Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          jwTId0q4K3b7m4QHHIqwe4CQ7g0r7tM3XXRRrI0a+Bg=
Subject key identifier:   B2:7C:6E:1F:4E:47:44:E0:D7:36:F2:09:34:C7:DF:B8:3E:E5:4D:84
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       01964BC6A91A874B344F9E2A89C09382FAC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1510
Signing time:             Sat 19 Apr 2025 02:00:32 +0000
Manifest this update:     Sat 19 Apr 2025 02:00:32 +0000
Manifest next update:     Sun 20 Apr 2025 02:00:32 +0000
Files and hashes:         1: Co2reX9WjBlmenpbYdQoA_FU6Yg.roa (hash: q2QsExP+FdyReITqdolcGkEpneACU1Mny9QFEjumzVA=)
                          2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=)
                          3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: 20j21DsymmSYL665slc0EHNYSlch1mvkhbjpluKjO7k=)
                          4: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=)
                          5: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:c6:a9:1a:87:4b:34:4f:9e:2a:89:c0:93:82:fa:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Apr 19 02:00:32 2025 GMT
            Not After : Apr 20 02:00:32 2025 GMT
        Subject: CN=b27c6e1f4e4744e0d736f20934c7dfb83ee54d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:8f:17:2c:6b:46:7b:41:4f:68:c4:1e:71:
                    f0:48:dc:a4:12:61:93:88:d1:d9:4c:81:20:1f:a2:
                    55:56:f2:07:67:4f:71:d1:47:58:fb:cb:86:a2:89:
                    87:36:17:b0:df:a5:ea:83:31:c3:32:33:bd:72:de:
                    3d:99:0f:53:21:c1:76:19:b4:d0:94:a2:fd:d3:ea:
                    ec:2c:d8:75:67:5e:29:e3:82:c6:2f:8a:21:60:7a:
                    9d:f4:dd:b9:f0:a8:70:cd:45:65:fe:6a:ac:14:70:
                    7b:9f:c9:e3:64:da:f8:96:31:66:c0:87:0c:20:30:
                    56:d6:a8:40:42:34:97:2a:e1:02:78:fe:be:b3:78:
                    fb:e4:52:5e:37:8e:fd:e3:db:24:b7:13:6e:b6:f5:
                    60:66:f3:2d:52:60:9d:8e:0e:a1:20:3f:85:01:fd:
                    d6:ad:07:9d:01:6a:f8:d9:45:fc:e1:13:17:18:51:
                    33:c1:ea:14:f7:14:96:d3:bb:33:db:fe:d8:35:40:
                    c6:ff:3a:ae:ae:58:8e:0a:10:0e:a4:94:34:8a:a5:
                    56:36:4c:5e:f0:e7:9a:f3:05:b0:3d:79:26:f5:7d:
                    ea:d3:5c:de:a3:ab:3a:a6:72:eb:cd:93:70:ce:d2:
                    d9:11:4c:fc:ac:70:94:16:04:fd:03:b8:f2:3d:8d:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:6E:1F:4E:47:44:E0:D7:36:F2:09:34:C7:DF:B8:3E:E5:4D:84
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:c6:ae:aa:43:a1:0e:f3:5e:b7:44:20:a8:07:31:50:ca:
         63:24:15:9a:30:70:a3:60:7e:53:12:9d:16:89:98:3f:96:33:
         0d:31:19:86:1c:e4:94:bb:74:f7:cb:dc:49:cd:dd:6c:7c:27:
         12:19:ea:f0:94:ab:c5:2c:1b:5d:ef:2d:ee:2b:1b:88:c0:25:
         07:22:6b:09:48:a2:4a:27:82:eb:16:5a:30:f2:ab:57:0f:14:
         12:de:84:e5:fe:a0:17:22:6e:c4:0a:bf:2a:fa:fc:87:2c:49:
         58:27:ba:46:06:be:fe:03:76:27:1e:fa:8c:ed:6e:2f:d8:c7:
         6d:f2:49:3f:1d:68:69:01:8b:64:d0:f5:c3:11:4c:dc:bd:2a:
         67:49:43:38:0d:04:c8:92:cb:b4:31:c9:d3:16:78:0e:22:fd:
         1b:f6:95:e5:e9:5b:49:e8:ab:cd:11:72:00:d5:16:34:24:dd:
         ce:da:e0:d6:42:1a:1b:a1:9d:98:51:2b:f6:91:5d:46:cf:f8:
         9e:6f:f1:98:9e:f6:30:95:f8:43:2b:b5:d7:79:e5:33:57:93:
         e9:0c:82:e1:4b:3a:e3:e4:e3:4a:e3:da:d4:27:af:30:3e:dd:
         c2:22:3a:0a:65:f2:30:3f:83:57:b7:a8:6e:94:c5:8f:54:6f:
         40:98:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:11:54 2025 by rpki-client