Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File:                     HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier:          3Brzek8OXxbyHfmGTJ6etYwS5F9JhlNDCKT8FUFrRaQ=
Subject key identifier:   D2:88:5C:06:85:4A:FD:B8:C6:82:70:D7:03:A9:21:38:26:29:19:AD
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer:       /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial:       0196BC6E4BC9D753521BF6AE686D75861CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number:          1539
Signing time:             Sat 10 May 2025 23:01:07 +0000
Manifest this update:     Sat 10 May 2025 23:01:07 +0000
Manifest next update:     Sun 11 May 2025 23:01:07 +0000
Files and hashes:         1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: N1p3gcG8NEMs1UkOW7F3WElPCVnZ5bs2WyBkjAHZqnA=)
                          2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:4b:c9:d7:53:52:1b:f6:ae:68:6d:75:86:1c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
        Validity
            Not Before: May 10 23:01:07 2025 GMT
            Not After : May 11 23:01:07 2025 GMT
        Subject: CN=d2885c06854afdb8c68270d703a92138262919ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:ee:a8:ce:22:bd:b1:48:38:38:e9:da:a3:
                    ec:d7:48:db:92:7c:33:ea:d4:1d:66:16:6a:f1:dc:
                    72:3b:92:b9:2e:fa:a4:8b:b3:b7:6b:95:02:3e:58:
                    26:c7:57:fa:2e:b6:49:e5:e1:c1:aa:a6:7b:8f:bb:
                    c1:fe:8e:40:d2:3f:ab:a1:23:cc:95:aa:6d:92:73:
                    f8:89:65:32:8d:f0:0e:37:fa:a2:eb:42:28:29:72:
                    73:61:1b:c2:57:22:18:21:2b:a6:11:64:4c:a5:5c:
                    cf:54:95:d1:00:83:50:86:20:fb:3d:99:f1:80:a3:
                    7f:76:c5:0a:19:e4:cb:39:14:ae:70:9c:4a:81:92:
                    f6:bf:85:5c:b3:43:4c:e4:4d:16:f6:45:cc:5d:b9:
                    38:2f:23:e8:35:fa:03:73:58:ca:a0:21:9c:fc:69:
                    b2:85:6f:62:6e:3a:9e:65:6d:77:cc:0e:ba:e9:2d:
                    1c:01:29:2a:82:5d:30:2a:db:93:bb:78:3e:80:2a:
                    9e:f1:67:f0:52:19:eb:63:e6:2c:67:5f:92:65:7f:
                    4c:d1:a6:f0:f4:7c:98:a2:00:ba:94:80:f3:90:c8:
                    ca:f3:7b:2d:98:e9:50:ea:9e:f9:17:3e:c0:0e:75:
                    a7:90:8c:80:78:b5:8c:1e:05:e7:4a:1f:0c:23:12:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:88:5C:06:85:4A:FD:B8:C6:82:70:D7:03:A9:21:38:26:29:19:AD
            X509v3 Authority Key Identifier:
                keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:d9:78:a8:b3:56:9b:95:23:5f:ec:2e:6d:4c:af:f9:3f:
         d4:ca:1f:59:89:ca:dc:be:41:b2:ad:3d:f1:4f:8d:c1:ab:43:
         70:bc:2e:c2:58:8d:1e:fa:d4:1d:9d:71:60:8e:7b:b7:2d:13:
         51:1c:74:e5:70:3f:b4:7e:bc:67:cc:25:7e:5b:df:f1:1f:2a:
         47:62:17:37:00:b7:21:06:86:b7:5d:12:f4:af:05:e3:b4:d4:
         6b:57:98:bc:c8:33:de:45:c6:82:8a:08:c5:84:9e:94:d6:0c:
         f8:0e:42:b3:d8:2d:bc:23:c1:98:bd:b9:70:f5:cf:b7:74:b1:
         33:94:04:3a:ed:89:93:c6:70:13:43:99:75:70:03:e8:21:6a:
         b7:38:47:0c:54:6d:31:fa:83:49:9a:b6:53:22:9b:de:26:e2:
         05:44:aa:b6:cd:6a:34:08:d9:1b:88:1d:3e:a9:0f:58:e2:cc:
         1b:28:56:30:ec:cf:c1:3b:0e:73:8d:70:88:dd:0a:30:3d:32:
         a9:45:d3:72:4b:2b:c7:13:26:95:44:9f:62:85:f1:f1:fa:46:
         10:7e:f3:aa:eb:f5:48:b9:b7:63:88:90:07:d7:9d:61:b5:f2:
         08:52:bd:27:cf:d5:dc:aa:1f:00:59:94:b6:37:e5:b5:0b:12:
         07:cc:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:36:27 2025 by rpki-client