Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File:                     hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier:          AWSZc42SHjFw6BxEhGGgmHm2t8PpsXDHfNn6jXfYMwc=
Subject key identifier:   12:38:73:80:17:D8:5E:27:D4:D9:67:12:EF:28:62:77:0E:19:35:13
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer:       /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial:       01976C992416BD5EEA60F54AF9F4ECFA143B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number:          0B52
Signing time:             Sat 14 Jun 2025 04:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 04:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 04:01:04 +0000
Files and hashes:         1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
                          2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: wEdvS6U8jzg/LjlHZQUUxAUjzec0VZe4ZZZJnt0LIhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:24:16:bd:5e:ea:60:f5:4a:f9:f4:ec:fa:14:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
        Validity
            Not Before: Jun 14 04:01:04 2025 GMT
            Not After : Jun 15 04:01:04 2025 GMT
        Subject: CN=1238738017d85e27d4d96712ef2862770e193513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b5:ef:fb:1c:50:ac:f2:f5:1e:f1:be:8c:95:
                    43:00:77:3a:d9:42:0a:4f:41:54:b8:33:62:14:91:
                    66:28:d9:eb:f8:de:0b:da:94:ab:85:12:47:de:4c:
                    98:e5:61:ca:28:07:d3:d8:01:ee:73:93:af:9d:20:
                    b5:02:f1:c9:60:bd:22:25:6a:75:bd:46:57:57:e3:
                    9c:33:6e:1f:dd:c1:d0:c3:ad:e3:59:be:7b:fa:70:
                    2c:fb:15:44:f7:72:b3:3d:88:32:8d:57:fc:1f:e9:
                    59:3b:e1:e8:d8:17:17:a7:1e:cc:7c:e0:b3:82:c4:
                    8e:e6:19:19:9f:d9:69:1b:a6:bf:56:f6:cb:bb:1d:
                    5e:a0:84:49:df:49:48:4a:d9:88:dd:2c:74:e5:e5:
                    4b:69:b6:41:7e:10:88:54:d6:1d:b6:83:96:43:c2:
                    09:ad:5b:b6:a9:cc:39:af:f0:62:dc:93:01:25:cc:
                    be:a9:b5:b1:7f:09:fb:0c:92:39:9d:f7:3a:90:dc:
                    91:36:f0:2c:23:56:f8:22:99:62:81:0e:e7:5d:8d:
                    6e:a0:dc:71:9e:47:8b:52:25:77:37:38:e4:28:64:
                    bd:02:c3:56:39:4d:33:11:8c:cd:e6:a0:fa:12:77:
                    86:fa:bb:e2:a0:5a:df:8f:76:86:4e:59:e7:bc:eb:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:38:73:80:17:D8:5E:27:D4:D9:67:12:EF:28:62:77:0E:19:35:13
            X509v3 Authority Key Identifier:
                keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b5:d8:f2:8b:c7:ae:2b:29:46:ad:e1:18:4f:c2:e5:a2:19:
         bb:42:d0:ff:ca:b6:91:d2:dc:d9:bf:92:92:66:d7:4e:fc:ff:
         74:a8:36:9b:47:d0:92:da:62:81:06:19:94:06:d0:f2:c5:3f:
         6b:64:a0:d8:be:75:bc:d1:23:d9:12:5a:eb:37:4c:5d:89:ff:
         57:2e:92:17:b7:a0:04:89:6e:16:b4:2f:da:e8:c2:6c:49:17:
         35:28:6c:9b:99:44:34:d6:1d:d4:7e:e4:53:56:6b:ef:fe:68:
         87:ba:ac:af:d4:7c:f6:a9:0f:b8:e2:f7:ec:1e:43:dd:69:03:
         21:7b:9f:52:e8:86:4c:6d:a0:3e:06:f1:54:65:1b:b7:61:d6:
         b4:9a:20:70:86:4d:d8:35:11:9d:64:bb:b9:d8:40:c3:68:c4:
         c7:f7:ff:92:4d:a2:bf:8e:d1:7b:73:09:60:a4:7c:47:7b:60:
         cb:56:4f:2f:ae:23:c5:19:b7:86:27:65:77:71:10:d7:a1:43:
         c8:97:71:cf:a3:62:75:ee:a9:25:2e:82:39:29:08:31:92:02:
         75:c4:8d:f9:a7:31:3f:11:91:13:12:4d:01:e4:4a:f6:29:3b:
         ef:24:6c:ab:c6:9a:82:1d:51:a1:2f:3f:d1:68:24:04:52:08:
         98:9e:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:18 2025 by rpki-client