Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File:                     H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier:          UNpJKsQJDyao4LgvJrcne9JelB4sexi4w7oSHfvGo1E=
Subject key identifier:   C4:3A:35:E0:BA:CE:0F:B3:20:BC:E0:C8:87:CA:89:75:F0:08:49:C3
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer:       /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial:       019676E856015A60E60055357CBFA9951D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number:          03D6
Signing time:             Sun 27 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:59 +0000
Files and hashes:         1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: egMjRaDNifI6JXYKCpo1Nsjabght6T4H/BFDf4koVls=)
                          2: y-Jj6DyqKWn6BYWapkymjYaL5QU.roa (hash: gn98KweekT80SkX3KfiuOUzbXsngJC/J9zd5eWO66No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e8:56:01:5a:60:e6:00:55:35:7c:bf:a9:95:1d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
        Validity
            Not Before: Apr 27 11:00:59 2025 GMT
            Not After : Apr 28 11:00:59 2025 GMT
        Subject: CN=c43a35e0bace0fb320bce0c887ca8975f00849c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:67:94:29:0d:66:6e:4c:68:3a:07:89:4e:
                    c3:52:54:98:47:6a:c3:ac:7a:42:91:b7:c6:39:4e:
                    a0:2a:1b:15:3b:9b:8f:f7:dd:5a:63:e0:c8:87:35:
                    7a:4b:f0:c3:e4:83:95:23:bc:b3:8d:da:20:f4:f9:
                    7d:9c:d4:be:3a:23:0f:33:7b:57:be:d2:73:3f:2c:
                    a1:73:8b:8e:3c:e2:e0:8d:08:1f:1e:ad:b3:93:2b:
                    a5:8c:db:1f:af:64:37:d0:97:17:6b:bc:82:af:0f:
                    98:6f:d9:2d:39:48:16:cf:07:a4:60:be:72:6b:be:
                    c2:2d:96:05:d6:27:ba:bf:06:d1:79:c7:cf:d1:c0:
                    85:f2:33:2d:0b:07:26:13:81:60:96:31:82:83:9c:
                    3e:b8:a2:61:90:0c:0a:26:ef:1e:ba:18:c9:13:f7:
                    b7:e9:40:e4:67:38:ee:c5:36:4e:55:08:68:31:6b:
                    c5:22:93:52:da:5e:5b:fa:33:08:70:1a:8c:56:31:
                    8f:07:73:8c:e2:32:4c:c7:3a:12:bd:b9:31:18:ab:
                    6e:43:13:51:58:66:ee:8b:89:80:73:67:34:f4:19:
                    58:45:7f:fb:9d:1c:66:f9:6a:a1:ab:4d:dd:62:bb:
                    32:9f:44:75:2f:d2:36:9e:47:e8:cb:a1:e4:27:b8:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:35:E0:BA:CE:0F:B3:20:BC:E0:C8:87:CA:89:75:F0:08:49:C3
            X509v3 Authority Key Identifier:
                keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:03:05:fa:16:6e:44:7b:aa:48:2f:c3:2a:b8:92:cb:ab:09:
         44:2d:9d:97:9b:d1:62:bf:93:e3:a4:47:5f:1d:6e:c5:12:84:
         07:5d:3a:d1:aa:d0:d3:c5:73:d1:30:9e:99:c2:76:cc:bd:30:
         61:a1:23:18:4b:80:19:47:1a:82:27:77:5b:6b:c0:81:aa:68:
         d5:0f:e6:a1:4d:f5:a9:b2:46:52:35:13:c6:8e:85:fe:be:62:
         d9:67:85:67:12:be:1a:be:52:87:e3:e5:13:c9:bf:21:10:dc:
         95:eb:a6:0c:6f:38:c8:7a:7e:9f:8e:f6:7a:52:bc:ba:28:c4:
         fd:cf:03:11:d4:be:76:6d:59:ec:cb:5d:10:4c:eb:30:b1:8a:
         3b:b9:a9:f7:a8:51:cb:d5:cb:c1:db:7d:9e:10:63:e2:78:ee:
         bb:a5:19:63:26:2a:a2:a4:e1:bb:53:17:dd:cd:73:f4:f8:64:
         94:3a:49:f1:c4:7a:ca:a2:28:aa:ba:ea:9d:54:88:bf:47:97:
         a9:83:24:84:36:13:4f:b0:46:b8:f8:32:10:8a:5c:8f:1d:ba:
         1e:97:f0:b4:40:cb:f0:73:27:4a:61:e9:48:9b:7f:43:81:56:
         91:58:da:6b:d6:24:58:e0:f0:b0:8f:4c:49:cb:a7:49:ce:86:
         41:00:ed:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:28 2025 by rpki-client