fa:9d:e3:74:e4:
                    de:3f:81:e5:6e:35:83:b3:19:b7:fd:e9:86:7d:86:
                    f2:07:7a:c5:a7:99:5f:b6:68:1d:9b:2a:aa:a8:c6:
                    85:b9:6f:75:cc:0a:1e:0a:29:83:61:59:42:1a:c7:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0E:EF:CF:75:56:E6:B5:36:BA:E9:03:3F:B9:16:8C:9A:D5:0D:B1
            X509v3 Authority Key Identifier:
                keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:bb:8c:8a:d6:9c:37:46:54:d2:96:79:bf:57:fe:5f:0a:
         ff:45:c7:b0:6c:82:00:d2:1c:48:be:c5:2e:e9:42:49:94:40:
         f6:1d:a0:35:9b:fb:76:4a:23:f4:b2:7a:82:f9:fc:00:97:83:
         45:2c:0a:d6:c1:6e:f3:c3:aa:4c:e5:3d:3c:66:95:e1:fa:06:
         c2:11:b4:fe:64:8c:7d:20:af:92:18:69:1d:52:59:18:79:28:
         b5:34:29:fe:6c:73:ea:90:ce:4f:ab:6a:85:7e:7c:2c:04:a6:
         ba:dd:b3:01:7e:4c:5e:38:84:6d:90:fc:d4:30:68:37:49:54:
         f2:37:df:4a:87:df:c1:fc:3c:b8:f7:e1:c5:fc:46:6a:1b:50:
         52:7c:d5:58:f9:d7:50:31:d3:5b:f0:3c:75:6d:eb:93:a7:f7:
         20:4e:db:c5:76:bc:e3:42:45:ce:79:81:6f:57:90:a9:69:ff:
         77:83:3e:5e:d7:b2:02:86:48:9c:c3:a5:0e:86:78:1f:c8:bb:
         a1:e8:92:2e:54:37:10:fc:f3:c2:ec:07:b9:90:e8:06:46:4e:
         3c:bd:68:46:8c:61:e0:42:d2:9c:a5:01:bc:1d:b3:6c:47:2d:
         0d:fb:ec:00:d1:c9:45:99:e1:6c:0e:a8:b7:54:d3:1e:73:38:
         19:00:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:04:12 2025 by rpki-client