Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File:                     HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier:          WE9D89HLfDSDLQ/euNtU8dgEAErkaOhhZI5TSvlg2/k=
Subject key identifier:   5C:A5:F1:E3:31:C3:22:EC:3E:B2:C4:40:CF:4C:56:6D:04:0F:F2:19
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer:       /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial:       0196C83ABB2F5C0F291B2C401430786BE152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number:          14CD
Signing time:             Tue 13 May 2025 06:00:14 +0000
Manifest this update:     Tue 13 May 2025 06:00:14 +0000
Manifest next update:     Wed 14 May 2025 06:00:14 +0000
Files and hashes:         1: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: 5BQ+L4ViMWspO5SUFfI3tx7MbKJSQxABAaXwy/mb//s=)
                          2: OqLUCxtgxChqlU1u5DSrV7o7hUE.roa (hash: 137N4QJ5LT3R5FaNUW+c79pvczICoEGACd1IGeCfKGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:3a:bb:2f:5c:0f:29:1b:2c:40:14:30:78:6b:e1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
        Validity
            Not Before: May 13 06:00:14 2025 GMT
            Not After : May 14 06:00:14 2025 GMT
        Subject: CN=5ca5f1e331c322ec3eb2c440cf4c566d040ff219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:db:af:53:7c:4d:6d:68:93:b1:cd:d9:38:d5:
                    08:68:ab:a6:03:ab:ac:cd:74:85:8c:aa:0b:48:4e:
                    40:4f:1c:a5:e0:c1:43:9c:5a:f5:1b:7e:18:4b:c0:
                    db:b6:a9:be:d2:d3:8b:8d:84:d6:86:fa:b5:e2:4a:
                    8f:38:47:3a:7d:61:f8:15:42:b7:8b:3c:ea:3d:a7:
                    13:0d:07:58:fd:f4:2d:f8:f8:7d:08:92:7a:9d:88:
                    9c:68:b7:98:a0:6d:09:da:ad:c5:b2:05:14:a5:d6:
                    07:e7:e9:ee:d3:8b:40:d9:f9:66:be:2d:be:c0:8e:
                    16:ec:f2:7d:79:2e:2a:74:08:b9:0e:29:ab:58:58:
                    60:09:9b:ab:c4:73:24:3d:63:ac:03:44:e0:48:e3:
                    03:ad:d2:f2:d7:54:5c:04:10:d4:ea:80:3f:76:22:
                    54:37:91:97:a0:5e:16:ce:20:ce:c4:2b:ae:9b:06:
                    90:f8:5c:fd:87:2a:99:86:b2:80:72:fa:b8:1f:0f:
                    d3:54:b1:f4:fd:59:89:5c:e9:b9:66:37:37:a1:eb:
                    de:3e:a4:99:c1:0d:66:1e:31:29:f5:bc:37:70:e9:
                    67:eb:2c:07:4b:26:f3:8d:61:fb:0b:18:ec:c4:80:
                    b7:4e:f9:76:e6:ed:46:f8:33:04:ef:66:04:09:0c:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A5:F1:E3:31:C3:22:EC:3E:B2:C4:40:CF:4C:56:6D:04:0F:F2:19
            X509v3 Authority Key Identifier:
                keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:71:e3:19:ec:4e:31:d2:0a:06:3c:9f:f2:a7:b5:fb:35:
         e3:44:7d:06:b3:a5:a0:76:f9:20:53:28:fd:db:20:ed:5a:55:
         e2:68:eb:55:27:88:c3:cf:94:4d:0b:71:bd:77:d8:3f:57:80:
         51:6c:c3:76:83:03:69:16:a9:10:45:4c:f3:d5:44:14:61:04:
         20:af:03:7c:90:d4:54:f9:69:d7:7e:6c:1b:85:97:e3:98:59:
         cb:2d:38:69:ca:b3:7a:e6:91:5d:47:5b:f6:92:8b:59:59:8d:
         38:fe:36:00:87:e6:b3:72:91:3b:e7:4e:e9:ed:88:f7:2d:73:
         a7:e3:53:8f:1c:e3:31:6b:ee:ba:86:b2:1f:0b:48:ea:32:15:
         e0:90:44:2e:b2:55:a3:72:ae:c1:85:38:60:1c:e8:21:b6:b7:
         89:69:8e:f0:2a:c3:64:7f:48:e9:f5:ad:7a:42:9d:b7:d9:45:
         10:53:65:3c:c5:75:e0:f2:14:ef:d1:7c:38:ef:31:b6:fa:92:
         e4:59:d0:ee:7f:12:6b:37:d7:4c:94:15:31:ad:b7:f6:c7:7e:
         01:7b:f5:ac:c0:ff:0d:66:d5:6f:b2:f2:0c:6d:2a:fe:49:27:
         88:8f:aa:aa:4c:01:07:c0:44:9b:36:6b:be:89:7d:a1:11:af:
         89:f6:97:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:17:32 2025 by rpki-client