Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File:                     HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier:          KMJekL6y0Veqrr2oFEvWd3jEdFr20/zZRE205XTPBkM=
Subject key identifier:   34:49:7C:E6:57:FF:FA:77:10:AA:39:39:5D:2F:66:51:5F:B8:37:BA
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer:       /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial:       01968C25EC4065E720C42888F95E37679933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number:          08BA
Signing time:             Thu 01 May 2025 14:00:17 +0000
Manifest this update:     Thu 01 May 2025 14:00:17 +0000
Manifest next update:     Fri 02 May 2025 14:00:17 +0000
Files and hashes:         1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: bbdrM2B4Iwjc2N8xpI7+rJfftFItw060vglFfjxlTZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:25:ec:40:65:e7:20:c4:28:88:f9:5e:37:67:99:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
        Validity
            Not Before: May  1 14:00:17 2025 GMT
            Not After : May  2 14:00:17 2025 GMT
        Subject: CN=34497ce657fffa7710aa39395d2f66515fb837ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:2b:84:fd:7e:ce:5e:49:c8:86:60:cc:67:
                    02:63:b6:34:da:fd:8f:ef:4f:27:69:ad:00:eb:d8:
                    59:10:d8:43:4d:14:b0:1c:9b:93:40:92:98:c1:dc:
                    51:7a:92:69:11:e9:85:22:74:f7:c9:ce:f7:41:9a:
                    0f:62:4f:80:61:54:7e:20:24:1d:df:7d:60:c3:7b:
                    97:b2:a3:48:d7:d1:b8:17:0f:88:8a:0a:66:30:04:
                    07:37:22:b1:8e:e9:13:7d:21:40:03:73:4f:ae:a4:
                    97:78:51:e5:1d:f1:58:17:77:04:63:0b:3c:16:24:
                    23:d7:7d:a3:5f:37:8e:28:eb:9f:38:01:02:64:1c:
                    3e:4b:8a:a3:2d:76:52:7d:80:e3:8a:dd:aa:59:f8:
                    6b:65:19:08:5b:12:11:15:b9:d7:d4:8e:ee:f3:4d:
                    4c:12:01:c9:fc:72:c3:ab:ca:95:8b:24:63:3b:ac:
                    d3:fe:f8:41:34:6f:8b:d8:48:2d:2e:69:9e:e1:e7:
                    d6:71:64:a6:d6:64:e6:e1:aa:00:ff:d7:93:44:ae:
                    42:1c:b7:c0:1e:03:33:19:02:97:18:da:f6:7e:ec:
                    37:9a:ed:dd:57:a5:e6:db:0b:e8:0d:d5:84:2c:39:
                    6e:1b:e8:02:c5:9c:c0:fd:a3:a6:5c:1a:c9:7a:c9:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:49:7C:E6:57:FF:FA:77:10:AA:39:39:5D:2F:66:51:5F:B8:37:BA
            X509v3 Authority Key Identifier:
                keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:71:05:55:ef:fe:06:de:31:f9:95:25:6e:8d:77:04:7b:87:
         d7:ee:48:44:22:df:3c:99:98:bc:01:45:e4:cf:40:5e:67:c6:
         12:72:ab:13:00:28:fa:87:e1:3c:66:a4:ca:45:74:86:55:b4:
         51:3b:62:a4:97:76:de:07:d3:0c:08:ce:73:36:e3:4e:9e:68:
         01:7b:45:90:3e:ed:88:02:50:25:24:99:e6:75:29:da:57:6d:
         c2:39:db:c7:89:83:01:ea:5e:db:b0:d5:a1:d2:f3:2d:01:08:
         76:af:4f:3f:9e:73:d9:2c:ef:e3:a5:17:e9:81:ba:d7:05:bc:
         8f:c4:32:c2:2b:51:b2:d6:95:8a:2a:2d:b4:db:c0:b1:61:fa:
         fa:10:d6:ef:c3:9c:e4:f1:e0:23:8a:53:ba:3f:33:c0:73:67:
         22:df:cb:92:f3:74:16:0b:1c:a5:a2:bf:55:51:77:46:40:69:
         b5:5a:f1:0b:68:f6:d1:26:05:31:32:b2:12:90:e2:b6:6a:6f:
         31:bb:41:52:fd:e6:c1:72:69:26:22:a8:da:6f:07:37:a7:05:
         77:f9:5e:7f:78:08:e6:1e:94:46:c4:a9:7b:80:fd:be:b3:65:
         e2:f0:65:5d:3f:14:e2:55:17:74:50:5b:1e:54:b0:6b:6e:ff:
         90:3b:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:38:25 2025 by rpki-client