Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
File:                     HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft (raw, json)
Hash identifier:          VGnkl58QNOa0WWXaaVVd1J6yvR0VKiKhhsXWBffq+1s=
Subject key identifier:   F5:13:B3:3D:F0:69:2D:CC:71:C8:19:1C:56:36:31:D8:D7:82:9C:47
Authority key identifier: 1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
Certificate issuer:       /CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Certificate serial:       019678D6BC3F02FFA48258EA31DFF00D2DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
Manifest number:          0B95
Signing time:             Sun 27 Apr 2025 20:01:00 +0000
Manifest this update:     Sun 27 Apr 2025 20:01:00 +0000
Manifest next update:     Mon 28 Apr 2025 20:01:00 +0000
Files and hashes:         1: 0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa (hash: qKX9mbONM6/Xx6gF2emn3N/lO2VKopekGuKmwl2j208=)
                          2: HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl (hash: t0vo5hw/B980yn+kWNvSOmZ8J/+IYgXyH/dz3mmjM6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:bc:3f:02:ff:a4:82:58:ea:31:df:f0:0d:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d53c2c8bb7364a553242f3f1773362227b30e94
        Validity
            Not Before: Apr 27 20:01:00 2025 GMT
            Not After : Apr 28 20:01:00 2025 GMT
        Subject: CN=f513b33df0692dcc71c8191c563631d8d7829c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:c7:dd:fd:ae:1d:42:a3:31:34:82:21:92:
                    5f:8d:b4:f0:63:65:c2:1c:22:d8:bd:a4:46:90:b9:
                    b5:ce:35:e6:89:bb:de:70:04:1c:9c:2c:e2:71:8d:
                    3a:d0:5d:7e:9d:43:43:2b:ac:e6:7d:ad:c7:bb:aa:
                    3f:22:22:a8:f5:fe:15:f3:a0:38:88:7b:2f:bf:8f:
                    77:28:be:91:ae:4d:05:b5:2f:4c:50:91:bd:7e:8e:
                    f9:24:bd:16:8b:74:82:ac:bc:e9:9f:06:b8:2e:e3:
                    bd:a8:41:5c:2e:3f:55:68:04:85:08:56:8a:25:d6:
                    7f:62:7e:69:1e:0f:1e:98:be:a1:21:36:ea:12:4c:
                    06:91:72:61:5d:61:2f:1c:53:da:43:b8:6a:04:9e:
                    60:ae:e8:03:52:fb:8a:53:ba:fe:5b:8e:9b:f4:f8:
                    2c:9e:a3:53:9c:10:cf:40:2c:c1:e3:d1:f4:d3:d5:
                    27:2d:50:75:44:3b:c6:58:45:cc:57:b8:4e:58:8c:
                    ee:20:70:e6:04:7d:ab:91:84:4f:c3:72:c7:9f:ba:
                    92:28:ad:93:2b:41:c9:38:e6:bd:80:e3:a5:0e:fd:
                    e3:1a:1c:95:69:39:e3:0e:93:68:6a:3c:b0:f4:2e:
                    b0:c4:7f:c0:2e:54:83:01:cf:dc:65:92:41:94:11:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:13:B3:3D:F0:69:2D:CC:71:C8:19:1C:56:36:31:D8:D7:82:9C:47
            X509v3 Authority Key Identifier:
                keyid:1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:83:a1:d2:85:ed:a3:63:23:d1:6a:b3:59:bd:74:b4:83:e9:
         67:8c:1e:cb:cd:3e:19:0d:0e:3a:bc:d0:21:01:9f:2e:00:5a:
         03:bb:d4:2e:46:ca:75:42:78:7c:cf:44:39:92:94:b6:d8:f3:
         32:46:64:fb:bc:de:9c:a8:b5:26:c7:f2:0f:1a:2d:fd:91:8a:
         1d:b7:a9:52:09:3e:3b:45:b3:70:d4:05:d5:0a:ee:62:ec:41:
         65:91:a0:f9:fc:9e:06:2e:1f:eb:5a:be:39:62:6f:41:42:b8:
         dc:24:8e:c4:98:ce:41:8c:0d:0b:09:ab:6c:da:69:78:9b:27:
         67:ac:39:62:2d:c0:67:6d:7a:96:ca:4e:28:57:7f:76:dd:ad:
         5d:15:6b:08:8e:c0:16:db:3f:c9:72:00:06:bc:61:bb:cc:78:
         4e:bb:57:bc:7b:a6:b0:1a:d0:d3:1a:5d:ba:b5:45:71:fd:26:
         e0:c3:7c:ce:1a:b7:59:d9:0f:a4:4d:5b:88:55:40:d6:f4:b5:
         1e:ad:54:a8:7e:9e:0b:83:95:0e:bb:ed:76:67:8c:c5:4f:5e:
         03:51:f8:92:fc:fc:47:78:67:93:24:ed:69:93:5c:db:8e:f6:
         38:7a:fe:f7:a8:1d:c1:7e:90:34:73:83:c3:67:53:77:2d:1b:
         29:37:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:00:29 2025 by rpki-client