Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File:                     hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier:          88Mog7RH7j8iGdA4ae56USoB9qdIgHRQYSbWLC9wVUE=
Subject key identifier:   AB:D7:BA:DB:BD:77:8E:6A:34:43:DA:30:68:70:55:53:2E:0D:FD:78
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer:       /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial:       01965C15898D9C88896FE8096C2EF6BA34C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number:          05FB
Signing time:             Tue 22 Apr 2025 06:00:37 +0000
Manifest this update:     Tue 22 Apr 2025 06:00:37 +0000
Manifest next update:     Wed 23 Apr 2025 06:00:37 +0000
Files and hashes:         1: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: Z0runSg02o+U5y0oo8Wks4VBq3fR0cfumS4ED1I7+/M=)
                          2: iVxulShReTYBVaVMHOSAPgJMX4w.roa (hash: K1U4ekJDUmOT/6sNVV1rdRQsFS3D9+kf/By0ijYc4Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:15:89:8d:9c:88:89:6f:e8:09:6c:2e:f6:ba:34:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
        Validity
            Not Before: Apr 22 06:00:37 2025 GMT
            Not After : Apr 23 06:00:37 2025 GMT
        Subject: CN=abd7badbbd778e6a3443da30687055532e0dfd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:b6:d0:cb:62:4f:18:4b:78:36:23:e6:69:
                    ee:95:51:bc:19:5c:a9:dd:a5:8e:f8:05:04:5a:8c:
                    c5:90:ad:c7:e3:37:6c:9a:73:fe:eb:a0:3b:e8:81:
                    8b:ad:9d:3f:dd:7f:c9:db:23:47:ae:0d:fc:73:03:
                    d7:7c:f5:3d:c5:37:3e:21:f6:59:78:db:66:3a:c0:
                    f6:47:34:7a:c2:74:7e:c8:25:e7:8e:32:4e:36:9a:
                    f8:fc:d9:2b:f6:4e:ed:43:78:0a:b2:81:30:e7:e7:
                    53:13:e9:49:43:3e:57:85:2f:e4:5b:a4:8b:1e:5d:
                    b6:7f:4f:72:e8:83:af:56:9d:f5:2d:b2:70:1d:2b:
                    89:97:81:5b:f4:f4:26:c8:03:17:de:d2:56:2f:0c:
                    de:b4:7e:12:18:8b:81:be:98:b0:2b:8d:5d:13:f1:
                    1e:f5:9e:03:ba:e2:51:f2:d4:04:bb:a2:ba:35:5e:
                    f6:5d:30:43:c3:68:bf:36:ba:b6:b7:91:59:9e:5f:
                    97:e4:4c:f9:a9:37:fa:72:46:1c:f9:3c:0f:bc:c6:
                    dc:d5:76:13:70:c6:5b:9c:d5:5a:3f:31:46:55:44:
                    1b:2c:e4:6b:d9:cb:dd:f2:74:e6:e7:83:3d:a0:4c:
                    c2:fe:11:bc:a0:45:19:19:b2:07:de:f1:37:29:f0:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D7:BA:DB:BD:77:8E:6A:34:43:DA:30:68:70:55:53:2E:0D:FD:78
            X509v3 Authority Key Identifier:
                keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:62:f5:be:88:5e:46:d8:27:40:66:6d:ee:53:09:52:0f:
         1c:aa:1a:58:7f:05:5a:85:1b:db:74:49:98:c0:fb:b5:57:73:
         ca:d9:86:79:1e:d8:3b:08:ec:07:e5:22:1f:c5:bc:65:c9:56:
         4b:28:96:ed:86:84:67:7f:07:12:32:eb:8f:fd:ad:41:36:94:
         79:69:4a:be:74:74:57:8f:de:fb:27:9c:92:03:13:95:3e:54:
         63:a9:7c:81:9c:ae:bf:79:ec:b7:97:37:bf:ea:ba:bd:a7:df:
         36:06:7a:3b:c0:fb:2b:29:9e:f5:eb:ed:9d:92:71:4f:a1:43:
         50:3b:74:9b:26:97:71:8d:1e:ad:d0:05:9d:ef:53:8f:93:9a:
         c4:e8:36:1f:9e:4f:34:aa:2d:4a:3c:77:f0:eb:32:ed:a1:86:
         b3:3d:4f:c3:48:7e:18:02:07:48:11:6f:7d:20:c4:7d:f8:12:
         40:a0:05:2c:2f:97:42:1c:e3:40:3a:21:6f:f1:26:56:11:c7:
         d5:3b:4a:bb:ee:f6:1e:3e:df:65:fc:d4:94:9e:c7:4a:6e:63:
         7a:37:1c:38:1c:0b:37:06:ab:1d:e9:90:b6:90:34:e2:dc:ac:
         81:19:83:af:a9:2f:24:12:65:a1:12:92:bd:a8:b6:e4:7b:ef:
         c1:40:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:46 2025 by rpki-client