Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
File:                     HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json)
Hash identifier:          HDhelTX/3+gH0KPB+VN95oPqsp6LlKQ4DmExgTlJyB8=
Subject key identifier:   F7:A7:9B:5A:29:B6:03:A7:9E:BF:3D:33:9E:0B:FA:5A:2C:E5:FB:1C
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Certificate issuer:       /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial:       0196BBFFF6CB1E0834765E727F99CFE2CF91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
Manifest number:          1257
Signing time:             Sat 10 May 2025 21:00:36 +0000
Manifest this update:     Sat 10 May 2025 21:00:36 +0000
Manifest next update:     Sun 11 May 2025 21:00:36 +0000
Files and hashes:         1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: lG+o26nvs1C4WGa025iFMtumjTFBZJPkyoivXLpbzgg=)
                          2: Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa (hash: FtyHvpwzr+fctqlndkuiTxqEdI3uy3i+5i35b5nlvso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:ff:f6:cb:1e:08:34:76:5e:72:7f:99:cf:e2:cf:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
        Validity
            Not Before: May 10 21:00:36 2025 GMT
            Not After : May 11 21:00:36 2025 GMT
        Subject: CN=f7a79b5a29b603a79ebf3d339e0bfa5a2ce5fb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:ae:ac:ae:fc:9a:2b:10:3d:7e:cb:fb:82:
                    2e:f9:a4:24:18:0d:61:6a:1c:ba:ab:e1:a0:a4:26:
                    08:1b:5f:df:71:df:f3:fe:6b:22:5a:5f:f0:2f:d0:
                    b6:a0:42:73:58:2d:27:c6:ff:d7:92:f4:7f:95:14:
                    88:4e:86:c0:fb:ef:32:63:7c:d1:29:da:0a:d4:32:
                    cc:f4:4f:53:b9:e5:43:b7:76:c8:ac:5f:35:0f:cf:
                    12:81:10:b3:6e:32:e3:32:ed:96:18:e8:cc:b8:78:
                    96:15:95:26:ce:9d:e3:2e:4a:f9:eb:a2:9b:0f:b6:
                    ad:fe:31:fb:1d:15:a3:4c:5f:40:de:88:d6:54:7c:
                    ef:33:f5:f6:22:2d:b4:97:15:96:5a:2b:62:3e:d7:
                    85:fc:88:51:25:49:bb:7c:f7:73:af:57:23:90:e0:
                    c7:57:42:1e:9a:b3:6c:9e:3b:cb:75:a2:af:5c:a7:
                    f0:60:2a:a2:4b:5d:20:8d:53:65:24:ab:db:6d:21:
                    e4:8a:1c:89:3b:cb:1c:79:5c:41:2e:25:b5:7f:47:
                    2b:45:da:e2:5d:63:c2:17:c6:3a:ef:18:57:4e:31:
                    3f:af:e1:80:a7:7f:4f:e4:6a:58:6d:46:ad:f4:8a:
                    4d:ca:53:69:13:b3:c7:2a:c2:30:72:4f:6c:ae:9b:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A7:9B:5A:29:B6:03:A7:9E:BF:3D:33:9E:0B:FA:5A:2C:E5:FB:1C
            X509v3 Authority Key Identifier:
                keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:62:17:21:0b:ae:20:dd:e9:00:68:49:76:7d:c2:4f:58:
         a4:e4:4a:d7:e1:44:a8:35:15:5b:8b:14:4f:be:0c:9a:f7:c2:
         3d:c6:3f:a9:c5:d0:ae:7a:c7:50:6c:42:5b:88:6a:f8:09:1b:
         7b:98:ca:6c:3a:e0:ce:79:0a:0e:5b:8a:3c:2c:5d:b8:27:e0:
         53:9e:58:17:65:da:c7:ae:a9:22:bc:45:93:21:2c:63:24:71:
         a2:15:76:b2:5c:26:32:c6:c4:52:92:15:98:c8:67:df:44:83:
         b0:bb:d9:49:41:90:14:c7:21:f9:af:36:be:55:9f:a2:64:4b:
         4d:ad:56:43:f3:a4:c5:30:70:2b:89:41:b6:f3:6b:68:93:ac:
         8e:65:de:5c:7b:d4:f7:a7:ab:48:b6:55:d5:f0:ba:53:fd:ee:
         e6:e8:ea:83:b4:b4:cd:ba:1c:21:ea:2e:63:0d:1a:f0:ba:14:
         fc:66:d6:a5:cc:46:74:c9:e9:95:81:35:5a:a7:e4:e1:e7:b1:
         ac:b1:a7:c5:d3:0b:ca:e5:0d:eb:6b:1c:73:8c:ca:ee:fd:06:
         4a:79:5d:d9:e9:ab:ae:45:7f:11:ff:a2:64:77:17:3d:83:6a:
         35:75:14:bb:b7:d6:e4:91:c9:69:25:28:61:05:76:bc:7f:39:
         20:de:fb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:49:22 2025 by rpki-client