Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File:                     HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier:          Ub3fmYCRrC//8FYj+xNrn1AcbL/tYxc8+29+cpSHCBE=
Subject key identifier:   9B:68:56:C0:10:15:EA:78:FC:BA:A5:BB:CF:1D:B9:CE:D9:70:80:47
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer:       /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial:       019769613815A06188C57C38833F84CC8229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number:          0EE9
Signing time:             Fri 13 Jun 2025 13:01:08 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:08 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:08 +0000
Files and hashes:         1: 5pynZFAsqvPIGH5-PXLgAGK58mA.roa (hash: fBc4s8OOq/rbaknM5GE/ZQ9xYBiAMIuTqJlNTn46D0Y=)
                          2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: JAoi1xm/kJKZxj1X7dEvXTzg9baT1myfQHxwuiNgPpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:38:15:a0:61:88:c5:7c:38:83:3f:84:cc:82:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
        Validity
            Not Before: Jun 13 13:01:08 2025 GMT
            Not After : Jun 14 13:01:08 2025 GMT
        Subject: CN=9b6856c01015ea78fcbaa5bbcf1db9ced9708047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:d2:aa:1e:a2:e0:ae:41:b3:5c:8a:6f:b0:
                    c2:14:d7:10:93:aa:3b:80:0d:08:18:73:e0:e7:6d:
                    02:1b:db:5f:ad:ae:db:62:30:ca:c3:37:af:43:9d:
                    7f:59:fd:66:31:d7:32:2a:a8:20:65:05:de:50:c4:
                    4d:52:03:10:cd:85:c4:63:9b:88:e5:7b:9a:b3:c7:
                    f7:6c:1e:0b:5e:9c:d8:fb:c0:3d:59:1f:4e:1e:51:
                    78:a1:65:b6:d9:bf:0c:89:c2:a1:bf:a8:3a:78:b4:
                    f1:e8:66:b4:6d:79:f9:a1:da:19:4d:88:23:9e:64:
                    b4:42:c4:f2:27:a5:84:99:1f:38:00:06:16:77:a1:
                    fb:df:54:ea:85:6c:8f:97:47:e1:b6:a1:20:b2:9a:
                    4e:e4:c1:ad:eb:37:00:a6:90:53:8f:60:9c:d4:3f:
                    75:13:39:6e:e1:b9:39:a8:83:54:b5:79:25:14:28:
                    2e:8b:94:10:ab:22:27:df:5d:d5:79:e4:46:40:92:
                    52:21:69:d0:2d:c3:ba:34:6d:14:b0:8a:44:17:4a:
                    35:6e:11:02:2e:1b:ff:73:67:26:88:1d:b9:94:43:
                    2e:5b:3d:fc:51:3f:2d:b1:85:af:77:db:9d:95:fb:
                    f0:d2:a8:7c:90:22:18:20:b9:12:43:4e:af:09:fd:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:68:56:C0:10:15:EA:78:FC:BA:A5:BB:CF:1D:B9:CE:D9:70:80:47
            X509v3 Authority Key Identifier:
                keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:86:07:d9:8e:dd:8f:86:7f:ff:a0:7c:b3:cd:f8:1c:23:
         88:a5:23:c9:db:f4:d2:44:e2:3a:f9:fd:ae:49:e8:00:67:0e:
         84:de:e7:2d:5e:cc:86:67:52:7c:a6:e2:f9:93:e5:b6:c4:a0:
         49:de:1c:79:e3:bb:be:11:71:d3:41:78:37:ca:53:93:78:79:
         2f:c4:9d:be:40:37:be:40:8b:06:b5:13:c5:10:0c:17:f8:31:
         b0:44:0a:79:72:9e:f2:6b:80:d8:33:f4:1d:41:35:f1:43:53:
         3e:e0:03:89:20:f1:25:6c:f9:04:b2:e8:05:73:4c:52:a7:31:
         a1:c6:4d:84:8c:0f:66:04:a9:22:a8:de:e2:ab:ff:96:f1:53:
         46:42:a2:1d:f8:32:14:ac:76:9a:a7:6e:69:86:6a:2f:42:5a:
         6a:b3:a8:14:7e:b1:be:11:17:9c:7a:3b:57:f6:c5:22:5e:6a:
         2a:cb:72:19:95:70:bf:52:76:7a:e6:08:9a:d6:ad:02:31:db:
         2f:f1:5a:9f:ce:4b:0c:54:d5:f0:dd:31:f7:0d:d0:ab:75:66:
         9c:46:36:47:aa:bc:c6:50:9c:2d:33:1a:65:ce:0d:09:62:fd:
         b2:7b:06:87:f5:aa:51:44:6f:67:74:b7:89:47:3b:37:3c:a8:
         0d:6b:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:59 2025 by rpki-client