Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File:                     hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier:          U1d/XqN8tIkARp3dVoFHNmIoYQ0pCEOM5yb8pxrN2Yk=
Subject key identifier:   4C:95:FA:EC:80:6B:F6:D7:6F:A7:35:CB:92:28:56:05:75:A9:28:40
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer:       /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial:       0196CA6000BEB3B13CA7406556FAE0095F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number:          0F7C
Signing time:             Tue 13 May 2025 16:00:11 +0000
Manifest this update:     Tue 13 May 2025 16:00:11 +0000
Manifest next update:     Wed 14 May 2025 16:00:11 +0000
Files and hashes:         1: 0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa (hash: 7NVRHz/yavsbwJXBgfeDxYrCqDuUxp9nZbgGaZLZ9oA=)
                          2: 3wW5MOLSStojI9xiPbeDzYTIyjU.roa (hash: 2XAYsLytjrXYCpBJtfGxqKAam2Z4NRRhSRFoEEd4Llk=)
                          3: C3bQMRmtLfyKqffanrJ7_7vWCk8.roa (hash: EqbhaUJu7cZDNVqNN0UffRpUBKao2EeOOhzgBDrLfd4=)
                          4: bpfV9qpUqRU7ZbL5m4qH_-0K2rg.roa (hash: 4P0zOtuiLjjQhgT/25d48jeUAEanfYakXWIUUX0ljiU=)
                          5: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: SA/Bx2I0DPgkuUtdw0KpoOWlAA8WdNAQlGYCJ186GeI=)
                          6: yXjHrq-s43_JYr0rLELUWWQUfRw.roa (hash: 4zzMUSCqPCS+1DFvUjbQidVA6cErC1SxAP7lBmahGck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:60:00:be:b3:b1:3c:a7:40:65:56:fa:e0:09:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
        Validity
            Not Before: May 13 16:00:11 2025 GMT
            Not After : May 14 16:00:11 2025 GMT
        Subject: CN=4c95faec806bf6d76fa735cb9228560575a92840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:47:05:5f:0c:8a:e9:99:49:fb:e2:48:21:
                    d8:0f:5d:3e:e1:24:b2:e5:65:30:f0:08:c3:68:a5:
                    b9:a6:cd:1c:39:2f:e7:c8:8f:9b:f3:64:45:d7:2a:
                    a8:f2:4a:09:fa:92:a7:61:40:3c:d0:8e:64:71:e7:
                    5a:f4:10:72:28:1b:72:98:1e:24:17:af:07:d1:d9:
                    d9:e1:1c:5d:b6:07:c6:5d:25:1d:30:e0:5d:3d:9d:
                    51:ba:51:8f:10:f7:a2:28:72:06:83:ad:de:f9:24:
                    10:3e:ef:98:be:40:9a:03:47:45:da:6e:f5:17:c6:
                    d3:8e:9f:7c:7d:e9:5a:b4:f3:0c:a6:17:1c:25:74:
                    f5:98:16:80:18:d9:3c:b0:32:c1:4a:6f:08:57:a8:
                    2a:90:29:dc:92:33:67:bc:8c:85:a4:c3:04:ef:10:
                    01:d2:a2:2b:14:38:b1:de:87:af:8d:2b:b3:a2:8a:
                    d8:06:3c:75:39:7f:93:0f:cb:95:aa:16:d4:b0:5c:
                    8e:27:8a:b1:64:fa:4d:83:61:e4:cf:19:e1:f5:ff:
                    8d:a8:4b:9d:7b:dc:cf:d0:f5:2c:69:95:42:a2:c5:
                    49:2c:b4:7f:38:12:4f:ee:86:ab:d6:37:7c:82:a1:
                    0b:f0:39:98:05:9c:81:8b:34:56:86:e4:42:9b:04:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:95:FA:EC:80:6B:F6:D7:6F:A7:35:CB:92:28:56:05:75:A9:28:40
            X509v3 Authority Key Identifier:
                keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f8:04:c0:76:ef:61:52:8a:eb:be:90:e8:d6:c8:5e:f7:4f:
         0a:69:e5:94:7c:08:ff:fc:00:6e:82:1a:e6:aa:f8:38:a3:eb:
         41:1b:53:b0:3d:ed:bf:b9:5a:02:c5:da:42:96:4e:cd:3b:61:
         df:7c:dd:6c:1e:eb:8c:0e:3e:e2:f1:03:f3:84:8e:ae:bb:69:
         44:cd:59:79:ba:0e:6a:53:73:3d:7f:4e:0a:f5:a7:98:c1:46:
         80:48:32:98:cd:ef:bf:c5:19:06:93:a9:92:cc:55:60:86:82:
         c5:d0:aa:e6:79:6e:cc:74:7f:b0:1d:82:f2:a6:61:b3:11:d8:
         f4:8a:bf:03:b2:32:79:4e:35:fc:42:f8:57:6c:51:ed:1c:fa:
         32:5e:08:b2:19:2d:cd:bb:8f:ab:f5:2a:f2:40:5b:b3:db:9f:
         cc:5a:2c:6b:43:c1:4d:a1:68:18:57:8e:03:81:5a:fb:66:48:
         ee:bb:b6:54:3e:6d:11:b5:d3:52:47:46:47:1c:8a:9a:b9:88:
         22:6f:55:ec:87:1e:0d:fe:ef:ef:e9:ec:84:b0:34:ea:62:08:
         a2:ef:d7:e2:03:f5:aa:f5:2e:33:7a:b9:67:5c:7f:c0:0c:c9:
         2f:ef:af:6c:51:11:31:25:0b:76:5a:37:d0:07:b6:22:90:d2:
         c1:68:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:26:46 2025 by rpki-client