Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File:                     H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier:          kBuhVuPsMkposo6kuiqhr6JrnD/X7mjpu4lVAh+7TEs=
Subject key identifier:   E0:CD:56:45:53:D6:CC:51:4E:EC:DA:BB:88:61:1A:93:DC:E8:5B:F5
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer:       /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial:       0196C683ABA80BD43B548251F2F4E50093CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number:          0547
Signing time:             Mon 12 May 2025 22:00:39 +0000
Manifest this update:     Mon 12 May 2025 22:00:39 +0000
Manifest next update:     Tue 13 May 2025 22:00:39 +0000
Files and hashes:         1: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: fDIeIvouGQlGMvrcfXZDEKe/J+As3dT+Se4iguXLuq8=)
                          2: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (hash: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=)
                          3: mh0Jg1BQZQFxE7soBuLLkUSUg7s.roa (hash: 3hdKu/KUGUvmqdrOu9SEX01+RMAxxDpDoIMPSPl7lAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:ab:a8:0b:d4:3b:54:82:51:f2:f4:e5:00:93:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
        Validity
            Not Before: May 12 22:00:39 2025 GMT
            Not After : May 13 22:00:39 2025 GMT
        Subject: CN=e0cd564553d6cc514eecdabb88611a93dce85bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:cb:25:02:6b:af:4d:1f:ae:4d:b1:dd:de:
                    b7:91:90:ed:ec:c1:93:53:4c:ad:81:a5:f8:66:9b:
                    44:fa:52:f0:27:e0:db:65:11:9f:e1:9f:a7:b5:0b:
                    bd:15:c3:a6:31:d8:50:5e:fe:34:72:75:1a:17:87:
                    7c:af:a8:24:c0:be:14:55:e5:e4:43:ce:3f:dc:0c:
                    15:b6:24:03:c3:14:8e:c7:7f:01:2d:29:7c:17:f6:
                    03:23:6f:e4:59:69:f6:36:7e:00:2c:46:77:1b:32:
                    9e:ed:75:fb:6d:8a:70:5c:91:23:31:42:9a:83:0e:
                    15:49:29:c0:09:9b:ed:94:eb:d8:a0:96:16:1c:4b:
                    4c:25:2b:03:f8:78:6a:96:03:3e:00:fb:c5:64:e1:
                    32:0d:d6:e5:30:60:e1:40:ef:a3:2d:3e:db:94:7f:
                    bb:8b:ee:59:fa:38:88:3e:db:4a:d6:37:5d:d0:75:
                    f1:5a:a2:22:55:8a:21:5b:87:28:d7:95:60:51:00:
                    b5:73:44:c8:cb:cc:d4:1d:7d:80:6d:26:5d:be:c7:
                    3c:41:a3:1d:fe:c3:54:ea:17:95:00:9e:f8:e9:8f:
                    09:7c:73:73:bd:a4:f6:94:1b:46:07:3d:60:69:4e:
                    09:20:77:6b:2d:f5:96:cc:e6:41:21:71:8b:ad:60:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CD:56:45:53:D6:CC:51:4E:EC:DA:BB:88:61:1A:93:DC:E8:5B:F5
            X509v3 Authority Key Identifier:
                keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b5:c2:63:c6:36:9c:67:10:af:c2:64:5d:e9:21:a4:ba:b5:
         b9:85:4b:c2:a6:19:d1:a6:0c:95:b8:bf:0e:f9:04:14:6e:71:
         46:d5:60:c7:e2:85:50:8a:d7:04:3b:79:58:e4:13:5d:9e:de:
         8f:3a:dc:f6:9f:35:0c:bb:53:41:db:81:9a:90:35:15:17:87:
         ee:f6:6c:e6:72:78:3e:2e:5b:09:04:b8:83:5b:9f:67:ab:a7:
         e0:8f:25:49:bd:22:70:45:de:40:18:ea:4b:40:bc:d4:95:e0:
         e0:56:f8:20:ec:41:cb:22:25:a7:c6:42:bf:0c:2f:f9:f6:a2:
         70:77:12:22:31:84:29:a3:c5:09:95:ac:3a:6b:57:ec:de:39:
         c7:ff:1c:48:02:5b:cb:15:e0:23:83:66:44:c8:e3:43:da:b9:
         3f:22:68:7c:39:cd:d9:6b:d0:de:56:30:71:d2:67:4b:9d:55:
         60:fc:a1:5a:84:68:97:f6:da:44:f8:fb:9a:09:47:5e:b9:96:
         cc:6d:ec:e9:d3:79:d4:d3:c3:75:68:0b:df:92:0f:16:99:7b:
         cc:fa:5e:da:e0:e8:f1:65:66:48:2c:dd:e6:1a:cd:71:90:89:
         a9:cb:7f:3e:aa:24:12:3f:04:5d:02:2d:7f:de:8e:9f:b4:61:
         0c:ad:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:11:42 2025 by rpki-client