Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File:                     Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier:          7dMdIktg+Bh3zwrQKWz6IEFyLOBrUvptbkkLp0SvuYU=
Subject key identifier:   CF:46:D5:3C:4C:B3:49:C9:4C:EA:95:1F:F2:9D:8E:D1:83:64:F4:DF
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       01977640BA2CA6330DC2807275CE2BCFAB78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number:          1599
Signing time:             Mon 16 Jun 2025 01:00:42 +0000
Manifest this update:     Mon 16 Jun 2025 01:00:42 +0000
Manifest next update:     Tue 17 Jun 2025 01:00:42 +0000
Files and hashes:         1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=)
                          2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: 4ttQDLvKLWqqvz28b3p/eLXXzi8dx1FrdWkaSBkWHIo=)
                          3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=)
                          4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:40:ba:2c:a6:33:0d:c2:80:72:75:ce:2b:cf:ab:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Jun 16 01:00:42 2025 GMT
            Not After : Jun 17 01:00:42 2025 GMT
        Subject: CN=cf46d53c4cb349c94cea951ff29d8ed18364f4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:b4:13:be:fb:82:48:40:16:72:53:2d:c6:
                    13:b5:3e:ac:51:de:8b:79:d8:4c:6a:7e:95:be:e9:
                    da:40:c4:a0:7a:07:35:22:e2:66:9f:5e:72:43:19:
                    7a:bf:1b:7e:0a:bb:d8:73:67:4f:ea:5b:fa:51:85:
                    62:8e:6b:e9:ab:7d:cb:4a:f7:5b:9a:3e:6a:95:4c:
                    c2:61:92:ed:86:d6:71:36:00:e4:f7:63:c3:87:f4:
                    4c:6c:45:8e:2b:2d:f3:f1:3b:81:cb:33:06:f2:8f:
                    6e:2b:8b:fa:ca:cb:98:c4:cd:b8:80:82:8c:df:87:
                    23:dc:7e:4a:8e:d7:cb:37:6d:7b:c2:e0:a1:0c:d8:
                    cb:b7:ab:20:46:db:d9:de:a8:9d:db:f0:8d:99:93:
                    f6:88:19:38:70:53:36:80:9f:64:82:2d:2d:f7:e3:
                    ae:34:d0:40:9e:a6:94:b4:64:3f:ac:20:16:a6:2c:
                    fe:9d:c7:d5:d9:80:d2:11:6a:fd:bf:5b:c7:12:3a:
                    1e:64:21:12:06:2a:11:a3:12:46:5f:d2:72:bd:27:
                    56:f8:9d:d9:11:92:2f:65:93:9b:35:d5:40:a0:9a:
                    9e:31:64:c7:5a:11:65:12:7f:0e:cc:77:69:33:11:
                    d5:f2:8a:11:9b:25:b8:fe:b4:a1:fa:da:d9:fe:18:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:46:D5:3C:4C:B3:49:C9:4C:EA:95:1F:F2:9D:8E:D1:83:64:F4:DF
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:51:a6:2c:66:f5:d2:a4:62:94:41:05:f5:64:90:66:f1:
         db:6c:8f:85:8b:a0:e3:de:40:7a:31:e2:5c:59:be:15:ba:c7:
         47:74:f4:98:18:7c:e1:96:c0:d3:91:40:34:d0:5a:95:ef:aa:
         a0:4e:1e:12:25:ea:28:05:15:cd:74:97:3c:05:59:47:0a:97:
         5c:73:39:5e:62:1d:9d:53:b2:86:73:01:6e:5e:b6:14:d5:0a:
         d5:a6:83:71:44:73:d0:27:59:4e:ab:24:7b:13:31:47:bc:0a:
         e0:19:7b:d7:54:58:d9:2e:d3:79:ab:1f:25:d7:ce:ca:5d:b3:
         20:5e:e0:a8:05:38:4b:b3:7b:70:d2:1f:b8:92:00:e1:90:07:
         af:f0:15:49:86:f7:d6:0f:aa:8f:73:55:ea:6e:e8:ae:98:68:
         4f:30:38:3e:af:3f:87:22:d8:a7:c7:4f:a2:64:c3:a3:3b:d3:
         3e:1b:35:3d:10:76:1c:30:09:cf:37:14:8f:4d:fd:6e:67:80:
         52:17:84:98:a3:de:f4:75:69:ee:28:59:d2:9b:b3:14:8b:15:
         e2:49:25:b0:4f:28:be:63:63:21:bb:05:56:13:80:1c:86:c3:
         b5:54:22:97:86:0f:5a:78:eb:22:96:42:21:6c:76:0c:49:6b:
         18:3f:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:30:36 2025 by rpki-client