Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
File:                     Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json)
Hash identifier:          d/R1k1JIUv0ZvI/K6u+3W99BKZfDt0MqTvu0t3K0OPc=
Subject key identifier:   4B:09:41:60:61:E7:DF:4A:7A:09:26:01:D5:BE:E6:80:46:77:85:1E
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Certificate issuer:       /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial:       019746D4970D57BEDA9EA7B84405F02FB849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
Manifest number:          150D
Signing time:             Fri 06 Jun 2025 20:00:26 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:26 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:26 +0000
Files and hashes:         1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: mgAOHt259zqImtfYoHvrHm6KeskOJbnv9CevjqhZbds=)
                          2: UdTz9ESnCBONhFhPnKTJSPAPKew.roa (hash: 0eKPRYHWi1Fk+s60KVEthvqfye7EFF2oFsVLARt647E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:97:0d:57:be:da:9e:a7:b8:44:05:f0:2f:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
        Validity
            Not Before: Jun  6 20:00:26 2025 GMT
            Not After : Jun  7 20:00:26 2025 GMT
        Subject: CN=4b09416061e7df4a7a092601d5bee6804677851e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:40:90:11:ea:a0:1e:ed:2b:a5:62:64:d4:
                    db:a5:f3:52:09:ac:4f:a7:49:2c:cb:2b:ca:cf:a4:
                    7b:44:35:f0:2d:82:3c:68:d9:d9:0e:7d:02:c1:d6:
                    69:66:b3:ac:96:0b:2d:bd:6f:62:68:ba:36:13:00:
                    10:ec:1d:3e:ce:e5:c5:16:8d:9c:5c:19:bd:46:67:
                    00:0b:0c:13:0a:14:5c:0f:f6:28:17:81:20:bc:a9:
                    46:0c:eb:f8:da:d5:71:ba:11:97:d1:a4:e3:d1:60:
                    de:68:d0:b7:f4:66:6b:c0:f0:e5:7b:b1:4e:bf:5e:
                    9c:98:c8:c2:f5:e1:5e:82:61:21:c6:7e:a8:19:be:
                    49:df:5d:43:20:7d:de:c0:53:a5:07:e3:b7:ce:86:
                    5c:71:03:d7:ae:cc:cb:dc:78:e8:55:cd:5d:a5:a6:
                    ee:0c:ef:f0:89:3b:28:ca:e9:4a:de:03:3e:c5:a5:
                    9f:87:ea:28:a8:d3:70:a3:fd:37:20:11:ad:b3:f6:
                    b3:dd:58:3a:e2:63:76:6a:27:43:43:64:ea:0e:b6:
                    0e:39:c7:04:e1:7c:58:93:f5:b4:35:e5:83:0b:9b:
                    45:0e:62:2b:ba:45:45:c6:56:c5:7f:ae:ed:32:e4:
                    b3:f1:50:22:11:0c:6e:64:06:e2:7d:51:42:24:fe:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:41:60:61:E7:DF:4A:7A:09:26:01:D5:BE:E6:80:46:77:85:1E
            X509v3 Authority Key Identifier:
                keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:a0:f9:ab:7b:1e:43:a1:ed:f6:66:49:93:4f:9c:df:ac:
         96:41:f6:44:f1:5c:2b:3a:af:bd:04:4d:fe:4e:f2:7e:61:c2:
         78:5b:6b:95:03:2d:b0:8e:55:02:97:b0:bd:b1:fc:6f:cc:de:
         e2:4c:16:76:41:84:8c:06:a5:64:7a:6d:1d:ba:05:fe:48:cc:
         c3:56:b6:3f:cc:78:1d:c2:99:dd:fc:43:cb:2d:d0:fd:a9:5e:
         93:57:9e:61:30:84:87:ab:fb:0f:cd:66:22:0b:47:29:dc:59:
         98:b9:e6:3d:4e:e2:95:41:b9:3b:82:4b:0a:ea:22:65:a8:d4:
         ab:89:a0:01:99:ca:db:5f:7d:96:90:fb:97:de:bf:14:5f:45:
         fa:43:4f:89:d0:6b:12:bf:e0:2c:91:2a:3c:66:c0:89:5b:5d:
         9c:9d:a3:c4:a9:d5:6f:31:0e:2e:14:7a:5f:41:ac:ce:32:82:
         98:7b:e8:6e:8c:3a:87:65:d1:f9:01:3b:68:66:e6:a7:b0:af:
         e5:e2:35:f0:e0:ff:42:b9:bb:16:94:19:fb:0f:b0:77:c4:50:
         01:80:bf:46:36:82:f5:e4:7d:bd:e2:04:60:b1:a3:fa:6e:8d:
         3b:fa:60:26:89:0c:5b:6a:81:33:36:d8:88:51:82:22:0d:91:
         2d:5e:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:30 2025 by rpki-client