Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          Y2aPQxqRGYq6dz5WgwXsp8+priLhPkwWFdaTL6t0cc4=
Subject key identifier:   43:20:C7:4C:8C:26:85:4B:91:1B:70:FE:CA:8A:45:E5:6A:92:DD:15
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       019748FA659A46B5629FB3F252505FEE1A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          1062
Signing time:             Sat 07 Jun 2025 06:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:58 +0000
Files and hashes:         1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: Rg9UXlOkCVZk95IlDHLBbF17tG/lOQe9YsvcwsjYITE=)
                          2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:65:9a:46:b5:62:9f:b3:f2:52:50:5f:ee:1a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: Jun  7 06:00:58 2025 GMT
            Not After : Jun  8 06:00:58 2025 GMT
        Subject: CN=4320c74c8c26854b911b70feca8a45e56a92dd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:18:61:09:42:16:70:2b:e3:39:62:0b:36:
                    02:8e:ba:24:f4:bb:6e:ad:71:49:8e:d6:f8:6d:12:
                    f5:9a:cc:8d:8c:70:34:ef:4d:a4:98:2f:19:45:7e:
                    29:9d:bd:1f:ee:d5:3f:3a:8a:6e:7b:2b:2b:9f:e7:
                    11:a0:fc:0d:28:a0:1a:47:08:4f:c4:64:c0:ee:56:
                    bd:2b:6e:df:1c:8f:29:92:21:69:85:00:4c:3d:45:
                    68:9d:47:3a:f5:c0:78:12:df:66:bf:c1:15:93:f0:
                    26:31:bd:ac:42:ff:ce:ac:2c:d5:47:67:20:57:d3:
                    8f:07:2e:bc:48:6e:a3:46:72:cf:36:83:3e:61:91:
                    81:af:5d:cb:35:0d:aa:6e:f9:34:2b:67:6e:b8:05:
                    b1:05:7a:64:d3:ce:07:a9:d7:13:6c:9e:68:ab:06:
                    00:cb:cf:f7:5d:e8:16:c1:a9:ef:00:ba:96:6a:f7:
                    af:84:0c:d2:53:81:a0:d9:01:5a:2f:f3:cc:9d:37:
                    7c:44:2b:23:73:0e:8b:63:73:a1:87:61:8f:6f:f4:
                    57:71:09:03:a5:00:48:e6:b5:52:38:37:d5:7b:07:
                    4b:f2:8e:2d:72:e3:d1:df:86:92:04:85:1e:81:7e:
                    10:08:22:31:65:a5:55:6d:89:51:cb:54:22:3a:93:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:C7:4C:8C:26:85:4B:91:1B:70:FE:CA:8A:45:E5:6A:92:DD:15
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d8:1a:0e:fc:ba:2e:0c:4e:cb:dd:84:f4:14:75:5b:df:a6:
         b4:ee:04:02:ae:0c:5a:1e:33:ea:c0:a2:76:ea:4d:da:b6:0a:
         92:45:af:f1:27:97:fa:83:a2:c2:18:20:3d:ae:b5:1d:be:02:
         98:03:2b:d8:e5:d0:d5:7c:08:85:28:c4:83:2e:a2:fe:94:29:
         a0:e5:f5:09:a3:17:35:3c:87:d9:55:9a:cf:9d:cc:70:45:7d:
         b3:e1:2c:f6:4a:18:11:23:a1:cf:64:ef:ed:31:07:b7:a8:18:
         f1:42:ac:73:27:ae:5c:c4:9d:86:16:34:2e:2c:53:c1:03:55:
         db:66:9d:39:e5:a6:00:e8:4c:88:d9:da:ea:4c:32:d7:9a:7e:
         8a:62:d9:4c:f7:5e:c8:0a:78:d9:35:73:b4:88:8a:bb:1b:73:
         dd:e4:df:83:bd:8a:96:24:f0:59:be:7b:59:77:63:96:d1:14:
         e7:23:e6:d4:91:ac:04:d2:b7:6f:29:52:87:d5:cf:6c:9c:e4:
         96:fc:f3:33:ca:78:69:f2:e9:30:99:5a:e4:41:dc:02:6f:41:
         d9:1b:db:2e:56:5f:33:61:8f:55:e7:d2:b4:ab:7a:7d:8b:92:
         08:68:7d:e6:1b:94:92:cb:4d:02:f5:9b:28:ba:75:d8:1c:bc:
         09:7a:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:43:56 2025 by rpki-client