Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File:                     1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier:          8WCTDQR42EoCZAcNPUjOUGYk4o4ytu1DjWWqIpCTJ98=
Subject key identifier:   4A:17:E5:08:E3:D7:42:DB:1F:FF:7E:C0:2E:BE:06:87:3D:BD:99:7E
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer:       /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial:       0196759E82FE385AAA11C499B74E62852937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 05:00:44 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:44 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:44 +0000
Files and hashes:         1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: 9YpVyiyQM2J9dpczNRom2gFwNb1EkbcLHJJoGVtIFc4=)
                          2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:82:fe:38:5a:aa:11:c4:99:b7:4e:62:85:29:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
        Validity
            Not Before: Apr 27 05:00:44 2025 GMT
            Not After : Apr 28 05:00:44 2025 GMT
        Subject: CN=4a17e508e3d742db1fff7ec02ebe06873dbd997e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:84:ed:16:b8:1d:68:cc:1b:47:7a:6f:92:5b:
                    40:18:b5:73:9c:01:8e:fb:b9:b8:78:18:a0:b8:18:
                    26:34:6e:cb:a4:2e:2c:ab:61:d8:4e:33:98:dc:ab:
                    36:13:db:62:a2:ce:7a:02:50:38:70:64:6c:72:5c:
                    53:af:ff:db:31:1d:2c:97:95:f7:ee:90:ba:ee:19:
                    46:a9:e7:49:f8:25:4b:ca:6f:02:6f:2d:a8:da:b8:
                    a8:5f:bc:65:60:2e:46:97:ac:be:c8:70:3f:b1:1a:
                    46:14:9b:bb:31:70:69:77:dc:7f:d4:21:90:76:f0:
                    d3:37:a0:3f:50:26:6d:76:26:f8:94:ce:28:68:49:
                    85:30:fc:c4:88:6e:ec:8f:bf:70:d5:54:ef:dc:b9:
                    1e:01:a2:f4:88:6a:27:89:5e:f5:29:de:c8:c2:42:
                    87:e3:b0:84:95:33:e1:06:44:f7:51:22:13:1f:55:
                    c1:f1:0a:63:84:81:22:a2:bc:a9:fd:2a:d8:b1:e8:
                    76:72:80:c3:c0:7d:6e:78:06:18:a3:a9:a8:86:55:
                    4b:4e:2b:c3:ee:bd:ff:f1:8d:bb:84:88:2c:92:4e:
                    32:b6:9f:02:07:b2:df:e7:75:6b:ae:0c:8e:18:f1:
                    5d:d4:cb:ca:21:43:96:c7:5c:ec:a0:3f:3b:04:2e:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:17:E5:08:E3:D7:42:DB:1F:FF:7E:C0:2E:BE:06:87:3D:BD:99:7E
            X509v3 Authority Key Identifier:
                keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d9:87:ef:d5:69:11:81:df:92:56:84:e9:f3:ad:8b:ec:8e:
         93:13:04:c7:c1:fa:18:62:29:4d:76:12:8f:f8:27:89:0d:8d:
         49:e9:62:d6:2f:75:28:15:ec:86:4b:11:72:6e:60:ae:6d:1e:
         c1:1f:9b:ba:66:83:ca:21:4d:f4:b6:61:6c:5b:c7:3c:03:26:
         ef:25:a7:41:60:68:30:56:ad:21:6b:78:c5:99:58:3a:5e:dd:
         bb:3e:26:4c:55:d7:9e:3a:12:38:26:ab:0b:b8:7e:7e:67:9e:
         03:fa:a3:fc:de:df:55:c7:1a:53:4a:0c:00:26:a9:bb:f0:66:
         16:9b:e5:a4:0a:fe:65:58:6d:bc:3b:27:5f:81:2f:f8:87:aa:
         95:ec:37:c0:3c:c2:1e:f1:20:85:94:48:ee:63:6b:bb:92:1e:
         13:eb:eb:56:53:36:56:97:18:c6:e6:c1:41:3b:96:2a:c2:ce:
         c7:1b:98:8a:41:94:ff:10:ff:16:73:bf:2e:b2:83:b8:5f:96:
         46:28:a5:9b:16:f2:69:12:87:bb:10:8e:69:fc:fd:eb:46:8e:
         82:ed:bb:00:48:c3:81:5c:48:ad:e2:fb:06:e3:b1:c4:8d:c8:
         d4:69:e3:e6:f9:b7:7f:a8:e7:90:5c:21:50:63:17:00:1b:97:
         bc:9c:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:22 2025 by rpki-client