Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
File:                     HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json)
Hash identifier:          VCrt/u5Xvab9WU4jZOgWBB8ydC3hmELkuqT1K4CHkbk=
Subject key identifier:   BA:C7:59:11:D8:2C:74:F9:E9:AC:AF:4D:C4:65:3D:0D:1C:EA:71:F0
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Certificate issuer:       /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial:       01976BBD89E13865175951119C49C1486137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
Manifest number:          0EE7
Signing time:             Sat 14 Jun 2025 00:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:13 +0000
Files and hashes:         1: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: pnrOipr134sa2HBdot6KNJmX/m/WvTawevDByhkMcoU=)
                          2: V9AZTNgU1d002QfKUotGNDSDtvk.roa (hash: x3l+fuQjKQuMTqxTAI/mH6BtVLnUzYs7euSSf0MTbRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:89:e1:38:65:17:59:51:11:9c:49:c1:48:61:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
        Validity
            Not Before: Jun 14 00:01:13 2025 GMT
            Not After : Jun 15 00:01:13 2025 GMT
        Subject: CN=bac75911d82c74f9e9acaf4dc4653d0d1cea71f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:2c:7c:89:20:ec:eb:da:fd:0b:d5:d2:60:
                    23:54:3a:ec:bf:2f:eb:66:9d:a3:66:df:ab:e8:18:
                    11:f8:cf:1f:f7:d9:79:7f:22:52:1a:9d:73:53:2c:
                    fd:b5:03:60:72:96:fe:04:88:eb:b4:59:c4:34:74:
                    9b:14:33:e5:fc:42:b6:ca:88:d9:46:a1:0c:f2:02:
                    c9:c4:ac:d3:51:cf:04:2c:e8:b3:6f:2b:07:61:ed:
                    33:18:b4:4c:19:41:14:d3:ae:65:3f:e4:51:e8:cc:
                    98:38:04:2c:20:37:fa:0c:ad:8e:d1:c3:5f:52:b8:
                    e9:f0:db:df:9d:a1:dc:33:96:97:73:f3:45:ee:25:
                    ac:47:3a:fc:ae:3f:28:1f:13:13:51:ec:58:76:ee:
                    da:0d:b6:bd:60:32:17:8f:46:80:01:97:7c:91:37:
                    72:71:ef:bf:3f:3e:2b:df:af:7c:29:5d:84:b5:6b:
                    5a:e0:dc:3e:c7:74:f4:aa:ec:74:d9:ad:69:68:d4:
                    0a:64:7f:ef:d2:e2:ec:6e:5c:cd:d5:02:89:ef:0a:
                    1f:25:7e:61:63:88:36:e9:f5:b6:43:97:fd:9e:8c:
                    18:18:01:fc:e3:86:80:8d:7f:dd:df:20:95:f5:69:
                    6e:71:b3:96:fe:a0:26:40:2d:4b:aa:59:47:65:ef:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C7:59:11:D8:2C:74:F9:E9:AC:AF:4D:C4:65:3D:0D:1C:EA:71:F0
            X509v3 Authority Key Identifier:
                keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:aa:d5:89:7a:7a:bb:e5:85:2e:d6:41:b2:4f:49:dc:39:26:
         58:6d:84:54:ca:17:83:5d:4c:33:d4:b2:b2:e8:41:c4:92:7d:
         43:6e:47:bb:9a:85:80:ae:ff:69:85:7d:93:0e:46:05:61:3a:
         37:6b:d2:43:7a:08:ed:0a:3e:98:ea:59:74:c4:1c:67:f9:23:
         63:ec:e3:c5:b7:12:be:a3:56:cb:4d:8a:a7:88:8c:7c:15:26:
         51:fd:63:64:dc:a7:2f:05:b6:ff:0d:f1:28:7c:be:70:22:0c:
         f4:db:1e:12:48:52:81:bb:00:cf:49:c5:f6:80:d2:ec:73:cd:
         c1:b4:0c:e1:09:a8:a9:a2:05:c7:d5:f0:30:eb:8b:b8:bc:8a:
         d3:0f:7c:77:50:d1:6b:fb:5d:f3:57:76:86:91:2c:6c:9a:55:
         90:98:a3:6a:b2:a9:7f:7a:d8:9a:a5:62:8b:0b:87:71:55:18:
         c7:1f:fb:32:dd:d7:ef:01:c9:a3:8c:f6:25:f8:0f:ed:cf:12:
         4a:70:43:99:7e:22:b1:94:a0:ef:ef:89:2b:99:96:cf:a0:1b:
         c1:03:71:8e:f3:e0:ff:02:79:a2:33:26:f9:95:6c:f1:76:61:
         3c:84:2a:35:35:06:ff:13:99:82:d2:39:af:01:d6:8c:55:5f:
         9d:ac:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:57:32 2025 by rpki-client