Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File:                     HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier:          H/kxboA5PA83IUeo4hqq10EFX2nRD02bGzf/xA0AFXc=
Subject key identifier:   2F:59:10:F5:8B:FA:DC:BE:C4:D8:6B:5F:4A:21:9D:F3:6F:4C:0F:24
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer:       /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial:       01976BF40EAA7D7701FA9491AF9244BCFC2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number:          115C
Signing time:             Sat 14 Jun 2025 01:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:46 +0000
Files and hashes:         1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
                          2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: 7c8hNk03zTArHaY/518QUyplRBi0ZWn7fL8pvWwOJC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:0e:aa:7d:77:01:fa:94:91:af:92:44:bc:fc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
        Validity
            Not Before: Jun 14 01:00:46 2025 GMT
            Not After : Jun 15 01:00:46 2025 GMT
        Subject: CN=2f5910f58bfadcbec4d86b5f4a219df36f4c0f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:af:8d:87:b0:b3:c2:1d:4c:9a:97:5c:38:
                    8e:ad:bb:a5:33:38:49:d2:93:39:ea:93:d0:1c:dc:
                    79:03:91:aa:a2:b6:81:48:0f:a1:30:a4:e6:be:9e:
                    ad:a3:45:23:c5:2a:c9:53:d8:e7:77:dc:d3:3e:0e:
                    07:05:69:77:9a:3e:4a:9e:65:08:5c:df:d6:f5:59:
                    42:18:89:df:20:a9:3a:b0:53:a9:77:1b:cd:44:b9:
                    f5:83:e1:47:ab:ce:d4:4b:25:d5:ac:b1:7f:5b:30:
                    73:83:75:d3:68:4c:f9:cf:ff:e1:2c:39:fa:a2:73:
                    41:1b:2b:e9:fb:19:53:7c:da:a2:17:77:eb:52:16:
                    bd:22:50:6b:29:7f:63:94:6a:5d:e5:08:d2:32:bb:
                    45:81:cb:6b:08:6c:3d:e3:f5:af:27:86:9b:07:94:
                    ab:f1:55:c1:94:66:52:cf:0d:20:98:bd:da:13:77:
                    64:8a:95:82:8f:a9:03:24:39:18:02:ed:f8:da:60:
                    90:50:69:aa:31:a4:88:43:b8:b7:bf:ba:90:30:13:
                    08:1c:5c:f3:d2:16:a4:0d:a3:ad:74:b7:4b:c7:c5:
                    0b:51:e3:9d:2b:96:ba:41:fe:49:60:5e:e6:a3:96:
                    ba:a2:07:bf:46:78:29:1d:24:43:b4:c2:ec:98:d5:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:59:10:F5:8B:FA:DC:BE:C4:D8:6B:5F:4A:21:9D:F3:6F:4C:0F:24
            X509v3 Authority Key Identifier:
                keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f3:90:a9:e8:b0:f3:f1:92:37:ca:a4:b9:09:c2:e2:c1:be:
         b5:1f:bc:b6:b0:ef:26:00:e6:4d:78:d0:f0:fe:3a:43:12:86:
         d6:21:48:f4:a2:d2:29:80:b3:8e:73:9f:85:fa:cf:1e:9a:dc:
         71:67:b8:83:32:d0:13:fb:e7:f0:e6:ca:9b:70:48:c3:a2:0c:
         7e:68:d7:a7:0f:a1:fb:fb:6a:a1:ad:a0:c4:72:96:61:69:7f:
         e0:a2:2e:b7:4d:ad:68:76:25:b4:d8:14:9b:68:b9:20:a7:82:
         be:fd:75:37:28:ec:72:1c:be:dd:0b:0d:67:7a:fd:80:52:e6:
         39:85:e6:22:16:a0:ee:a4:2e:0f:76:83:a7:b5:f1:0a:6d:dd:
         73:76:25:71:a9:3e:b8:79:e1:6d:3b:5c:9b:cd:72:c5:bd:d0:
         3b:f6:a2:e2:63:e9:2f:fd:66:71:71:b2:ee:d7:9b:74:d0:32:
         c7:c8:30:d7:57:e5:8a:92:e8:9b:5d:14:ee:f1:8d:8d:a7:e7:
         c5:79:97:b0:92:46:02:b4:56:40:66:04:49:9d:03:2b:56:e3:
         0a:71:16:83:d0:55:cc:19:5a:0e:9f:17:83:9c:17:ce:cc:4d:
         22:f4:44:ec:7c:35:4a:da:46:0f:53:a0:a9:43:89:dd:25:02:
         f7:d7:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:38 2025 by rpki-client