Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
File:                     MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json)
Hash identifier:          gj4Cta0V/cGvjQAZIKuZy9fR5FlQM6EVv14rn9cNZqI=
Subject key identifier:   93:F8:25:4D:30:AE:01:B5:BD:E7:74:10:D5:96:D8:15:0D:47:4E:D0
Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
Certificate issuer:       /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Certificate serial:       019673B00E6748418AEE70300934BBC9FE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
Manifest number:          150F
Signing time:             Sat 26 Apr 2025 20:00:39 +0000
Manifest this update:     Sat 26 Apr 2025 20:00:39 +0000
Manifest next update:     Sun 27 Apr 2025 20:00:39 +0000
Files and hashes:         1: 1-eAJE_ZPw_LJuNlElXg0BRaL11g.roa (hash: YakZb3LMYAiCfML5t2kxegtBvI+8ocrvx+dTJt+Il2M=)
                          2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: 6kiCHhKL0aEFNXLQDvCoYqL8KPWFaIyJSO+Ss6wBU1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:0e:67:48:41:8a:ee:70:30:09:34:bb:c9:fe:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
        Validity
            Not Before: Apr 26 20:00:39 2025 GMT
            Not After : Apr 27 20:00:39 2025 GMT
        Subject: CN=93f8254d30ae01b5bde77410d596d8150d474ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:49:3f:d7:eb:08:5c:a3:8a:55:c2:b2:00:56:
                    e4:62:7b:ec:51:cb:ff:bd:8e:67:67:38:ee:b4:4c:
                    7c:60:b8:d8:49:11:5d:03:26:cb:40:df:53:f3:74:
                    05:89:9b:ee:de:10:11:c3:93:99:04:d1:a4:2d:d8:
                    4d:f3:d1:71:f3:5e:89:f9:66:6f:a6:ad:a9:56:a4:
                    83:8d:cb:1e:aa:6a:8c:82:ae:00:70:50:62:b2:9a:
                    3c:c4:50:96:7d:ba:c5:30:0b:ad:33:8e:73:e1:c8:
                    55:c6:18:71:69:9b:69:49:6c:90:dc:58:85:4a:be:
                    b8:8d:bf:57:38:bd:cc:8c:c3:9e:45:b6:82:d6:6f:
                    ad:60:ad:67:9a:b1:3a:8d:2e:69:10:95:90:35:67:
                    b2:03:3f:be:53:d4:f5:d2:de:01:69:ca:ca:c1:43:
                    08:b2:85:c2:ff:ec:dc:88:54:b3:f6:dd:cc:47:7b:
                    5c:30:88:d6:ab:00:7f:a6:f8:0e:c5:94:59:63:48:
                    67:e0:8c:f5:ee:6a:2f:64:e6:86:60:b7:65:f9:fe:
                    1f:d1:2f:d1:e0:2b:4d:67:5e:4b:ef:50:b8:60:a1:
                    bd:a5:37:7a:bc:c3:93:60:c5:3b:e7:4e:b3:a1:2d:
                    67:53:9e:28:6e:0b:11:59:2f:97:36:bf:74:44:66:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:25:4D:30:AE:01:B5:BD:E7:74:10:D5:96:D8:15:0D:47:4E:D0
            X509v3 Authority Key Identifier:
                keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:de:6b:a7:81:70:2b:a2:dd:7e:0c:65:fc:15:63:fb:5f:e4:
         b2:f5:d6:1d:f9:03:9d:b2:ba:f1:a5:d7:58:c3:82:f0:0b:00:
         83:2a:cb:41:48:a7:7e:8b:eb:b9:62:1a:a2:1f:8f:39:df:4b:
         fa:43:ba:e0:9b:c9:b4:de:2d:a5:f9:93:e8:4c:e2:cc:96:cc:
         65:1b:6e:b1:98:dc:48:81:f8:65:2e:24:65:35:76:a5:77:17:
         01:13:57:a7:36:43:f2:79:3b:cc:c2:04:e4:23:d3:fe:68:0d:
         f0:02:16:c1:87:e0:23:d9:45:59:cf:ee:29:95:03:f8:e3:27:
         cc:00:5a:31:6d:21:68:af:c0:24:7b:16:7c:f2:8c:03:e3:c2:
         ea:cd:b7:6c:5d:4f:c7:19:9e:10:5b:46:fa:00:3a:fe:5e:6c:
         d6:e0:28:d3:fd:01:1d:de:4a:85:b7:f6:25:8e:7c:5d:d3:05:
         ff:cb:0b:e3:18:6b:17:10:f1:65:d4:e2:99:2c:c6:e5:18:d0:
         24:d5:0c:d0:7d:a9:dd:4b:f3:1e:d3:d6:dd:92:6a:a4:74:86:
         fb:38:01:6d:e6:b0:09:1b:36:fe:63:af:99:4e:5a:04:56:6e:
         4e:02:a2:d1:cd:3a:77:f2:f7:e6:3d:1e:33:b6:fb:e9:05:30:
         14:95:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:44 2025 by rpki-client