Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File:                     hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier:          swRX2rYcw/wgNvzD2VjzZ2X2yNuk2kTTghdU1mE/51Q=
Subject key identifier:   6B:25:0B:AB:83:17:38:1E:78:AE:D7:A8:C9:A4:8D:A2:EB:C2:EE:5D
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer:       /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial:       01965EDF79D7BCD3075311E57E2A9306E331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number:          1500
Signing time:             Tue 22 Apr 2025 19:00:26 +0000
Manifest this update:     Tue 22 Apr 2025 19:00:26 +0000
Manifest next update:     Wed 23 Apr 2025 19:00:26 +0000
Files and hashes:         1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: Z0VADYlK2TA9S5F1dpS3HZbFxE4xrWXUe+4KkVOTuhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5e:df:79:d7:bc:d3:07:53:11:e5:7e:2a:93:06:e3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
        Validity
            Not Before: Apr 22 19:00:26 2025 GMT
            Not After : Apr 23 19:00:26 2025 GMT
        Subject: CN=6b250bab8317381e78aed7a8c9a48da2ebc2ee5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:8d:21:73:fd:e7:96:27:e7:6d:9e:34:44:
                    37:04:ba:d0:8a:e9:ae:b3:c6:f8:32:fe:75:42:f9:
                    31:d9:32:c2:61:b4:06:2c:6e:a9:5b:11:e9:eb:d7:
                    85:aa:70:4e:92:ce:83:9d:7d:0c:36:f2:3b:48:6e:
                    c8:c5:13:4e:56:20:3a:17:c6:c3:8b:02:f3:13:88:
                    fb:8c:77:6e:2d:36:71:07:82:eb:81:60:1e:31:8c:
                    48:19:aa:31:d3:a4:a2:c5:3e:a4:37:77:93:a8:dc:
                    f8:e4:e2:5c:7e:8e:a6:b3:96:cd:74:d1:c8:23:f4:
                    b3:d0:d8:97:2a:7a:ef:3f:8c:12:12:06:0a:6b:5a:
                    d3:3c:2c:56:67:1d:c3:58:40:20:2e:d6:61:57:f5:
                    74:73:21:45:4b:ff:56:eb:75:ef:7f:96:fe:d2:91:
                    03:2c:28:a3:d4:d0:65:e2:ca:55:f9:2c:42:2a:c6:
                    8b:9a:ed:68:fc:6f:0c:89:07:37:77:08:57:cb:09:
                    cc:37:3f:b3:80:5e:ba:6f:98:ec:5c:63:b9:3f:76:
                    9b:1f:04:10:61:c3:6d:cc:4f:9d:2b:44:6e:24:ea:
                    06:69:6c:90:37:91:06:18:f3:5f:2c:97:6b:fc:a4:
                    de:f4:22:60:e6:3f:45:50:8e:71:69:64:41:06:8e:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:25:0B:AB:83:17:38:1E:78:AE:D7:A8:C9:A4:8D:A2:EB:C2:EE:5D
            X509v3 Authority Key Identifier:
                keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:41:86:72:60:39:cc:4c:56:de:70:a2:6f:2d:99:09:0f:2f:
         e6:1d:08:02:a0:df:45:91:b4:af:b2:be:18:11:17:b9:4f:2c:
         a6:9b:02:93:61:21:b1:ce:a9:ac:51:86:5e:5b:e1:46:df:e1:
         cd:93:b7:03:6f:a9:01:a4:ae:cc:4d:bd:67:e3:6c:28:95:c2:
         67:73:69:51:e7:ef:65:4c:b2:89:3e:90:77:ec:7b:67:01:5f:
         26:1b:cc:e0:b8:7f:dd:87:92:7b:23:fb:58:5d:cf:01:cc:8f:
         b2:ae:10:dc:ef:41:3e:c6:ad:3b:28:cf:5a:fd:ad:35:62:72:
         7c:08:a0:be:73:21:ed:03:e8:3d:c5:9e:c1:55:14:22:44:0b:
         4e:5c:02:e1:6b:7f:a9:da:7f:8e:3a:ed:53:05:5d:e9:43:cd:
         54:e7:1a:49:80:86:81:83:a2:a8:94:1c:e3:66:ab:46:d1:4a:
         ca:05:8a:7e:ac:60:2c:68:34:3f:7c:a1:92:77:f5:53:b0:34:
         93:30:5d:44:e3:aa:85:56:b6:d0:4e:e0:cc:50:50:dc:90:f9:
         04:6e:5c:ee:b2:15:a6:16:7a:40:34:61:fe:c4:f5:f3:ac:56:
         64:3e:fe:6f:7e:b3:07:19:99:db:ad:4d:60:8d:55:c0:3b:8f:
         01:52:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:28:57 2025 by rpki-client