Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File:                     HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier:          mdzZtEvt7SHOfvfde4YU99WUhGWJtzucJ90d7+FbzMg=
Subject key identifier:   1B:5B:AB:6C:59:3A:5B:AA:C2:E2:2A:14:69:5F:74:E7:A9:37:CF:E9
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer:       /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial:       0196760CF26E993AB4A4D9DC488F0BE22E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number:          1513
Signing time:             Sun 27 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:22 +0000
Files and hashes:         1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
                          2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: n7Gce21GNJt18hziz7SBJzR7zh4AJXoWYsTkCkRRI1M=)
                          3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
                          4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:f2:6e:99:3a:b4:a4:d9:dc:48:8f:0b:e2:2e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
        Validity
            Not Before: Apr 27 07:01:22 2025 GMT
            Not After : Apr 28 07:01:22 2025 GMT
        Subject: CN=1b5bab6c593a5baac2e22a14695f74e7a937cfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:46:fe:40:57:11:e6:9a:d0:0d:d3:9b:e0:
                    6c:ae:c0:a8:92:21:08:ad:a5:21:d0:cb:37:33:bc:
                    1b:84:ec:95:6e:ec:d4:a8:94:a3:0b:6c:37:2e:9d:
                    b3:a8:4e:f1:83:79:13:d5:ef:b8:08:42:0a:1e:04:
                    53:59:95:e9:e2:04:84:10:af:e2:6a:62:b1:3d:70:
                    ea:e5:b6:29:51:a0:bf:ac:c9:f8:2f:26:c6:7d:82:
                    37:6d:65:d7:83:b7:75:08:20:4e:08:8b:70:4e:98:
                    fc:d3:81:67:d6:b6:60:de:be:bb:d8:74:08:ca:3d:
                    14:65:5e:1f:de:fe:fd:1d:e0:12:ea:e3:21:88:14:
                    a3:19:87:3e:a7:ac:4f:19:eb:a8:8b:06:80:d9:44:
                    5b:d4:74:47:aa:2a:25:05:2f:fc:00:3f:69:8b:14:
                    62:07:6f:f3:e0:4a:a9:66:9c:2f:ff:96:4c:58:58:
                    40:1a:bd:79:d6:af:0d:ca:18:84:52:99:ca:87:e4:
                    73:94:c3:45:fd:14:10:4a:7e:42:3a:18:89:1c:c1:
                    b0:f7:ad:fa:8a:2e:1d:fb:19:e9:50:b4:e2:05:91:
                    c7:ff:f2:52:02:a6:29:ee:ae:e9:86:04:2e:65:14:
                    cc:7c:47:e0:66:01:d2:e7:29:73:15:3e:e9:1c:3c:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:AB:6C:59:3A:5B:AA:C2:E2:2A:14:69:5F:74:E7:A9:37:CF:E9
            X509v3 Authority Key Identifier:
                keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:d1:55:70:24:00:f7:55:40:34:86:21:53:87:04:d9:29:
         46:c9:f9:a8:fa:84:54:08:93:f7:4a:4b:f8:18:a8:86:9f:5f:
         99:e3:84:d9:e7:a9:f8:62:c5:7f:3c:39:97:e3:3c:66:87:ee:
         02:46:b0:ed:6a:5e:86:ee:4c:d7:d1:41:d5:e9:b9:41:f2:d5:
         ad:2a:ce:8c:31:b4:67:4a:19:a4:9f:11:e0:35:d2:f4:c6:6a:
         0f:7c:40:fa:87:c7:ec:09:40:59:b2:15:f4:7c:3d:e2:43:d6:
         b2:f1:b1:97:97:b1:d5:a3:5c:87:fd:39:41:34:98:4d:4e:5a:
         ab:5d:8c:fc:e5:78:9e:b1:2a:5c:32:b4:e2:ea:f3:8a:0d:45:
         a9:ec:4c:70:0a:5c:64:ca:6c:d1:cd:58:2f:6d:fa:cf:58:b6:
         4e:a4:1e:c2:38:f5:d5:c6:1d:c0:0f:e9:35:54:71:03:27:8e:
         68:5f:07:81:83:ec:95:c7:31:87:e4:f4:74:01:e7:a7:9c:2c:
         0f:d7:30:67:02:48:64:99:98:64:2e:4a:ae:28:37:d4:4c:06:
         7b:c1:60:d5:02:e6:22:4f:f6:3c:ca:32:6d:9e:db:a9:09:92:
         a0:65:50:3e:6a:d1:c7:51:b8:d4:51:b7:72:ed:24:87:a4:32:
         a2:49:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:23 2025 by rpki-client