Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File:                     H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier:          huMVZcNkmMJqY6/kQZsT5+8lE7L31z3BdwDNcqHk8Sw=
Subject key identifier:   BB:2C:2D:A1:CC:FA:20:46:50:00:FD:40:3C:46:AA:E6:69:58:06:B7
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer:       /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial:       019764DEF3F8AD7053EF232C55EDB2E2D213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number:          0A8F
Signing time:             Thu 12 Jun 2025 16:00:22 +0000
Manifest this update:     Thu 12 Jun 2025 16:00:22 +0000
Manifest next update:     Fri 13 Jun 2025 16:00:22 +0000
Files and hashes:         1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: Xyd7gnn88nzlpujqvsnrjJB/ECtQDg0Iw9+1E+T1QMA=)
                          2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:de:f3:f8:ad:70:53:ef:23:2c:55:ed:b2:e2:d2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
        Validity
            Not Before: Jun 12 16:00:22 2025 GMT
            Not After : Jun 13 16:00:22 2025 GMT
        Subject: CN=bb2c2da1ccfa20465000fd403c46aae6695806b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:5b:66:19:2e:d2:5e:fa:9b:9c:42:c5:1c:
                    97:de:db:9d:62:d3:a7:58:6a:7c:5e:2b:f2:57:58:
                    47:57:00:da:84:ee:58:47:b0:28:38:96:35:7f:50:
                    4c:56:ce:d8:bd:7a:7a:96:87:4d:ad:24:ca:8b:81:
                    93:4d:f0:a9:4c:d5:c8:24:76:d9:cc:48:92:ff:d6:
                    e8:55:ed:4a:fa:9d:b1:3c:44:ec:51:9c:5e:6d:0b:
                    42:a4:c2:02:b3:04:fa:5f:84:65:68:f5:f3:35:fc:
                    56:4a:69:c0:f7:60:ee:d3:fe:88:0d:9b:15:5c:0a:
                    e8:3e:fd:29:b1:5e:ef:fc:24:26:ab:a1:16:8c:c5:
                    15:92:3d:d0:14:e1:60:d3:21:3e:46:b2:4e:1e:6a:
                    8d:58:3f:15:d4:4f:b8:5a:7d:0f:71:36:1c:dc:2a:
                    83:dc:93:3f:06:0b:07:e8:18:00:dd:ad:58:90:d0:
                    88:94:3a:b2:75:65:23:10:fd:16:5e:92:c4:a1:64:
                    dd:5e:3d:49:36:89:7f:34:e0:05:83:ca:1d:06:87:
                    8f:93:81:7b:32:6c:2f:c6:4b:4c:b8:11:30:49:88:
                    4b:6d:e0:fc:eb:80:d8:44:14:9f:66:f3:69:a2:f4:
                    b6:5f:a2:d3:27:80:86:d8:0f:78:c0:59:81:f7:73:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2C:2D:A1:CC:FA:20:46:50:00:FD:40:3C:46:AA:E6:69:58:06:B7
            X509v3 Authority Key Identifier:
                keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f0:90:5d:33:59:a3:25:b0:94:9a:ff:5e:79:a9:58:f2:30:
         94:64:4f:4a:26:40:f9:a9:9a:ad:6f:f4:d6:45:10:dc:0a:29:
         12:98:9b:1e:86:87:c9:61:a8:4d:69:10:89:88:17:4a:03:51:
         7a:49:15:12:16:a3:0c:0b:52:1a:17:80:d3:74:30:47:1f:50:
         d0:14:5b:9f:fa:30:33:d0:ad:b0:0c:ad:f6:39:7a:c2:36:ec:
         ba:e6:04:8b:96:21:86:84:a2:a1:e2:98:0c:5a:29:67:6e:6b:
         46:01:7d:a7:00:21:1f:9d:52:47:4f:e9:7a:d4:cb:0b:dc:88:
         39:21:11:78:4a:4c:a3:4d:86:88:6e:15:2e:c3:39:a4:4f:f3:
         25:0b:2a:57:27:8e:ba:44:2b:14:af:f7:36:6c:c8:79:bc:ee:
         7b:37:c6:0b:3f:a3:cb:2a:f6:8a:ad:03:a6:05:bd:b3:ec:ad:
         7e:98:07:f3:12:5c:49:b5:51:d1:65:d0:63:44:1f:d8:13:eb:
         1f:40:fa:da:a7:f4:78:74:29:f5:b6:07:37:f7:a3:ac:dd:e4:
         46:70:6f:63:f0:67:57:b0:7d:42:59:ee:58:9d:c7:99:bf:9e:
         0e:c7:3b:20:50:28:fc:46:15:16:40:ca:5d:23:d2:b9:4e:e8:
         ec:88:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:16:47 2025 by rpki-client