Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File:                     HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier:          wkGln0cr62CuweaJhJK0sM6okwEGJN2coIfJP1mCT/g=
Subject key identifier:   F8:66:28:03:F3:35:D0:F7:D9:5F:CE:F3:56:33:87:D5:35:B9:DC:9B
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer:       /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial:       019673E710CE497FAB886D1364FFAF1791D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number:          1109
Signing time:             Sat 26 Apr 2025 21:00:45 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:45 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:45 +0000
Files and hashes:         1: 1ffKjQocjrQNsazj1CAi9JjVS5M.roa (hash: LGq8PY1XybDfBXT9FGzMq8PfJwuGWsOSqjxZ40jc9hQ=)
                          2: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=)
                          3: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: GVXZArhEbW5hBh3GIcuQLIggbVSOHan0PKfAkvlENlI=)
                          4: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=)
                          5: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=)
                          6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e7:10:ce:49:7f:ab:88:6d:13:64:ff:af:17:91:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
        Validity
            Not Before: Apr 26 21:00:45 2025 GMT
            Not After : Apr 27 21:00:45 2025 GMT
        Subject: CN=f8662803f335d0f7d95fcef3563387d535b9dc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:a3:0c:2b:77:c9:ce:46:4b:d2:e0:9d:53:
                    e7:97:47:e1:ea:43:59:11:11:47:e0:9a:40:a3:2c:
                    cb:ea:14:f9:54:fa:69:48:61:21:37:77:44:82:89:
                    0d:5f:50:0e:e1:36:69:7a:1d:77:d1:2c:d8:1e:7a:
                    d5:38:8d:89:d4:2f:09:86:ec:ac:25:15:4e:88:c3:
                    8d:a7:24:1b:6d:71:ba:16:bc:d8:21:bb:74:e2:c5:
                    c1:4d:10:07:46:f8:f5:63:b6:dc:38:f1:9f:0f:6d:
                    ea:8f:fa:65:08:42:29:5e:2c:31:1c:13:64:2d:fb:
                    ba:fb:e1:7d:3c:57:48:e8:be:26:bf:79:e7:b7:99:
                    0c:cd:61:85:30:4f:57:88:74:01:ed:96:b1:89:e2:
                    6a:99:61:f7:d6:c5:20:83:88:27:4c:42:b9:3c:00:
                    b0:3b:f2:95:a9:5f:38:1e:60:57:62:d0:0b:0c:ea:
                    b3:70:f7:4f:3b:fb:b4:a3:d2:a1:7e:a5:69:09:67:
                    e0:95:12:99:d8:fe:8b:29:e8:a6:ea:77:4a:cb:33:
                    b0:bb:b2:08:c4:49:b2:1d:b5:57:03:1e:3e:ef:e2:
                    a7:87:3a:99:68:7a:1a:5e:7b:7d:56:77:4d:82:92:
                    e9:e0:2d:4d:bd:54:f6:73:d8:35:74:5f:84:3f:68:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:66:28:03:F3:35:D0:F7:D9:5F:CE:F3:56:33:87:D5:35:B9:DC:9B
            X509v3 Authority Key Identifier:
                keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:32:52:c8:91:32:5d:92:78:c0:54:0c:d9:47:b2:81:e3:81:
         73:d4:1f:36:6d:bb:09:f6:c8:04:8f:3f:bb:b4:27:5a:0d:a4:
         70:7a:b1:31:af:2c:7e:d6:01:65:49:40:24:46:ee:19:02:6a:
         12:88:2f:c4:aa:91:0f:2c:a2:03:a5:0b:05:d4:8e:b7:7d:3d:
         56:f6:c5:ff:9e:97:c6:55:71:d1:71:0f:a9:65:1d:c3:a6:ad:
         df:13:85:a6:02:14:1d:ff:37:aa:6a:d2:81:53:b3:ec:5f:cd:
         cc:8d:2e:5c:8f:0c:06:07:2c:fe:c3:1a:ae:31:fb:d3:ff:ab:
         37:18:a1:7b:63:73:4d:27:5b:3b:4a:37:eb:2c:38:a8:af:dc:
         c3:7c:38:2e:3b:e3:d3:3c:82:3b:ee:a8:8d:3d:12:63:0b:99:
         e2:06:c5:30:9b:e9:29:a1:15:66:a9:48:82:1d:28:6e:86:06:
         12:d6:76:e4:c7:2d:5d:0e:c3:cf:46:5e:79:4d:a3:d7:da:39:
         d7:7e:ff:7a:3c:1b:de:35:28:f7:a6:49:05:82:80:02:2d:7e:
         c2:42:7e:b8:70:80:1f:2a:db:cf:56:8c:a4:71:c6:95:83:8a:
         fe:96:78:54:37:2b:20:44:6c:e1:8b:a9:d3:f9:d4:ac:26:53:
         da:9f:a8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:06 2025 by rpki-client