Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File:                     rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier:          +xCFJgftm5kKqSfU4yK4WMK/CkPWIXQnjipTuDNiJqY=
Subject key identifier:   8B:8C:A9:DC:75:AC:53:7F:D1:DD:5C:60:31:A7:BE:7D:40:F2:7A:97
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer:       /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial:       019675671BBE59A4A1A7EDFE8DFF367A882F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number:          0E1C
Signing time:             Sun 27 Apr 2025 04:00:13 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:13 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:13 +0000
Files and hashes:         1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=)
                          2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: yQjxaDWpR7WvOLfv6GMrZxNI04UVpUEOfZG7LYrpNcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:1b:be:59:a4:a1:a7:ed:fe:8d:ff:36:7a:88:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
        Validity
            Not Before: Apr 27 04:00:13 2025 GMT
            Not After : Apr 28 04:00:13 2025 GMT
        Subject: CN=8b8ca9dc75ac537fd1dd5c6031a7be7d40f27a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:62:81:b9:30:6d:d3:17:22:51:6c:f8:5c:
                    2e:43:19:38:b2:39:24:8f:5b:5e:4a:6a:1d:64:d0:
                    b4:8f:e0:7b:b0:cb:8b:00:8c:bf:f6:30:5a:36:5e:
                    ed:e5:cd:dc:c8:34:47:85:b3:14:3b:c1:e6:0f:e0:
                    6f:ea:b6:91:8f:0f:7e:7a:b1:f3:c1:23:fc:5d:58:
                    2c:7f:69:d9:9d:da:05:09:6b:ed:b6:1f:23:8d:d0:
                    64:c4:62:9a:69:0c:1a:9c:cc:1f:50:2b:3c:11:54:
                    e0:23:e6:00:9a:c0:9e:60:2b:62:9a:56:a2:2c:b5:
                    06:b3:eb:05:ad:18:2f:94:3e:71:ba:8f:a4:77:74:
                    6d:ec:cf:db:30:bc:66:e5:f2:56:83:22:c1:a3:22:
                    bb:66:73:42:ad:f7:fb:b1:18:8a:cc:1d:65:ca:8b:
                    51:5e:74:6d:67:8d:8b:7c:c1:45:3e:0d:37:ac:82:
                    eb:3f:a6:0e:12:0e:14:e4:5a:15:16:56:3c:bf:90:
                    3b:1b:b1:9b:00:8b:95:5d:84:80:23:5c:30:00:0e:
                    df:e8:86:17:1f:7e:ba:31:30:bd:d5:d5:98:95:4f:
                    1d:2b:68:e8:a8:52:03:b3:90:2c:e7:21:ce:8f:37:
                    96:5f:b2:01:4c:ff:df:9a:40:fe:dc:f0:e2:f4:57:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:A9:DC:75:AC:53:7F:D1:DD:5C:60:31:A7:BE:7D:40:F2:7A:97
            X509v3 Authority Key Identifier:
                keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:88:2c:79:20:d7:cb:d5:b9:61:5d:64:38:7a:68:42:00:98:
         3c:29:01:eb:b6:0c:94:9a:52:36:84:14:3b:e2:40:3d:8b:1d:
         a8:14:20:ff:ab:d5:90:f6:cb:c7:99:1f:10:ba:d5:4a:89:60:
         6d:ad:49:91:9c:c4:d8:f3:5d:20:54:ff:b0:af:3a:4b:28:fd:
         31:39:9a:bb:fa:4f:c3:af:83:26:07:aa:3f:41:61:8f:5c:20:
         ff:21:e2:8a:99:e6:8a:5a:3a:3d:b4:c3:42:b8:67:85:55:b8:
         64:cd:41:da:24:0b:79:65:b3:c4:12:d2:c3:b6:61:54:79:78:
         cb:43:e1:87:d2:b7:ef:da:b7:bc:72:3f:d7:8b:84:65:37:08:
         1d:f0:14:c0:7e:cf:2f:b5:e3:8c:56:21:05:f8:36:82:51:64:
         52:61:2e:f1:69:d2:9e:0c:b5:f9:56:e3:88:6f:a8:18:34:ac:
         33:7f:a4:66:d6:11:b9:9e:1a:fa:07:96:90:fb:5c:da:59:75:
         d5:e7:cd:45:7e:fa:22:f9:c8:12:ce:fa:79:d7:df:6e:a9:e2:
         fd:a2:05:9b:18:49:b4:67:3a:9e:85:20:51:49:ca:42:83:98:
         85:d5:db:73:9a:50:f1:50:86:d0:d8:d2:88:61:9c:e1:33:f0:
         52:38:47:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:52:25 2025 by rpki-client