Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File:                     hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier:          +D/JpAIdxpHhXZUdiRYq4Msk1J3+hc+QkCZ8YezD/a0=
Subject key identifier:   9A:23:85:61:96:94:B6:6E:0B:60:23:21:CF:8E:5B:53:52:E1:42:52
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer:       /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial:       0196018911B2373126F9960EC99BE737278A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number:          0E62
Signing time:             Fri 04 Apr 2025 16:01:22 +0000
Manifest this update:     Fri 04 Apr 2025 16:01:22 +0000
Manifest next update:     Sat 05 Apr 2025 16:01:22 +0000
Files and hashes:         1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: kRXRkcpES1m/Eg/3BeNCNbJtzA979ciAjPgOyBtsG8k=)
                          2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:01:89:11:b2:37:31:26:f9:96:0e:c9:9b:e7:37:27:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
        Validity
            Not Before: Apr  4 16:01:22 2025 GMT
            Not After : Apr  5 16:01:22 2025 GMT
        Subject: CN=9a2385619694b66e0b602321cf8e5b5352e14252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:26:0e:9b:8f:b2:c8:54:89:39:a1:44:7a:
                    19:5f:83:a7:bc:df:8a:26:2b:07:2c:40:18:47:39:
                    47:83:b4:72:5c:08:cc:13:7b:50:5e:22:04:77:d3:
                    b8:55:6b:bd:c5:c0:81:ea:7e:7b:28:f9:c1:34:e9:
                    ef:b3:53:26:b9:16:08:79:cf:20:fd:a2:18:65:03:
                    dd:11:c6:7a:1d:3e:d5:d9:09:36:e4:aa:97:20:a9:
                    bf:ff:55:bb:4f:4b:dd:ab:92:b2:ca:38:8b:29:36:
                    78:62:e2:4a:09:4b:11:6b:47:de:04:69:cd:a9:2c:
                    f4:8f:0e:b9:eb:26:ac:40:f5:46:99:a8:eb:f0:e8:
                    ad:09:8e:d7:ee:47:63:b2:f0:94:2a:c4:cc:24:72:
                    1a:3e:63:97:58:0d:e5:70:eb:bf:ab:ac:3b:cf:6d:
                    c4:67:fb:39:cd:1d:f1:4a:1f:5e:ee:35:cf:6e:29:
                    07:5a:6d:c8:03:53:04:2e:4b:6a:1d:66:18:2c:a3:
                    32:1a:3a:53:5c:49:f0:39:9c:6a:94:e3:8e:81:63:
                    78:ef:70:40:ad:dd:1a:46:3c:a8:c6:e4:29:26:d9:
                    c4:18:cc:f0:15:35:d4:ec:2a:03:61:f9:cb:f2:d4:
                    24:a2:d9:0a:53:a7:6c:b5:de:47:8c:d5:1a:ac:0d:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:23:85:61:96:94:B6:6E:0B:60:23:21:CF:8E:5B:53:52:E1:42:52
            X509v3 Authority Key Identifier:
                keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fa:71:d3:d7:74:88:b5:e4:85:c1:62:00:fe:1d:90:03:d9:
         4c:8d:64:d6:6c:37:0e:d4:d6:10:af:8b:05:04:51:97:4e:02:
         b7:64:77:52:6b:3c:07:75:8a:70:6e:fb:28:8f:45:f6:12:b4:
         d5:24:46:2e:f0:eb:3b:0c:bc:20:9c:17:0d:49:28:95:cd:6d:
         a4:2d:4a:8f:aa:ed:ce:24:06:b2:7e:1f:c0:f0:aa:ff:a5:e7:
         82:09:a1:10:d0:5e:05:3a:1a:30:bc:46:c0:eb:ec:21:c8:11:
         16:11:81:f6:aa:5e:c8:eb:3d:b1:94:c7:87:18:50:0b:a1:3c:
         cc:45:d7:2d:4e:33:d5:8e:c6:39:4e:ea:38:8a:ed:69:ca:ce:
         60:67:d5:3d:14:56:4e:94:a4:33:ce:70:18:00:a4:e7:da:53:
         72:52:b5:af:c7:e6:3b:02:6e:61:42:0d:b4:00:ff:40:fa:6e:
         ed:be:2b:0e:03:6e:81:24:32:fb:12:e2:38:2c:dc:c0:94:c3:
         0e:05:8e:c1:c9:75:a2:24:a5:99:9c:b2:99:39:97:fb:b5:15:
         04:37:32:13:a8:ff:1b:61:fe:80:db:81:3b:fd:fc:2d:92:b5:
         45:99:2d:c5:dc:7a:e1:23:2f:ec:ae:a2:19:da:51:d3:3a:ee:
         83:07:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:11 2025 by rpki-client