Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File:                     HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier:          Etr5OOQ3qcfCs9PgcRBGDwbVNKCXf3I2gG/S3yaLpnU=
Subject key identifier:   7E:DC:59:DB:73:6A:6A:23:2D:80:3A:83:13:B7:ED:80:EC:88:88:FA
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer:       /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial:       01964F35B93FA29BDB8FC5EE6D261A6D88CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number:          10F6
Signing time:             Sat 19 Apr 2025 18:00:42 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:42 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:42 +0000
Files and hashes:         1: 1ffKjQocjrQNsazj1CAi9JjVS5M.roa (hash: LGq8PY1XybDfBXT9FGzMq8PfJwuGWsOSqjxZ40jc9hQ=)
                          2: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=)
                          3: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: YeGoChFnE2L82NhCFrwfPHDUR9OtRfs8lLFUocKrEQI=)
                          4: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=)
                          5: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=)
                          6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:b9:3f:a2:9b:db:8f:c5:ee:6d:26:1a:6d:88:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
        Validity
            Not Before: Apr 19 18:00:42 2025 GMT
            Not After : Apr 20 18:00:42 2025 GMT
        Subject: CN=7edc59db736a6a232d803a8313b7ed80ec8888fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:5b:d8:41:1d:ad:15:68:30:20:eb:64:21:
                    9b:18:28:d6:e3:b7:a1:50:30:ab:94:71:22:dd:fd:
                    01:9b:29:58:90:c1:a3:90:9a:60:55:1e:be:70:a8:
                    45:ac:67:b2:59:14:53:13:39:8a:38:9b:e6:29:a5:
                    9e:a9:ad:71:f6:25:af:e2:b8:34:dc:e9:30:4b:0f:
                    d7:44:bd:03:bb:89:04:9e:f1:d9:5f:3f:86:c1:78:
                    9f:73:50:f2:65:68:74:d6:67:28:d7:a2:7e:0d:e5:
                    e6:90:6c:32:07:58:76:cf:b8:5f:17:bf:24:8d:c8:
                    bb:0f:30:c4:1a:ef:d1:44:20:5a:df:f6:b7:79:9e:
                    04:34:17:ff:83:ab:91:7f:73:ef:60:ef:b2:5b:f4:
                    61:c3:a9:ff:40:2a:49:9a:7d:9f:ea:96:a6:a7:cb:
                    6d:3d:2f:22:3c:12:e5:57:54:7a:42:ba:56:0a:69:
                    3d:99:96:6d:d9:c1:16:97:fc:6d:44:43:49:3c:6e:
                    fd:f1:13:61:a9:e7:4d:02:dd:37:01:46:81:dc:44:
                    e1:57:ca:9d:9d:71:59:b3:32:49:ff:5b:71:a0:15:
                    39:76:d6:2c:a9:77:0f:d0:61:ee:03:9d:0c:f9:15:
                    7f:8e:b4:56:92:45:b6:15:44:84:ff:d1:54:29:70:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DC:59:DB:73:6A:6A:23:2D:80:3A:83:13:B7:ED:80:EC:88:88:FA
            X509v3 Authority Key Identifier:
                keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:53:7e:b9:18:9c:e6:49:03:5f:5e:56:ad:80:74:2b:5e:f1:
         d2:62:64:1c:8c:77:f2:ce:65:21:09:bd:f8:fd:7b:19:b3:86:
         03:54:3a:62:0d:fa:15:b5:99:92:18:fb:98:78:0d:85:7b:c4:
         67:40:7a:35:09:59:ca:d9:0c:61:1a:0a:6a:3e:cd:0e:13:1f:
         b2:a5:cb:b5:3f:49:0f:00:03:1a:e9:ff:10:6f:d8:bf:22:77:
         80:7e:07:5d:5f:a2:39:9d:8f:f9:3d:09:6c:da:8d:6d:0e:62:
         83:b2:81:08:8d:dc:b8:07:94:1b:68:7e:e0:7f:42:68:b9:fd:
         7d:f7:4f:b0:67:a7:7f:20:03:f5:37:a4:07:a0:c7:6b:f8:91:
         38:dc:1d:e3:e8:36:15:cf:b2:ce:6e:a7:f8:df:4e:35:e9:48:
         9f:b4:cd:97:22:57:27:c7:81:c4:f1:44:aa:47:20:49:94:2a:
         5e:85:89:15:90:d5:2d:1c:5b:8e:65:90:1d:26:0c:49:2c:56:
         ca:25:b3:6f:76:d7:a1:be:c3:ad:32:70:31:e4:4f:c2:e9:90:
         77:77:9c:12:33:d2:a2:0a:7a:fb:d3:99:de:68:92:f2:d5:96:
         11:6c:b5:82:6a:4e:b2:b0:42:21:a2:e3:3a:c3:ed:ee:6f:ab:
         52:a5:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:02 2025 by rpki-client