Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          2c7s6Je/+PZ2LirzbJxoO3aytg/h910AakoEEamuNvI=
Subject key identifier:   FF:3D:BB:0D:87:F1:14:66:CC:D5:61:69:EA:43:5E:45:C5:C2:C9:C8
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       019606781EACAC95B89F877037AFF3F70A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0A7E
Signing time:             Sat 05 Apr 2025 15:00:57 +0000
Manifest this update:     Sat 05 Apr 2025 15:00:57 +0000
Manifest next update:     Sun 06 Apr 2025 15:00:57 +0000
Files and hashes:         1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
                          2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: pMyINW7hf5M4QuqoXYnR0fqKFLYyc9zAIZAOXKgxqaU=)
                          3: dansMIWsXXpDaSAy_aJZzzQS8h0.roa (hash: iHe7NlIYDFrPBEBVHgOcNEN5f7UZr+p1lUL5elNQd68=)
                          4: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
                          5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
                          6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
                          7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:06:78:1e:ac:ac:95:b8:9f:87:70:37:af:f3:f7:0a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Apr  5 15:00:57 2025 GMT
            Not After : Apr  6 15:00:57 2025 GMT
        Subject: CN=ff3dbb0d87f11466ccd56169ea435e45c5c2c9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:c2:23:e4:16:ee:1a:2c:61:84:17:f4:7a:
                    c0:95:0c:58:19:87:4f:d0:a7:7b:a9:2a:f5:36:41:
                    cb:5a:17:82:7d:f1:e5:98:42:25:71:8e:21:4d:3c:
                    bf:2c:3c:ff:97:a2:5d:a5:49:c8:cf:86:d2:dd:e5:
                    b6:3c:ef:12:e4:5e:7d:52:d8:68:bf:91:19:e2:0c:
                    b4:32:58:17:78:66:97:b7:7a:24:86:7c:a4:f0:c4:
                    dd:4e:1d:af:b6:db:5b:a4:36:8a:11:68:2c:b5:c6:
                    bc:58:70:dc:5d:17:40:1c:ca:9a:69:2f:47:3c:33:
                    59:f0:d8:ee:7b:f4:30:cf:c4:20:7b:ec:90:8f:3f:
                    8b:c7:9b:d7:4c:f4:a8:9d:50:23:11:53:af:e2:2e:
                    a8:24:27:ef:ba:36:98:73:84:92:df:d3:54:9f:19:
                    a7:16:0c:92:65:ff:4b:2e:5a:bb:c1:c4:fe:b6:af:
                    04:c9:94:9d:8e:5d:3c:b4:b1:f6:4b:d8:e8:15:1b:
                    25:57:3d:dd:7b:a3:35:9d:bc:94:2a:3a:49:7b:7c:
                    dc:ce:55:a1:4c:9d:78:e0:98:e4:50:d2:f8:1f:3c:
                    2c:29:3a:fe:da:dd:a1:b7:4b:81:cd:28:cb:c8:0a:
                    22:73:ea:28:e6:26:01:d0:3f:de:c3:c8:d9:65:bf:
                    d5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3D:BB:0D:87:F1:14:66:CC:D5:61:69:EA:43:5E:45:C5:C2:C9:C8
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:c4:62:65:8f:03:09:6b:62:a9:b6:fd:ee:80:51:02:e0:
         a0:43:41:86:b3:e2:d9:2d:8b:76:c5:01:03:6d:fa:5c:be:27:
         87:ca:f2:5c:3e:5a:71:f2:6c:7f:65:2b:c0:66:31:3b:58:81:
         cc:a2:36:d9:01:7c:b2:57:20:8a:62:00:8a:59:ee:2d:29:84:
         30:4d:7b:5c:f7:8a:f8:79:c6:7b:a8:dc:98:03:b7:da:1b:77:
         ac:bd:ad:d6:21:63:a1:ef:66:64:ea:fd:fa:03:3f:5d:08:ae:
         c8:66:e4:04:df:88:55:c3:4c:22:15:ef:3e:48:bb:94:88:ff:
         04:7c:2c:cc:77:1a:62:45:33:57:5a:4b:b1:72:23:ff:81:66:
         90:14:de:3a:c3:d3:e2:22:cd:84:a5:97:51:8e:fe:49:17:f3:
         7a:19:f5:0d:bc:ee:0c:9c:8f:ac:b3:37:9b:4d:47:11:f9:16:
         d0:0a:0b:3e:2c:0f:c7:9e:dd:e0:a9:cf:7c:36:fc:1d:63:db:
         6b:cf:9f:65:f7:5d:5c:a2:a2:3f:b0:17:75:3c:b9:41:64:5e:
         2a:a1:38:48:e7:86:ab:dc:31:5b:b0:38:19:65:b4:eb:db:c0:
         63:98:c0:0c:f6:c1:ce:b9:1f:ee:9e:bf:31:55:0d:44:be:ee:
         f8:61:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:05:52 2025 by rpki-client