Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File:                     hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier:          y6UHSDVQ4vW2vFbmLrZ1KyRo4RWtaD9lyAi79NiE0Rc=
Subject key identifier:   1B:1A:A5:52:5E:52:B6:83:E4:E9:D7:54:3C:35:48:BD:31:9C:65:BB
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer:       /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial:       019759EE3F48501B8FCE35706DF37FF00AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number:          064A
Signing time:             Tue 10 Jun 2025 13:01:15 +0000
Manifest this update:     Tue 10 Jun 2025 13:01:15 +0000
Manifest next update:     Wed 11 Jun 2025 13:01:15 +0000
Files and hashes:         1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=)
                          2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: lnDnOoij7xijRmjh+JhOUzFubugJDx5scW6JTATWsbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ee:3f:48:50:1b:8f:ce:35:70:6d:f3:7f:f0:0a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
        Validity
            Not Before: Jun 10 13:01:15 2025 GMT
            Not After : Jun 11 13:01:15 2025 GMT
        Subject: CN=1b1aa5525e52b683e4e9d7543c3548bd319c65bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:6e:e9:24:14:aa:07:65:a7:4e:30:6d:3f:
                    04:c8:cf:05:f8:e8:52:b0:76:8d:54:d6:9a:fb:9c:
                    a2:54:70:e2:a8:c7:99:87:4e:b7:0f:6e:54:c5:ab:
                    d5:b5:f1:59:4e:14:2e:ef:9e:b5:f2:7e:29:7c:e2:
                    95:0e:87:40:9c:12:e2:15:e9:ed:1e:1b:03:3c:91:
                    b1:fe:d5:07:c8:4c:90:45:77:e5:d1:56:e0:37:4a:
                    fc:64:ec:21:5b:38:84:18:85:68:ac:b0:95:9b:f0:
                    a0:96:67:b3:81:7f:73:c9:15:b8:df:d6:83:49:36:
                    27:96:30:81:d8:21:4a:54:80:1b:cf:4a:ed:c4:84:
                    69:da:4e:54:f9:cc:dd:46:9e:4f:84:87:2f:bf:3e:
                    fe:f0:6f:fd:e7:4a:90:3a:7c:86:d5:7a:6f:c1:0d:
                    92:a4:22:10:85:d0:32:b3:6d:df:17:a2:fe:e8:05:
                    e0:80:c0:23:dc:6a:8e:4c:64:b0:46:d0:e3:10:1e:
                    45:34:ad:5f:65:73:20:88:dd:fe:02:05:ce:64:72:
                    ca:79:35:3d:95:ad:e3:cc:c7:8e:db:de:98:ea:cb:
                    25:2c:d4:0f:1e:0c:9b:2f:99:7e:0c:12:72:b9:fd:
                    a4:dd:e0:28:47:95:cd:fd:3a:8e:6c:5b:9c:b7:a3:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:A5:52:5E:52:B6:83:E4:E9:D7:54:3C:35:48:BD:31:9C:65:BB
            X509v3 Authority Key Identifier:
                keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:51:fd:a8:e5:f9:df:2f:dd:49:e8:1e:7d:ae:4d:fe:c6:
         47:2a:b7:87:a1:bb:2b:d5:bd:f6:72:b8:3e:c2:d6:ae:0c:e2:
         37:36:31:f5:63:f5:07:6e:69:6b:ed:0f:a5:c0:55:96:dd:a3:
         46:9d:7c:e9:02:27:7e:bf:15:19:ec:6a:72:2b:c9:39:93:14:
         49:d6:18:9e:8b:f8:54:67:b9:d2:58:b2:b9:d2:34:0f:35:ff:
         1e:cd:2e:e8:31:04:2c:43:5e:fe:64:c4:5e:74:2c:de:bd:bc:
         f6:64:02:6d:5b:0c:fd:7d:2b:c3:e5:ce:e2:27:9b:12:ec:75:
         fa:09:d6:26:cb:9e:e7:5e:71:35:0d:c2:85:e3:68:4d:ff:7d:
         ea:f6:71:9e:94:e7:94:56:44:2e:62:d6:b6:7d:f9:03:b2:51:
         c1:d5:18:f5:cc:26:91:51:89:f3:12:ee:79:2d:92:db:96:fe:
         91:65:21:46:d2:16:c9:f5:dd:4d:f7:15:1f:a3:7f:82:f4:10:
         0d:9a:a7:2e:78:f5:e2:2e:83:88:33:da:4a:3f:74:6f:37:ea:
         3d:6c:f4:ee:eb:2e:69:21:c0:4e:96:a2:98:81:61:c2:6f:b5:
         d6:bb:8d:d6:02:03:16:09:2d:06:c5:66:e3:e5:33:bf:ff:10:
         48:30:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:51:42 2025 by rpki-client