Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File:                     hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier:          pPiqF74Q6l+NF5xMOPDwxNEyd5hnWNPa3ZbZkBK8eVg=
Subject key identifier:   CD:12:39:B0:AA:5A:89:A0:A2:2E:68:F8:FB:7F:10:CF:7F:3B:56:76
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer:       /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial:       019768BC2764FD24376D572400BE0F8C2317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 10:00:50 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:50 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:50 +0000
Files and hashes:         1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: YbfE1NsyamuHuqr1LSUJZZ9UkHnauLviefNndrrcukA=)
                          2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:27:64:fd:24:37:6d:57:24:00:be:0f:8c:23:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
        Validity
            Not Before: Jun 13 10:00:50 2025 GMT
            Not After : Jun 14 10:00:50 2025 GMT
        Subject: CN=cd1239b0aa5a89a0a22e68f8fb7f10cf7f3b5676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:7b:61:db:1b:c1:4f:a3:e1:bc:80:47:cc:
                    48:4d:d1:8d:99:15:d7:e3:18:b8:c8:68:11:f9:63:
                    14:35:ca:ac:7b:bf:61:7c:68:4f:f9:cc:fc:6d:a8:
                    55:a9:ad:27:73:ae:6a:0b:1f:25:38:b8:b0:57:fa:
                    9b:b3:be:a9:5a:2e:04:ee:9a:4b:ec:fa:1d:c0:69:
                    d3:6d:e9:9b:2a:a7:24:ed:d9:f7:de:90:79:94:7a:
                    eb:07:2c:1a:df:7b:70:28:25:ca:91:1d:59:c3:ae:
                    bc:01:6c:8f:71:b1:86:88:0b:3f:06:a3:0d:a2:ad:
                    cf:e1:05:84:34:8b:9f:2c:43:b2:2f:17:70:c7:02:
                    9f:67:2d:a9:e8:db:51:e4:73:2a:24:8e:a9:cc:fd:
                    46:17:e4:a5:1c:d3:61:71:7f:aa:67:f5:94:84:a9:
                    49:97:d4:5e:0e:a2:4b:8c:0d:76:01:1a:7e:62:40:
                    2b:74:07:e2:8d:c9:56:11:9e:f1:66:c3:94:45:0e:
                    46:16:15:43:01:00:27:03:42:6a:d3:89:88:ac:bc:
                    d2:da:2d:49:08:46:1f:27:a7:38:e2:bb:b3:2b:40:
                    80:25:44:1e:1c:20:1d:e8:2a:a1:f4:56:81:c0:81:
                    f0:cf:1f:f9:45:58:3f:d2:2b:c5:a8:75:8c:56:76:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:12:39:B0:AA:5A:89:A0:A2:2E:68:F8:FB:7F:10:CF:7F:3B:56:76
            X509v3 Authority Key Identifier:
                keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e3:f6:c3:02:b6:5c:67:81:7f:25:30:3b:bc:98:ed:42:7d:
         d7:cc:36:2e:d7:e5:d3:4c:d1:47:2c:8a:21:a2:01:29:04:46:
         ef:6e:cd:b1:d4:5c:12:3c:ff:6f:48:66:0e:75:60:7a:a2:bb:
         c8:b3:79:40:67:18:34:e3:5d:b1:07:d8:44:b7:32:6a:e7:cf:
         41:f3:0e:ba:d5:42:cc:1a:06:e1:08:c9:75:8e:1e:8f:16:f4:
         85:5e:81:58:28:e6:23:d4:f2:a0:e1:93:11:c1:d7:20:2c:54:
         8e:4d:78:52:4b:01:41:99:40:6e:6f:d5:39:9a:21:d9:91:b1:
         a4:5f:1d:d2:1d:19:f2:93:fc:f6:0a:a5:42:1c:04:e2:50:49:
         46:df:39:14:2d:79:55:10:ea:83:cd:4a:ab:20:d1:e2:f1:65:
         c7:e3:70:f8:1a:1a:48:19:bf:0a:00:73:4d:d5:31:e1:e8:76:
         ba:59:c9:37:c6:2a:4a:7e:2b:76:a3:f6:ba:39:77:b1:f0:f7:
         32:17:0c:cf:0f:cc:84:02:fa:0b:77:12:e8:76:24:15:1b:c9:
         93:13:88:2d:bf:6c:aa:ac:d2:9b:02:e3:92:95:7c:b9:a7:d2:
         70:85:4b:88:20:51:e7:86:21:62:c9:ec:6d:de:d9:bf:25:cf:
         67:89:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:58 2025 by rpki-client