Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File:                     hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier:          emtdo9p0TiTCjCq6n/vUEZFBo6o9YeNmDGNcEcis2zs=
Subject key identifier:   F0:EE:5F:A6:9B:71:EA:96:7B:02:F2:B6:E8:76:21:E6:72:4A:22:BA
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer:       /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial:       01969416D0B3FEB7079AC4B2E3E27BD3B3F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number:          151F
Signing time:             Sat 03 May 2025 03:00:45 +0000
Manifest this update:     Sat 03 May 2025 03:00:45 +0000
Manifest next update:     Sun 04 May 2025 03:00:45 +0000
Files and hashes:         1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=)
                          2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: HNp7dCikHXstgI8MIzV1cGAOc1Ogv+hRonGhlHdntV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:16:d0:b3:fe:b7:07:9a:c4:b2:e3:e2:7b:d3:b3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
        Validity
            Not Before: May  3 03:00:45 2025 GMT
            Not After : May  4 03:00:45 2025 GMT
        Subject: CN=f0ee5fa69b71ea967b02f2b6e87621e6724a22ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:86:43:56:ad:de:9e:37:b1:4d:c5:b9:ce:
                    6e:62:40:cc:ad:2c:fb:cc:de:06:1b:80:c6:b8:95:
                    cd:91:49:63:6c:94:45:8d:58:d4:95:21:96:a0:68:
                    b2:98:9f:6d:90:68:20:a2:bc:44:51:85:bf:c4:0c:
                    2e:40:b5:72:4e:f7:50:75:c8:28:ba:41:d5:e0:db:
                    91:39:cf:a8:0b:db:0f:bd:57:a4:ce:8d:c5:ec:d9:
                    ae:40:81:98:96:f4:04:3b:89:d0:af:7f:bd:7a:22:
                    c6:3c:40:65:e3:21:ec:f8:28:d6:5c:ff:c9:cd:54:
                    6c:f0:a7:44:c9:fd:0f:c2:ff:3f:8d:a8:8b:b4:86:
                    e8:17:34:b2:31:b1:0e:2b:e2:44:dd:6d:8f:07:62:
                    be:53:45:ad:b8:5c:94:d4:6a:7d:88:0f:13:3e:43:
                    23:d5:df:47:52:a3:dc:72:61:cc:01:43:df:b1:1d:
                    85:1a:98:0f:93:1a:d4:b2:75:90:26:aa:ac:7b:13:
                    02:39:75:50:dc:59:cd:e7:08:55:bd:a4:1b:89:e9:
                    3b:41:34:c2:a2:ee:5f:a3:16:fa:21:a3:77:df:0a:
                    e1:0d:67:ad:8e:af:0f:57:58:fc:6f:9e:91:db:99:
                    26:16:27:fe:f9:ae:db:ad:fe:a3:a3:5c:db:bc:39:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EE:5F:A6:9B:71:EA:96:7B:02:F2:B6:E8:76:21:E6:72:4A:22:BA
            X509v3 Authority Key Identifier:
                keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:dd:ab:b2:45:7b:e3:6a:17:33:c8:ea:c8:e4:d6:8b:86:
         a5:34:f4:2d:c5:95:1b:21:82:65:a1:9b:d5:24:c9:8d:23:90:
         df:69:c4:3b:69:fc:36:da:51:c6:d7:dc:17:f5:65:e8:85:f2:
         34:9e:a4:3d:5f:6a:f5:76:b9:0e:f6:11:bf:b8:2d:51:70:bb:
         fd:b5:82:d9:ee:27:6f:0d:17:34:7b:22:e4:00:c7:46:64:fa:
         df:2a:89:56:de:62:50:4f:3b:32:6a:7f:71:00:78:92:e6:d6:
         88:98:b9:28:ee:3a:3d:f2:30:17:6e:21:08:02:0b:7b:7c:91:
         7b:0e:c2:5f:a1:26:f0:77:37:c0:69:b5:e0:03:b0:71:84:9f:
         4a:9b:7f:b5:bd:75:a6:f0:2c:13:e2:9d:84:50:80:39:ee:37:
         63:3d:26:bf:2c:c0:8f:1f:45:ee:fe:9e:ba:7b:e3:df:cf:4d:
         94:c8:78:c2:d7:42:bb:96:69:6b:9e:cd:8a:4f:41:90:93:0f:
         cf:71:13:aa:f3:5a:37:07:dd:f3:d2:38:50:21:30:96:cd:24:
         08:33:69:21:02:74:ce:3a:2a:3c:94:62:04:ca:21:4d:bb:04:
         c9:4a:5a:7c:b7:ed:21:49:1b:58:66:2d:6d:06:f1:47:b1:ef:
         59:28:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:44:28 2025 by rpki-client