Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File:                     HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier:          9OstDLF9vpT4F63COW6PsT9UoA2PjucxWker5J748u4=
Subject key identifier:   38:56:9B:8E:66:E8:67:C7:39:ED:60:44:87:5E:B3:A2:03:2B:01:7A
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer:       /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial:       01974A7ACE5EB8487CD61EB579A67762D8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number:          0ED9
Signing time:             Sat 07 Jun 2025 13:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:51 +0000
Files and hashes:         1: 5pynZFAsqvPIGH5-PXLgAGK58mA.roa (hash: fBc4s8OOq/rbaknM5GE/ZQ9xYBiAMIuTqJlNTn46D0Y=)
                          2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: y5ls74+1zlNCx4mIY7Qh5++xbHDWyWWySY3HD1CXwU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:ce:5e:b8:48:7c:d6:1e:b5:79:a6:77:62:d8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
        Validity
            Not Before: Jun  7 13:00:51 2025 GMT
            Not After : Jun  8 13:00:51 2025 GMT
        Subject: CN=38569b8e66e867c739ed6044875eb3a2032b017a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:a0:61:e9:a7:75:b0:50:c5:28:17:3f:e5:
                    ee:64:b6:34:c0:13:5d:0b:e8:de:b6:15:d9:6d:01:
                    96:f9:ac:1d:05:3e:c7:57:25:29:2a:49:bc:00:34:
                    e2:42:09:31:64:d5:f5:ef:47:3e:1e:2d:bd:25:f2:
                    2c:76:a2:12:c5:5d:bf:b8:7a:cb:c3:05:b1:27:42:
                    75:4d:f2:40:1c:ff:29:ca:ed:c6:e6:3e:2b:c4:a8:
                    8f:2b:44:6e:27:bc:95:1b:e4:df:15:24:25:42:ed:
                    aa:72:1a:0b:21:12:c8:dc:9a:1d:03:3b:6f:6b:2b:
                    ce:65:5c:b9:d3:92:75:be:f3:ca:01:6f:2e:9f:94:
                    9f:94:89:9b:8b:dd:22:a7:ba:94:62:a9:7c:5e:0e:
                    32:21:55:88:9f:89:f5:57:cf:7d:63:52:77:cc:f6:
                    8e:1e:14:e4:ef:0a:35:0f:37:0b:19:cb:a2:10:63:
                    84:5b:fb:36:c1:41:c2:61:ea:a5:a6:c1:f1:e2:d7:
                    df:a8:df:9e:41:48:e2:87:00:0a:fd:56:0b:c3:cc:
                    9c:d9:09:1c:3c:f3:9e:f0:2f:ad:d4:15:f8:42:0b:
                    ec:02:2e:5f:a6:fe:30:05:9a:3b:47:fe:56:39:38:
                    b0:e8:e0:ad:e5:be:6e:3a:2e:03:fc:ab:80:b7:7c:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:9B:8E:66:E8:67:C7:39:ED:60:44:87:5E:B3:A2:03:2B:01:7A
            X509v3 Authority Key Identifier:
                keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c1:69:b9:fd:c7:4d:83:ed:7a:2a:e2:5c:f0:d5:9f:e3:ec:
         62:9d:ea:ef:31:b9:9d:98:07:50:5d:1c:49:c1:72:3e:9c:d5:
         00:5a:07:9e:e1:44:25:c3:42:38:dc:f1:bd:df:b2:48:d1:a3:
         3f:ab:0b:b7:2e:95:80:34:f6:45:0b:65:1b:ad:a5:7c:bf:be:
         49:42:1f:88:9a:76:23:82:a5:9a:38:8f:d9:9b:db:7b:72:72:
         bd:33:34:db:0a:5e:9b:0d:04:14:3c:93:fb:70:11:97:3d:e0:
         ff:f9:cb:90:e3:8b:23:9b:f6:60:9a:ff:94:ff:ff:a4:c9:49:
         18:97:20:4e:bf:88:56:5a:54:5e:d4:10:19:fe:6f:21:1d:97:
         ba:24:c2:a8:60:98:79:69:94:2c:d6:40:2b:20:50:09:2c:de:
         fa:bb:d0:ca:bc:b6:e6:c8:84:b6:b2:dd:a7:7f:69:e7:42:8b:
         4c:ca:7e:09:b6:a3:40:a1:35:dd:49:08:d0:bc:4a:55:ad:6b:
         a4:78:fd:44:41:9a:63:57:84:4a:98:f3:b6:82:a8:a2:2e:78:
         41:70:69:49:13:ca:57:99:51:ee:24:f2:76:73:22:91:10:c9:
         9f:33:2c:e6:65:94:fb:1a:ff:d9:92:e2:7f:95:ae:ee:30:b6:
         07:3c:5c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:49 2025 by rpki-client