Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File:                     HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier:          uRy3rphOzJHyKeQC9m1AZwm519M6iNZYUaoQeRMtFGU=
Subject key identifier:   A5:F7:7F:51:5C:59:D2:F2:4C:00:A2:B1:26:C3:D0:29:7F:DE:C1:39
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer:       /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial:       0196741DFEBC897E2200EB44720658B8B99E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number:          0E6A
Signing time:             Sat 26 Apr 2025 22:00:44 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:44 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:44 +0000
Files and hashes:         1: 5pynZFAsqvPIGH5-PXLgAGK58mA.roa (hash: fBc4s8OOq/rbaknM5GE/ZQ9xYBiAMIuTqJlNTn46D0Y=)
                          2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: peuzc9QMAe+K2b0ZqxEZzEVEyJA8XB8lA9ySA6ALbJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:fe:bc:89:7e:22:00:eb:44:72:06:58:b8:b9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
        Validity
            Not Before: Apr 26 22:00:44 2025 GMT
            Not After : Apr 27 22:00:44 2025 GMT
        Subject: CN=a5f77f515c59d2f24c00a2b126c3d0297fdec139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:b2:24:b3:94:78:e3:52:65:78:ef:39:48:
                    db:45:5d:07:18:68:98:6d:cb:35:0a:f6:22:26:20:
                    dc:60:a3:b2:a7:8a:89:95:ba:9d:88:9c:85:fd:77:
                    2c:c8:d1:3d:39:b5:52:89:e4:07:24:45:df:cc:26:
                    fe:38:4c:25:27:f1:44:28:8c:0e:9f:61:ab:7a:0b:
                    21:f8:9b:7a:8b:da:88:78:c4:b9:ae:e6:32:87:f3:
                    b6:3e:20:5b:c5:a1:d1:81:4f:67:09:d8:f2:a1:66:
                    6b:c1:a0:20:5d:1e:e5:a2:6f:2c:9c:ca:4c:8c:43:
                    f6:c2:f5:01:30:95:aa:a2:7e:f1:1a:97:c3:ed:f0:
                    70:c6:d0:09:80:a1:2c:76:25:d5:60:37:04:59:d4:
                    dd:0f:c5:99:b1:fa:b7:c0:32:61:10:81:0a:b9:e2:
                    1d:71:dc:b4:a0:95:c2:56:c0:30:25:67:0a:c0:d3:
                    b6:3f:32:24:26:f4:d9:42:2c:c0:36:6c:a8:d2:c2:
                    2a:0f:7e:ca:51:5f:4d:5c:4e:dd:73:c5:d4:57:04:
                    6d:e8:5a:08:da:b0:d4:17:2e:8c:18:da:0b:06:16:
                    67:3c:ec:19:9a:0f:ab:47:f3:2e:26:be:15:e5:52:
                    79:9d:21:37:c8:0e:ea:d5:38:0d:9c:85:3c:af:46:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F7:7F:51:5C:59:D2:F2:4C:00:A2:B1:26:C3:D0:29:7F:DE:C1:39
            X509v3 Authority Key Identifier:
                keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:7c:23:05:99:16:04:d8:a6:49:c1:95:4c:04:89:b7:f1:
         2c:a6:a3:ab:9f:4b:12:66:20:1e:0d:28:76:1d:00:59:96:07:
         ae:a2:aa:eb:08:51:5f:0b:99:b6:68:94:b4:c8:e4:fc:6a:5e:
         ad:7c:82:8e:02:17:29:04:0c:5b:46:92:33:43:54:ee:13:dd:
         19:88:a3:7f:7a:01:84:df:10:84:c0:be:b1:b2:2c:d1:72:ef:
         11:5b:2c:22:11:3d:71:c7:4d:48:f4:1c:c1:e9:d4:11:84:da:
         da:1d:34:08:9e:13:ae:d7:a5:d5:25:4a:46:ae:9a:0a:3d:1c:
         73:33:77:bb:4e:3b:38:a2:28:17:35:e5:02:1c:e1:95:24:fb:
         64:57:02:5b:be:2d:7a:0e:78:ff:e6:9f:51:59:bc:d1:53:af:
         53:9d:ee:34:83:2f:7d:90:cb:29:95:06:36:fd:39:4f:47:36:
         7c:9c:f1:9b:7f:14:99:ca:c0:a2:71:ac:53:d1:d8:ba:cd:39:
         4d:22:cd:cf:8f:32:e5:c9:65:b5:11:c0:84:d2:45:94:22:72:
         e7:2c:b7:21:10:86:23:54:5e:e5:20:70:02:bb:cf:a4:0b:69:
         15:1d:b0:27:64:9d:e7:35:4b:1f:12:3a:8e:f6:01:2e:71:6e:
         ee:5a:75:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:42:18 2025 by rpki-client