Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          55v+biSR3KRFKAaLeUdEXat151ImyTIHr+HrmerejBc=
Subject key identifier:   CB:08:42:CA:B3:75:01:C4:B5:7C:F3:46:3E:BB:0C:94:92:31:D1:AF
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       019676E7CDE7CE86BD1A08FAF63C3BCB72F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 11:00:25 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:25 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:25 +0000
Files and hashes:         1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=)
                          2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: vdZCkqgx+6bdfjQ/E2WHAqk8iBbiND4+0ImF3qBzfoM=)
                          3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=)
                          4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=)
                          5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:cd:e7:ce:86:bd:1a:08:fa:f6:3c:3b:cb:72:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Apr 27 11:00:25 2025 GMT
            Not After : Apr 28 11:00:25 2025 GMT
        Subject: CN=cb0842cab37501c4b57cf3463ebb0c949231d1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:e5:9e:b6:b9:88:bf:de:fa:04:0b:ca:e1:
                    78:22:c4:8f:43:51:c2:c8:aa:72:ca:e6:17:1e:ea:
                    98:71:c0:d3:8f:04:3c:4c:07:1b:bf:04:10:e4:4c:
                    27:5d:19:48:5f:ea:72:62:22:1b:9a:50:5c:f2:ce:
                    53:dc:05:76:3d:19:33:89:8d:bc:4c:24:19:42:f5:
                    9f:7b:0c:7f:7b:ec:a2:c9:35:03:8d:97:4d:07:cd:
                    7e:66:77:a1:bf:5e:1e:e2:64:c1:0e:07:73:a1:24:
                    99:01:8f:39:af:7a:3a:b7:9c:52:70:c5:0e:4e:62:
                    49:e3:3b:7e:6c:29:eb:b3:62:4c:ed:26:61:94:05:
                    8e:a1:95:8f:01:f7:98:03:1a:66:c3:08:f1:8c:0a:
                    55:d8:fd:51:de:58:6e:06:56:98:12:33:4e:cb:a8:
                    99:86:7e:38:ee:d7:07:b1:a4:38:96:7e:9f:d2:d5:
                    49:7c:5a:91:7e:58:11:fa:06:ac:fa:5c:c8:e0:e0:
                    ae:33:15:56:0f:22:d2:d7:31:4b:9e:4e:b7:8e:55:
                    ea:36:0e:22:a6:3f:9b:63:07:5f:59:f4:6a:12:94:
                    03:32:c5:1c:9b:fa:9c:c7:cd:e3:64:e7:5b:73:fd:
                    b2:39:c7:9f:e2:ac:3e:ae:a4:a7:00:66:fe:cf:69:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:42:CA:B3:75:01:C4:B5:7C:F3:46:3E:BB:0C:94:92:31:D1:AF
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ae:3f:74:7c:e1:10:25:7b:71:d2:ab:04:f4:f9:9d:d3:1c:
         72:cb:c6:76:f0:19:ae:e0:d4:9e:8b:8c:0c:0f:27:d3:37:4c:
         ac:27:2c:83:7f:7a:4c:33:18:82:78:45:28:79:9c:b2:d3:7e:
         17:70:bc:c1:a3:3e:74:44:f6:cd:8a:6f:8c:19:bc:14:34:44:
         43:b3:33:25:63:cf:46:bd:a3:83:91:91:23:6c:a0:99:16:af:
         12:95:a2:1b:58:8d:45:07:98:33:89:8f:26:f0:86:6b:63:10:
         1e:30:7d:4b:17:d6:ef:58:61:30:38:98:a0:04:21:ad:c1:bc:
         51:f5:0b:69:19:cd:82:b1:c6:00:f0:ea:ac:21:44:71:1c:c9:
         95:b5:a2:d9:44:e9:f8:45:66:7e:f9:e0:03:65:33:e6:4a:02:
         39:a8:cf:92:1b:3a:11:38:a2:5a:b3:36:4b:17:27:50:fb:0b:
         40:19:b7:47:5d:c6:ca:68:03:a7:5b:db:47:7e:c9:5d:db:57:
         c4:c2:85:0e:b7:78:ac:30:95:76:8f:34:9b:d9:53:a5:3c:75:
         06:65:04:31:77:0e:53:90:2a:d4:17:a7:c1:43:60:7c:36:b8:
         ea:b3:8b:8b:53:0c:f9:42:94:3b:62:0d:c4:13:8c:07:36:4b:
         40:f4:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:19 2025 by rpki-client