Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          uOkxB/a1JPVNKfbQaC+hu1Oh4WLs0MLGJP3RqdVrTh4=
Subject key identifier:   34:D7:22:B9:26:DB:90:29:C7:87:E3:11:C9:A0:A0:37:50:A3:3D:5D
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       019771F604E03B4F9EBA4D51A59A5BBBB77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0B3C
Signing time:             Sun 15 Jun 2025 05:00:37 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:37 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:37 +0000
Files and hashes:         1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
                          2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: 52CNiaTF+TxMouLMXAsyrwpi4C7tphW3FmPrgpy0ODw=)
                          3: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
                          4: fTWM1zKEU10CvPHR7x8xLqGMmBk.roa (hash: SLdOjrmdsiTj6gBhRX9Fmq3urmuPys2J1yZIBUXb9kE=)
                          5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
                          6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
                          7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:04:e0:3b:4f:9e:ba:4d:51:a5:9a:5b:bb:b7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Jun 15 05:00:37 2025 GMT
            Not After : Jun 16 05:00:37 2025 GMT
        Subject: CN=34d722b926db9029c787e311c9a0a03750a33d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:40:0a:b6:9d:15:fe:c6:ac:25:27:2f:e4:
                    d9:e4:52:ab:ba:cd:0c:20:b3:0c:d5:ae:3e:77:21:
                    03:ed:65:6c:76:f9:53:e5:c5:f3:f3:07:83:ce:9d:
                    e0:fe:dc:fe:6b:78:3b:bc:48:2f:28:cd:86:eb:eb:
                    a1:1a:50:e9:e0:fb:2f:02:6a:8c:1a:38:6c:86:3a:
                    2f:97:88:26:63:20:f8:84:a4:62:6c:3a:1c:a9:67:
                    eb:05:6f:a0:49:30:d5:ca:3e:a5:04:c9:90:b8:57:
                    26:5e:ab:cb:89:f9:37:86:3d:9f:ae:b9:77:74:44:
                    3f:93:89:66:d5:54:01:35:9a:0d:85:88:cc:2c:56:
                    40:6d:62:1e:8c:79:f3:6b:29:57:a1:fb:86:34:ed:
                    30:8e:a2:52:f4:eb:0c:31:8d:6d:f6:7f:ce:21:db:
                    06:44:58:35:29:11:18:b6:c6:c9:ef:3e:bb:8d:fd:
                    bc:63:b4:06:17:a6:a6:10:dc:c1:d0:69:c7:4d:04:
                    34:fb:2d:83:47:c5:a8:78:6b:ad:30:7b:3c:59:b5:
                    9b:77:5a:9f:7c:21:8b:1c:b7:31:6e:d5:d2:eb:46:
                    08:9e:69:30:9d:d0:65:f4:f8:e8:9c:0c:42:0d:c4:
                    b7:0c:04:93:8d:06:15:0b:95:c4:46:bc:d9:68:44:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D7:22:B9:26:DB:90:29:C7:87:E3:11:C9:A0:A0:37:50:A3:3D:5D
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:99:c9:9b:6b:85:b5:91:f2:29:64:2c:d3:29:0c:d6:17:04:
         35:7c:fb:8e:9a:fd:dd:a6:3d:b9:fa:09:0a:b2:0d:c6:a9:db:
         3b:02:85:fc:4c:00:4c:dd:45:90:fe:b5:46:aa:ed:c3:ad:ef:
         7f:1d:f9:09:3e:1d:2c:5f:19:96:7a:fc:19:e8:99:f9:cd:70:
         b6:45:1b:8d:84:b8:68:9e:cd:f0:ac:9c:29:65:e9:e3:1a:e4:
         e9:f1:09:7f:82:32:09:d3:d0:e1:a8:56:d7:64:a9:8a:a8:8d:
         68:a1:5f:6c:39:79:df:67:1b:ab:35:e4:a4:08:36:8c:12:88:
         c8:eb:30:1b:78:5d:89:b7:c3:27:49:7f:81:a3:af:42:37:9f:
         a9:11:cf:8b:3a:45:d6:45:9d:2a:bc:67:90:70:ee:9b:6e:0e:
         e1:0e:8d:bd:2e:9f:c4:41:ba:6b:f1:d7:48:b2:d7:e7:ad:04:
         95:87:21:c5:65:2e:7a:ca:1a:73:5a:48:d2:37:1c:0a:b4:92:
         4b:ef:00:77:56:00:ef:b9:b2:8a:01:23:85:79:9e:b6:c5:76:
         f7:5e:1e:2e:1b:3d:6f:30:bc:c5:72:5c:a1:03:a0:ee:98:eb:
         e1:1e:2f:8a:b0:0c:e6:06:69:1f:be:f7:e3:98:49:3f:b8:13:
         b9:c4:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:55 2025 by rpki-client