Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          r6wRUJ6A2+KoSPwtZsZMFS8XQq6JTUEbtx9xChrewjE=
Subject key identifier:   F5:4A:B1:49:01:3A:26:F0:22:9D:5D:B0:90:23:68:8A:E2:ED:28:46
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       01976D7447D99E58470239BD8B91BAE90916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 08:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:26 +0000
Files and hashes:         1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: pf0OyELpfFGzSakHzsC/DnPnvk8P5eN6LCq2qm9JAyw=)
                          2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:47:d9:9e:58:47:02:39:bd:8b:91:ba:e9:09:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Jun 14 08:00:26 2025 GMT
            Not After : Jun 15 08:00:26 2025 GMT
        Subject: CN=f54ab149013a26f0229d5db09023688ae2ed2846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:b2:14:1c:c8:b8:4a:97:e5:09:65:f1:c8:
                    ff:80:a8:2b:ac:4f:82:21:fc:56:70:d9:7f:1a:aa:
                    3c:fb:a4:8b:be:d6:a0:51:a9:61:fa:b3:2b:f8:eb:
                    6c:6a:f8:92:c9:05:89:80:1e:55:e2:1a:8d:60:f2:
                    e2:4c:25:d4:1d:9a:0a:88:9e:41:e6:c3:4d:0c:dc:
                    44:93:87:6b:ac:02:19:2a:31:bb:d2:15:25:82:51:
                    ed:28:69:75:b0:49:5d:a7:87:42:03:3c:76:87:36:
                    38:8a:6f:e4:7e:09:07:29:50:a5:74:45:45:0c:3d:
                    ad:52:a6:50:03:23:9b:5d:e8:9f:13:ba:81:f9:d0:
                    db:2d:76:d4:67:51:1b:18:47:db:da:87:e3:85:df:
                    d8:08:de:eb:11:36:26:ae:2e:79:c4:02:10:d4:31:
                    28:1d:48:49:2c:80:12:ea:63:c9:58:03:44:12:df:
                    97:8a:16:2e:2b:8a:91:da:20:5c:c9:2e:10:7d:78:
                    e5:cc:b9:7d:37:57:d0:c8:33:e9:e6:90:cd:d9:78:
                    a8:5a:04:73:d7:54:87:ff:01:ab:8a:27:b6:73:47:
                    df:59:8f:83:e6:71:f4:b0:8d:af:9f:48:8c:5c:2f:
                    74:16:0c:58:b3:ce:50:f8:e3:38:37:fc:60:61:5e:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4A:B1:49:01:3A:26:F0:22:9D:5D:B0:90:23:68:8A:E2:ED:28:46
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:ac:d4:5d:93:07:c8:4e:3f:86:07:1d:b2:81:14:42:92:
         b8:1d:49:4d:38:51:df:e8:02:0b:13:64:bc:2d:54:d6:0b:d1:
         f1:cf:85:42:de:f7:3d:17:8b:90:5b:ad:d9:a3:c3:6a:a7:65:
         51:7e:15:40:11:25:7f:36:47:ec:a0:ad:63:0a:d0:e7:02:bb:
         fe:80:57:e9:2c:9f:4f:98:93:24:78:6e:e2:c6:8c:c3:e9:74:
         3d:d9:b4:d2:b2:d4:b1:1d:25:69:af:54:20:8d:25:82:33:7b:
         b1:30:86:6c:98:5a:d4:c2:67:cc:f6:93:ba:2f:1a:4c:3b:ce:
         6c:f5:6e:5a:2a:6e:f0:cc:87:c5:ff:97:78:ae:8b:cd:2f:dc:
         30:13:ad:6b:75:8d:09:f8:c2:72:c6:41:1e:d8:9a:51:2b:69:
         d2:26:92:cc:a0:35:86:c3:02:c1:5b:03:60:7f:b3:79:b7:cd:
         fa:91:3e:b9:a7:a0:95:ac:c8:6a:60:1a:ee:3d:96:9a:59:57:
         db:bd:99:40:80:b0:50:8f:92:f2:11:33:2e:91:bb:37:2f:4e:
         66:c6:30:00:44:ff:67:81:60:0a:d0:92:67:42:2a:99:6c:c1:
         12:0c:40:be:95:ce:8d:51:0f:ed:65:d1:5e:13:52:18:a9:04:
         b6:ad:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:44 2025 by rpki-client