Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File:                     Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier:          ME/d2Q3Dzw/h9P4YH9sbhyMoKt7DMQa965Vgw/iLpKk=
Subject key identifier:   0E:4E:3A:73:03:1E:21:4D:6B:CD:3E:E1:A7:F9:48:88:A3:6D:17:CE
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer:       /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial:       0196CACDF39CA1F7448EF2FD0F0EB12F0F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number:          149F
Signing time:             Tue 13 May 2025 18:00:16 +0000
Manifest this update:     Tue 13 May 2025 18:00:16 +0000
Manifest next update:     Wed 14 May 2025 18:00:16 +0000
Files and hashes:         1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: YHU4H0xSUnjm8JSYmd2YG/WkAqZjiEFWyEidze7ynyM=)
                          2: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:cd:f3:9c:a1:f7:44:8e:f2:fd:0f:0e:b1:2f:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
        Validity
            Not Before: May 13 18:00:16 2025 GMT
            Not After : May 14 18:00:16 2025 GMT
        Subject: CN=0e4e3a73031e214d6bcd3ee1a7f94888a36d17ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:48:99:35:a2:df:6e:2f:f6:96:7b:63:73:
                    c9:7b:9e:8a:51:f2:b1:10:0c:67:6c:93:57:ad:59:
                    83:df:fa:59:33:d1:02:9f:40:0e:8c:f0:41:14:2f:
                    fe:40:99:a3:9f:85:31:16:b9:fc:41:c2:80:cc:12:
                    14:8f:ed:01:ab:6a:db:50:6f:d3:b9:0b:0a:56:52:
                    f4:51:12:25:1a:c4:9c:a1:89:20:79:f6:44:77:36:
                    c9:78:d5:9c:77:5c:8f:3d:14:db:bc:c3:f1:8f:25:
                    cf:03:e8:d9:8c:7e:b9:af:fb:98:a5:cc:5f:24:16:
                    db:3d:dd:3b:cf:c4:84:5f:2a:c0:86:08:0f:3b:9f:
                    3c:97:3d:18:b3:54:33:60:49:0c:98:cb:25:2e:1e:
                    54:17:9d:1a:64:8d:74:1e:d1:46:45:5b:07:3b:a0:
                    98:d8:86:fd:fc:b4:e2:7f:d7:7f:45:3a:30:21:0f:
                    d8:9e:56:01:e7:f1:3b:ad:54:1e:8d:e5:7c:7d:83:
                    87:6b:2f:b3:8b:9a:e6:0d:6d:54:fb:1d:55:c8:e8:
                    4e:26:20:eb:c3:5e:5f:61:20:19:28:1c:7f:e4:4c:
                    19:22:d0:02:29:c2:1b:e2:82:10:93:35:b2:8c:25:
                    eb:ff:e6:5d:fe:f2:86:56:60:e7:52:96:28:0d:b5:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4E:3A:73:03:1E:21:4D:6B:CD:3E:E1:A7:F9:48:88:A3:6D:17:CE
            X509v3 Authority Key Identifier:
                keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:39:b5:0b:86:0f:fc:3b:da:15:6c:b9:90:cc:5f:ed:cd:
         a6:5f:3a:df:dd:bc:fe:ae:bc:22:8b:b5:7e:6a:73:42:4e:b6:
         d4:d4:db:3e:20:6c:7c:72:3c:a2:b8:74:97:30:91:ec:9f:be:
         b5:e9:5e:f8:8e:ff:3c:b2:39:5d:8b:11:f7:c0:7d:1b:d6:a1:
         bd:07:52:40:30:e4:07:04:76:ae:b7:31:31:46:d4:56:5f:12:
         e3:48:63:3d:3e:b3:71:5c:86:b2:8b:fb:16:46:cf:68:8c:16:
         8e:e4:0d:6e:c8:df:ac:cc:cb:05:50:49:88:ba:0b:64:33:04:
         fb:31:68:29:d3:dd:bb:2f:8c:4a:72:ee:f7:49:ce:ea:51:72:
         e4:e6:a4:c9:34:0c:30:58:4b:64:46:e7:be:27:23:27:9a:23:
         2e:5a:77:dc:e5:20:44:c5:ad:1a:02:e5:4a:5b:da:35:52:cb:
         30:c5:02:06:fa:ba:94:f8:8c:c8:1b:dd:ad:11:1a:f4:65:27:
         61:e3:5b:30:5c:59:ee:6c:35:99:81:9b:45:4f:fe:a6:5b:24:
         73:c8:df:12:c2:4d:8a:bb:7e:cf:c7:d3:7f:62:59:27:3a:94:
         ad:ab:f0:c9:8a:e4:e0:51:0e:e9:03:f6:08:c4:5a:4d:c9:38:
         d9:bb:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:38:47 2025 by rpki-client