Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
File:                     H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft (raw, json)
Hash identifier:          hrl1VZqWWM3PouYRCGHV5H5I7ELX7+3r7wIO+yU1HYU=
Subject key identifier:   E3:05:62:E9:D9:73:2F:FE:DF:FF:F0:FF:3B:35:BD:35:9F:F2:5B:DA
Authority key identifier: 1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26
Certificate issuer:       /CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
Certificate serial:       01967FB51E9EC0E3BB1B9E75AA2D16261A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
Manifest number:          1510
Signing time:             Tue 29 Apr 2025 04:01:38 +0000
Manifest this update:     Tue 29 Apr 2025 04:01:38 +0000
Manifest next update:     Wed 30 Apr 2025 04:01:38 +0000
Files and hashes:         1: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl (hash: 5pKM1+KcMkkQq/cS+y53JrB+tMs0CYGtmL3pyNwmenQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b5:1e:9e:c0:e3:bb:1b:9e:75:aa:2d:16:26:1a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
        Validity
            Not Before: Apr 29 04:01:38 2025 GMT
            Not After : Apr 30 04:01:38 2025 GMT
        Subject: CN=e30562e9d9732ffedffff0ff3b35bd359ff25bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:73:05:49:33:f9:c7:59:24:13:4a:41:b7:
                    bb:d9:87:4f:72:77:4d:6c:7e:79:39:75:7c:b2:ea:
                    56:b6:32:8c:ba:b1:84:ec:cc:87:85:cb:2a:0c:c7:
                    0a:d8:ad:31:c8:c8:08:20:50:15:b9:24:00:a9:85:
                    22:db:52:1a:74:df:b2:44:66:f3:f2:e9:82:14:1d:
                    c8:63:63:b2:c0:72:93:78:3c:b1:49:80:f9:3b:e5:
                    67:bf:66:5f:e4:67:3e:ca:2f:56:b7:78:75:8b:75:
                    0d:20:44:02:4a:d6:22:f2:c2:4e:a6:4a:95:b6:3d:
                    68:17:90:27:b6:a6:c1:22:d6:57:6c:a4:47:2f:ee:
                    36:80:d0:17:73:05:db:7c:d1:45:e8:42:55:b4:a9:
                    d4:64:08:e9:0a:2c:70:cc:53:a1:c1:3d:5c:46:3e:
                    95:55:55:68:68:d9:30:12:bf:de:ea:18:15:eb:dc:
                    b0:c7:81:62:7f:d2:85:36:1f:12:13:37:1b:c4:24:
                    3f:1e:e8:98:1b:b1:d2:3e:59:bd:65:20:be:20:ec:
                    79:32:8b:9d:d5:03:1b:79:50:5b:53:c8:87:f7:43:
                    25:3b:5c:6a:35:98:90:ea:bb:d3:1e:24:46:2c:72:
                    ff:d3:66:e5:bb:8d:a9:9f:ef:6b:3b:c3:5d:10:3d:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:05:62:E9:D9:73:2F:FE:DF:FF:F0:FF:3B:35:BD:35:9F:F2:5B:DA
            X509v3 Authority Key Identifier:
                keyid:1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:28:5f:8b:bc:44:70:14:13:4b:8e:50:26:9b:95:31:24:9a:
         83:81:dd:0c:af:28:46:e1:d4:e4:45:66:04:62:fc:a6:1c:96:
         57:32:f2:e5:0f:6a:d6:2a:88:fd:33:c3:a7:0a:a4:c5:78:38:
         44:a4:2a:1b:c2:cb:f3:81:20:29:23:77:7e:4a:f9:74:98:8c:
         64:38:68:17:27:36:c9:84:97:54:b1:ba:c2:f5:31:54:50:ec:
         1d:2e:e5:ea:36:dd:c9:6c:39:80:c4:de:b5:b4:73:d3:e1:2b:
         a9:2d:2d:80:6d:15:a8:69:b0:05:9f:08:1a:34:9d:7a:2f:cc:
         9f:c4:a7:23:76:59:25:e8:98:9f:6a:fe:39:fe:ce:57:64:d4:
         d0:04:04:a3:fd:ee:c8:5b:c9:00:73:83:7b:d5:7e:85:43:5d:
         1b:52:e7:3f:35:cf:2d:d7:54:df:fa:fe:4f:83:a2:a4:be:5d:
         5d:fe:76:48:6d:f6:7e:f0:f1:10:73:85:59:f8:64:bc:35:7c:
         eb:d1:dd:50:7a:ac:77:97:66:84:ad:c9:94:b3:81:01:ad:8a:
         30:d3:a8:27:7d:be:c4:74:b5:62:af:b9:77:96:b5:77:ad:10:
         e0:2d:1d:68:cb:30:5f:71:24:80:38:be:71:de:0a:ee:33:fd:
         e4:6b:89:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:08 2025 by rpki-client