Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File:                     hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier:          OCS2AcByf7P9P6QTQToNUba4p+OQV3lSBpitBYWt00Y=
Subject key identifier:   53:70:82:BA:30:7B:0B:CD:00:11:4C:09:E5:53:AE:84:D3:D4:AD:04
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer:       /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial:       01958BBB47E50D036C10F2B93A7FCC677EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number:          0B4C
Signing time:             Wed 12 Mar 2025 19:01:01 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:01 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:01 +0000
Files and hashes:         1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
                          2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: no4xrhmN+dixfH81g+Rac+xdpIZLWFX98PPgONbZ/hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:47:e5:0d:03:6c:10:f2:b9:3a:7f:cc:67:7e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
        Validity
            Not Before: Mar 12 19:01:01 2025 GMT
            Not After : Mar 13 19:01:01 2025 GMT
        Subject: CN=537082ba307b0bcd00114c09e553ae84d3d4ad04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:44:77:3b:5b:34:b8:e4:3b:e0:b0:6f:09:
                    79:6b:69:57:2a:c9:39:89:b2:27:70:3b:9a:bb:f1:
                    51:53:28:5b:08:39:b5:85:1e:dd:7b:e6:82:aa:e0:
                    e9:1c:26:dc:14:d9:1d:c5:df:81:a1:50:b8:b0:e3:
                    79:c5:51:7c:01:0a:18:da:28:6a:1f:21:c4:53:71:
                    14:2f:5a:e8:b6:7a:3a:54:a1:56:cd:03:57:d2:96:
                    4e:37:42:83:2e:3c:a4:27:dc:e6:16:b4:81:af:e5:
                    6f:f2:c7:fe:d1:28:bc:66:06:f1:d0:40:ce:0e:a3:
                    dc:3a:d9:2d:04:43:2f:8c:67:88:1e:4c:f6:62:1f:
                    4f:bc:90:4c:a2:f1:7e:c9:c5:64:ce:12:4c:b8:9b:
                    98:08:63:ac:cd:d7:fb:bb:1e:ea:70:88:6f:cc:eb:
                    78:a5:81:68:68:6f:0f:39:b2:f9:e5:d7:3c:42:b7:
                    12:db:a7:d3:81:46:d4:4c:83:db:fe:cf:53:9f:3d:
                    9f:48:5b:ba:b5:54:91:87:57:e1:88:b8:89:ae:2d:
                    dd:19:96:dc:3a:b6:a7:b9:98:87:51:29:32:19:f6:
                    ef:b7:4e:66:37:ca:66:17:0b:3a:cb:78:7a:e0:4f:
                    fe:0d:80:75:d7:b9:cf:9e:84:65:63:6a:a4:5c:83:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:70:82:BA:30:7B:0B:CD:00:11:4C:09:E5:53:AE:84:D3:D4:AD:04
            X509v3 Authority Key Identifier:
                keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:04:1b:6b:2c:a6:5f:df:2d:70:e2:6a:a1:e7:49:56:0c:8e:
         eb:10:47:5e:8f:46:52:b5:c9:df:8e:5d:42:91:36:a8:0d:b0:
         44:7e:17:ec:21:c6:c4:cc:d3:a2:ef:82:3a:9b:2f:df:2d:11:
         be:de:f6:1e:81:25:ef:11:06:78:6f:ab:b2:79:01:85:33:50:
         f2:80:df:cb:e7:6e:0e:4a:d0:3d:51:0e:b9:a6:58:87:76:df:
         0f:e3:34:53:ae:f5:14:eb:e7:81:2d:c0:b8:5f:2d:a8:35:97:
         eb:d2:4d:40:ee:80:37:00:68:13:84:29:b1:2a:b6:96:70:f5:
         3f:fe:76:2e:59:89:90:f9:2b:7d:67:9c:1d:85:d6:5a:ac:9f:
         29:53:71:3d:1d:4e:0f:48:fb:cb:67:e7:11:91:92:10:61:12:
         92:b7:ff:23:2a:85:f7:0d:96:79:13:dd:a1:74:c8:37:17:7c:
         00:28:c8:98:26:bb:ca:bf:d4:06:dd:55:9d:ba:77:7a:3e:f2:
         45:a6:6c:b0:89:83:78:3e:46:8b:ae:b2:7c:dc:48:6f:5d:f7:
         6e:bc:18:6b:83:a9:20:73:30:d4:be:1f:3e:db:b4:68:ce:a8:
         2e:5a:26:dc:ab:3a:7c:7f:06:d2:ab:9d:59:bd:3a:83:58:49:
         52:d0:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:39 2025 by rpki-client