Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          eWvPOyf9XlabQJ6JrAHivYOiPm62X6Col9wCZq2ALg4=
Subject key identifier:   62:16:9C:F9:65:1A:A1:89:F7:C6:80:3F:B8:2E:B6:58:95:57:10:F6
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       0196A12DD32ABC79712725AD39346112F458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          1524
Signing time:             Mon 05 May 2025 16:00:56 +0000
Manifest this update:     Mon 05 May 2025 16:00:56 +0000
Manifest next update:     Tue 06 May 2025 16:00:56 +0000
Files and hashes:         1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
                          2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: 9IQfDqOCdrF/O6OABkOlw8olsKvmBoXGaUcILL98moc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:2d:d3:2a:bc:79:71:27:25:ad:39:34:61:12:f4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: May  5 16:00:56 2025 GMT
            Not After : May  6 16:00:56 2025 GMT
        Subject: CN=62169cf9651aa189f7c6803fb82eb658955710f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:d8:ca:cc:5b:54:4f:f4:bb:dc:07:41:55:
                    67:5c:79:e1:60:cf:b3:14:d2:f8:cb:48:2c:52:ca:
                    07:84:a5:7c:83:27:8e:57:fe:7b:12:bc:da:43:10:
                    fc:7a:32:6f:90:1b:e0:32:4e:c2:c9:6a:b4:41:4d:
                    fb:6a:de:d0:34:90:74:8d:42:e6:8f:04:46:3c:5b:
                    4a:4f:c1:0c:07:df:9c:3e:59:9b:61:bf:61:6f:39:
                    9b:45:05:b4:6c:52:e3:55:88:13:fc:f4:fb:3d:62:
                    6b:22:ad:b5:76:49:1a:63:ea:a4:c8:89:df:97:6a:
                    8d:2e:db:ee:49:43:0e:a7:05:25:07:3b:f9:17:6d:
                    a6:1a:49:70:a7:71:ce:b7:b2:0d:8a:41:27:30:39:
                    28:f9:ac:73:e2:49:58:2b:6f:a6:65:6f:d3:c5:ff:
                    ab:0c:fe:4d:1b:8c:4a:83:ec:b5:f3:44:7b:bb:4b:
                    2d:f4:46:7c:ef:1d:de:53:82:93:1c:13:6c:3b:ae:
                    04:cc:3e:50:ed:f1:d0:bb:ec:0b:ed:c8:96:9c:00:
                    10:23:5d:21:ee:df:5b:76:4b:2f:fa:7d:f3:60:1d:
                    7e:8c:e5:e4:8e:8d:83:e8:13:d7:19:1a:96:7d:0f:
                    0e:c5:c3:81:ea:af:b1:9e:15:ad:ad:01:bf:a3:72:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:16:9C:F9:65:1A:A1:89:F7:C6:80:3F:B8:2E:B6:58:95:57:10:F6
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3a:f0:b8:db:73:eb:5f:c3:f2:91:5b:4d:04:32:89:9f:5b:
         c4:d6:13:0c:bd:07:0d:48:da:ee:d6:e8:1c:ba:14:e2:20:b0:
         75:a1:25:51:55:dc:c9:42:7a:3c:94:e3:f3:06:58:58:56:2d:
         6b:77:f0:57:40:0c:b7:0e:67:23:ba:3e:39:42:d3:d1:24:29:
         fe:43:e9:6a:50:6e:f6:5d:92:6a:33:02:b1:19:cc:9d:8b:52:
         26:b1:f8:6b:3e:28:87:cd:b7:e4:a3:87:20:88:5a:92:e6:1c:
         e3:c4:3c:7f:c3:67:d7:53:d1:f3:be:13:e7:53:4d:7f:87:74:
         72:09:1e:ec:8f:7c:2c:ef:33:54:e3:38:8c:65:60:e9:a6:61:
         b2:bf:11:e4:85:a8:b5:8e:71:55:09:c4:74:a4:7e:22:a9:86:
         28:b8:77:5a:61:56:c2:e0:6e:32:42:bd:27:c1:89:e3:fc:34:
         c8:e4:4a:72:ff:ab:28:39:f3:2f:c2:71:ea:53:58:76:9a:b7:
         8a:5f:12:36:eb:a5:9f:58:56:b9:55:8d:48:51:ee:cf:5b:d1:
         43:0d:7e:50:33:2e:fe:1e:80:83:c1:3d:5b:80:25:02:40:70:
         4e:b2:99:8b:d0:5a:07:d6:1f:0b:21:d5:91:51:83:34:e7:75:
         1b:ef:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:55:46 2025 by rpki-client