Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File:                     HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier:          ihB+QbtcRkQ59TCHwzeSiJjYDFPjLQXOcUtE6vbBw3E=
Subject key identifier:   DD:94:24:91:81:DC:21:80:0C:B6:C5:1C:62:A5:2F:96:C3:9F:82:37
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer:       /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial:       019684A34463CFB9E0B0E58C96C5BA06B595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number:          0BB7
Signing time:             Wed 30 Apr 2025 03:00:14 +0000
Manifest this update:     Wed 30 Apr 2025 03:00:14 +0000
Manifest next update:     Thu 01 May 2025 03:00:14 +0000
Files and hashes:         1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: kXH4M2rgNSWnKHYm2x2AsVlLyN3zp93wNi8CLEbcoxg=)
                          2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:a3:44:63:cf:b9:e0:b0:e5:8c:96:c5:ba:06:b5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
        Validity
            Not Before: Apr 30 03:00:14 2025 GMT
            Not After : May  1 03:00:14 2025 GMT
        Subject: CN=dd94249181dc21800cb6c51c62a52f96c39f8237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:35:28:cf:a9:f3:18:e5:e7:72:b5:bb:6a:
                    92:ee:06:2f:a7:2a:eb:13:07:5e:f9:be:c7:46:62:
                    b8:cc:71:64:4b:18:f2:20:27:53:bc:99:06:9b:3d:
                    4e:54:46:d9:01:08:ae:d5:b6:fb:eb:75:a0:76:2f:
                    ba:9b:7a:ee:b1:9f:1e:fe:34:f9:69:64:72:78:e7:
                    d4:16:4e:bd:e0:24:73:f6:69:15:59:e5:a6:89:40:
                    01:4d:4c:fc:66:fd:70:d9:c4:01:17:27:b0:52:58:
                    f0:88:4d:a2:fa:e6:27:0c:a8:d7:5e:98:97:b4:83:
                    08:fc:46:c8:53:3a:18:37:95:48:84:da:b6:b9:86:
                    e6:bb:ef:b5:c9:08:fa:56:d2:3d:90:d6:88:fc:7d:
                    01:df:e2:6c:02:10:9a:f5:85:e1:9f:41:4b:bd:63:
                    40:a4:5e:fa:71:eb:3b:b0:ab:38:ec:42:1f:f9:82:
                    ad:ff:95:28:3c:31:02:95:07:44:f0:48:6f:d2:df:
                    8e:d3:59:14:26:88:8c:a4:df:43:79:2f:63:cb:97:
                    40:d7:f4:0b:4b:07:ee:4f:1c:78:b5:bf:1d:58:5a:
                    4a:a1:d1:6c:0e:8b:a4:93:81:47:ba:08:f3:11:1d:
                    4f:d3:ae:3d:a6:c1:51:45:c0:43:8d:7f:fc:11:b3:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:24:91:81:DC:21:80:0C:B6:C5:1C:62:A5:2F:96:C3:9F:82:37
            X509v3 Authority Key Identifier:
                keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:59:3b:63:ca:ab:61:46:e4:34:6b:bb:42:3a:3d:fe:26:
         d6:13:67:46:5f:26:67:8f:4a:5e:1b:05:c4:e9:00:c8:31:25:
         4b:61:98:04:bf:00:2f:3d:36:1b:53:17:0e:8e:83:63:e5:0a:
         eb:a7:e4:21:6a:31:93:4e:8f:02:a0:95:24:86:9e:b5:5e:f3:
         72:ea:c8:37:d0:ba:a0:de:63:c6:ce:02:b9:ef:29:17:f1:8f:
         1b:d0:b0:50:a1:10:11:5d:3b:e9:7c:6e:d2:55:29:6f:7c:5b:
         8b:f4:70:3f:4f:68:48:c7:7f:3a:85:7f:4d:8b:4b:b3:1b:15:
         38:b1:63:14:a0:e2:31:5e:be:9b:0f:c9:11:9e:8d:4b:49:83:
         5b:b1:05:5e:2b:e3:86:b3:ef:c7:99:f9:c8:f7:ad:3e:0d:1f:
         33:01:0f:be:89:eb:bd:21:d6:72:06:77:60:0f:43:25:ea:c1:
         c9:b5:62:0d:e9:aa:53:9f:e0:e3:56:11:40:30:2c:63:ba:a5:
         f9:65:43:00:cf:ae:a1:65:7e:f4:f4:fd:ad:86:bb:8a:8c:42:
         cb:89:88:f3:14:30:88:e0:03:90:f4:f0:2d:8f:45:18:f2:1f:
         81:a1:96:e7:24:4b:73:34:0c:30:13:5f:72:9a:2f:0e:61:4d:
         f2:36:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:26:05 2025 by rpki-client