Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File:                     HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier:          rkv2jXsWE0f6452SvVW1Pi5WaUOoTq6MXHgqtrWTiIQ=
Subject key identifier:   93:C9:2B:A7:4C:7A:0E:74:A2:C5:05:06:AC:CD:11:6F:94:4F:E9:82
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer:       /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial:       0196BB23FEE5495B44BD0BEA9449F7235038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number:          38
Signing time:             Sat 10 May 2025 17:00:20 +0000
Manifest this update:     Sat 10 May 2025 17:00:20 +0000
Manifest next update:     Sun 11 May 2025 17:00:20 +0000
Files and hashes:         1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: VNSSTbGoPgTaxqfVW0HkDQ8U7qD/iJGqa01idJObGtY=)
                          2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:23:fe:e5:49:5b:44:bd:0b:ea:94:49:f7:23:50:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
        Validity
            Not Before: May 10 17:00:20 2025 GMT
            Not After : May 11 17:00:20 2025 GMT
        Subject: CN=93c92ba74c7a0e74a2c50506accd116f944fe982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:21:ca:30:3e:ec:b1:bb:c9:4c:42:c2:95:
                    76:9f:97:ca:a9:4a:68:c5:28:27:93:ed:ad:75:cd:
                    42:22:ec:87:99:1f:58:1b:f2:bc:07:f6:83:9e:9d:
                    0d:a0:70:cb:90:cc:e2:46:e6:35:14:f3:8e:9c:4a:
                    0f:59:be:f7:59:96:f5:a8:48:21:fa:c7:d1:3d:80:
                    11:1d:f1:2d:1a:a8:f5:b1:00:40:74:c9:9d:2f:9b:
                    d7:32:ec:1f:d7:8c:6b:22:b2:94:97:a2:1e:ad:07:
                    6e:15:8d:4e:17:98:c8:39:03:67:ec:16:91:a0:47:
                    3e:92:3a:da:5c:47:62:37:25:b1:15:b0:13:69:54:
                    07:f2:9c:f6:52:0b:63:ba:92:c7:95:25:ec:fc:0e:
                    fd:68:4d:42:12:0f:2d:63:8c:6f:c1:5c:47:8e:31:
                    34:f1:d7:ac:32:33:93:70:9f:12:03:5f:6d:16:a2:
                    c9:40:95:b2:d4:de:66:52:9a:1e:38:ff:9a:53:27:
                    f1:00:2f:a3:43:2a:bc:71:c4:c0:fc:79:af:f3:72:
                    29:60:5e:63:c6:b0:a3:ca:b1:35:4b:53:23:b4:51:
                    0d:7c:07:37:ff:cf:89:14:0c:83:9a:a6:21:e9:36:
                    3d:39:ed:3c:14:45:90:d6:25:50:e9:e2:c2:be:f0:
                    94:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C9:2B:A7:4C:7A:0E:74:A2:C5:05:06:AC:CD:11:6F:94:4F:E9:82
            X509v3 Authority Key Identifier:
                keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:f0:38:fd:c5:4b:05:51:dc:9d:7e:05:94:07:27:92:eb:
         8c:bd:fd:84:de:04:66:60:c4:77:53:cd:09:4a:6c:74:dc:34:
         ac:9f:f7:27:7a:f5:09:ae:bf:a8:1f:83:3e:b7:40:c2:2f:7b:
         87:a2:ed:a8:6a:d5:a9:de:d5:d6:4d:2e:21:ff:70:68:a2:8e:
         7e:2c:4b:b4:bf:71:23:6f:ba:a0:5b:dc:2a:e2:21:aa:a9:d0:
         68:94:8b:be:35:a3:64:eb:2d:6d:b9:00:d2:72:f9:65:f7:f9:
         2c:da:16:1c:5a:32:90:93:c0:63:b8:4b:cd:cd:79:04:e2:1d:
         a7:91:d7:a8:bd:af:98:c6:5d:a2:7c:5e:11:3e:aa:d5:7c:22:
         cf:4f:49:8f:c6:e5:6c:de:5b:39:35:83:a4:2a:b3:68:43:78:
         ca:49:fb:75:04:19:19:06:a3:82:54:33:27:5b:9f:07:cd:cb:
         e8:09:ec:a8:89:49:c2:ec:51:39:9d:66:c4:64:0d:84:10:42:
         a6:c2:06:af:cc:68:ad:5a:7e:f4:4b:a5:be:76:e4:a2:ce:62:
         42:66:70:7a:8a:37:23:06:22:43:fc:9c:1d:52:47:4f:25:ad:
         9b:c4:2b:74:ea:11:d3:ce:fd:a6:4f:6d:c5:e2:24:0f:e8:8c:
         b5:ee:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:08:02 2025 by rpki-client