Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File:                     HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier:          zkHa56EyOupMtmXS/BkkcpTWlMKzvVnRfO4/Z6KTiiw=
Subject key identifier:   0D:EE:B6:1A:16:28:DC:35:F0:34:C7:DC:F8:81:EF:0B:F9:97:8F:2E
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer:       /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial:       0196900365E5F143CC02C87A1ACAD5F7336E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number:          08BC
Signing time:             Fri 02 May 2025 08:01:03 +0000
Manifest this update:     Fri 02 May 2025 08:01:03 +0000
Manifest next update:     Sat 03 May 2025 08:01:03 +0000
Files and hashes:         1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: jZy4O/Br+A4HNfyPh+KN1QT5RTX/rv6lCidAmX49EPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:03:65:e5:f1:43:cc:02:c8:7a:1a:ca:d5:f7:33:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
        Validity
            Not Before: May  2 08:01:03 2025 GMT
            Not After : May  3 08:01:03 2025 GMT
        Subject: CN=0deeb61a1628dc35f034c7dcf881ef0bf9978f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:88:bd:03:9b:53:48:da:da:f7:f4:da:63:
                    63:23:80:39:26:1e:db:8c:72:e0:c2:17:30:25:a5:
                    4f:dd:43:a4:3c:45:95:c8:16:37:ee:62:12:96:67:
                    d5:c2:08:dc:4d:81:13:23:5f:12:90:72:c8:b6:16:
                    24:09:83:6b:3a:98:45:bf:20:7d:80:45:dd:b7:7d:
                    8e:e2:f3:72:04:08:df:03:a2:8e:c4:be:cb:4f:b7:
                    fc:44:3b:63:6e:c8:e9:a9:cb:9e:da:7f:b9:f3:36:
                    b5:d9:33:4f:da:ab:a8:51:3a:91:8b:fc:05:23:43:
                    bd:59:5f:b7:1f:0d:8b:10:f0:13:fc:1a:17:22:66:
                    4f:25:d7:4d:8a:74:bf:de:9f:09:91:f1:5c:45:99:
                    52:23:8d:73:4d:34:d3:22:db:43:00:f9:d5:16:16:
                    ee:75:1d:24:72:1b:9b:5f:09:8d:aa:ed:46:f4:7c:
                    1c:cd:8a:42:e8:10:68:75:ff:46:15:a7:1a:8f:c4:
                    cc:7f:78:6b:44:98:ae:ad:09:8c:9f:af:83:9f:1b:
                    a4:5e:e5:7c:77:3a:99:3d:b2:47:2b:25:dd:65:69:
                    49:15:a0:d2:aa:2f:bc:2a:65:02:5f:c6:58:63:74:
                    88:b4:7e:83:da:0b:12:db:59:7a:29:8c:84:69:ef:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:B6:1A:16:28:DC:35:F0:34:C7:DC:F8:81:EF:0B:F9:97:8F:2E
            X509v3 Authority Key Identifier:
                keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:e1:d4:73:86:e2:fe:d2:3e:21:84:c3:12:c6:ac:00:37:
         00:f4:e9:ed:4f:38:6a:02:13:ad:75:4e:bd:e5:64:51:59:a4:
         6d:2e:11:b2:b6:89:a2:f1:2b:7e:02:bd:5b:5b:69:5b:b3:9e:
         b5:56:ee:70:5c:7f:9b:37:cc:f6:0f:4f:80:20:61:ed:12:e0:
         54:f0:bb:a4:d6:fd:cd:18:0c:6b:55:af:38:8f:85:ed:fb:de:
         c4:0c:a3:77:f9:30:81:f5:3e:b1:b7:89:e6:57:bd:df:f7:75:
         3b:c5:8e:b6:5b:fe:ce:c3:55:cc:9d:ec:44:9e:68:de:54:06:
         2a:fe:31:4a:03:8d:4f:87:8f:c4:cb:08:5a:8b:0f:e6:a2:38:
         34:34:2f:c3:0f:83:55:86:b2:bd:c2:de:d6:35:59:ff:c7:bb:
         16:21:7d:d8:c2:8a:30:67:a7:36:b5:1d:8b:9a:db:f9:5b:52:
         8b:52:9b:6b:d0:78:7a:1e:41:2b:4b:a4:b5:d7:21:81:c5:79:
         85:ec:6c:11:d4:99:46:12:7b:cd:a2:db:eb:c3:64:e3:1c:58:
         b5:99:0d:c8:c6:fe:dd:a6:64:c9:fd:37:d8:73:2f:d5:ee:78:
         4a:72:ba:be:30:1b:da:ff:b6:79:a7:59:20:4a:b9:3f:36:e1:
         cc:bb:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:08:41 2025 by rpki-client