Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File:                     H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier:          nDOHKhOEXz6mcUAkrooHBWnEfWk3vshcmdP07zAD+P0=
Subject key identifier:   15:20:F5:3F:68:DC:4F:73:31:F7:D0:7E:9B:E7:14:61:AD:69:34:EA
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer:       /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial:       01967567969B8A7BAA1E28C449E69B43C238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number:          0628
Signing time:             Sun 27 Apr 2025 04:00:45 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:45 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:45 +0000
Files and hashes:         1: 34L0qge2tNB4WEjnnevARD_mNUU.roa (hash: ry58BGExakUgGHZ3z3Fi8XcJ02SF1yHnFqs3N6sRqHc=)
                          2: 43gEJXLRZhBLeSI-aOiwsJo8t18.roa (hash: hJ2/LJzxG3xhi0jErGx6Rimn7Tgu+B52/B5v7PqA0Q4=)
                          3: FySTZF5XmiRgffP_0Q1bU_jIQpg.roa (hash: GbwThYD6w19HqYzAx38shdLTpkIXF4U5UQypl5TKy7s=)
                          4: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: slB35vc7YcQKcdJGuzQERMN/AD/Qzf/S8Wm839bakts=)
                          5: aSAbXtaRyXcPhRakK1aghIwRn3g.roa (hash: up2cOGYfGLooX0y47JfJVek/1Cnxd7U8E51loywLrVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:96:9b:8a:7b:aa:1e:28:c4:49:e6:9b:43:c2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
        Validity
            Not Before: Apr 27 04:00:45 2025 GMT
            Not After : Apr 28 04:00:45 2025 GMT
        Subject: CN=1520f53f68dc4f7331f7d07e9be71461ad6934ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:21:0d:90:61:45:1c:65:ff:d6:1e:38:8e:ba:
                    49:f7:1b:e6:dc:d3:5e:80:80:ca:7c:8a:49:96:ed:
                    00:c4:13:1c:0b:b8:f3:c7:ff:f4:a7:86:ab:46:34:
                    5d:d1:d5:4b:0b:6d:5c:11:eb:8a:be:f2:a6:42:94:
                    5e:dc:22:01:3b:1c:52:f6:ed:5f:2c:77:e1:24:95:
                    6d:2d:d0:b8:8b:3c:a0:9f:e9:50:f3:e0:4d:46:a7:
                    89:5c:0f:e0:48:c4:c5:61:44:da:ae:a4:4c:b0:e2:
                    2c:30:5b:0e:c8:7d:42:e7:93:61:64:2a:6d:69:c6:
                    4b:8d:f6:8e:bc:db:41:39:3a:54:4b:ed:71:a8:e9:
                    f9:12:8b:44:e4:e8:b9:38:9a:69:34:45:18:bb:46:
                    4f:86:83:a9:bc:20:9e:e3:12:73:ca:e2:b1:35:0f:
                    99:ac:bb:ca:2c:2d:e1:cc:dd:7f:52:32:6d:78:5f:
                    29:d9:e8:12:1e:26:eb:f2:d8:eb:b4:d5:50:ed:02:
                    90:00:07:5b:33:9b:86:55:9b:1e:11:2d:56:6b:68:
                    ba:e3:66:43:13:8e:c7:f0:4f:7e:2e:ea:9c:54:96:
                    78:e9:f4:63:ed:45:02:74:93:43:a9:80:76:2a:3b:
                    66:8c:62:0e:9b:b3:43:7f:f4:0d:3e:eb:94:09:52:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:20:F5:3F:68:DC:4F:73:31:F7:D0:7E:9B:E7:14:61:AD:69:34:EA
            X509v3 Authority Key Identifier:
                keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:9a:84:88:27:30:40:d3:a7:22:c6:f0:61:5f:b5:50:04:
         f4:ec:6e:f7:0e:6e:e4:47:44:44:4e:ea:16:67:e0:ad:11:2e:
         fe:3e:1a:0f:57:3e:09:0a:bc:ca:55:2b:06:06:f3:a7:08:70:
         77:45:94:0d:be:15:ed:f6:4c:56:ac:50:04:ee:48:f2:05:ea:
         bb:f5:f7:b4:99:c7:5f:b2:42:bb:c2:00:1a:a6:4c:c0:8a:8c:
         41:0b:d3:c6:55:04:aa:ae:b9:b0:38:8f:ca:61:ad:8f:5d:67:
         f5:60:76:d5:6a:c5:44:13:fd:03:00:21:a6:f7:c4:92:1a:2a:
         7a:4f:f2:4f:d5:d0:cb:f7:84:b4:08:ea:52:3c:77:eb:34:7f:
         72:c3:d1:20:f6:96:a1:53:0f:f2:db:79:1d:65:4d:80:26:81:
         22:85:9f:ce:2e:6b:83:92:3a:2f:a3:8c:6c:8a:d9:b9:b6:22:
         4a:1f:a9:86:37:91:b0:6e:e4:26:f6:44:3e:6d:e9:a3:3e:b5:
         b6:59:b4:25:ba:71:8f:c9:47:5c:f7:b2:cf:1a:81:16:6d:c4:
         1b:4c:30:04:29:26:bf:1f:8b:2f:7b:08:da:72:1b:c3:6a:2f:
         57:ea:c1:76:8a:b4:c9:d4:d5:85:d1:85:f2:f3:34:e3:76:93:
         49:b8:19:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:51 2025 by rpki-client