Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
File:                     HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json)
Hash identifier:          ZOGWjxIpfjr2JzKSRR5xBk+qPWVViUUsh8tGY0rkrpE=
Subject key identifier:   E3:92:46:99:63:B3:8A:79:2A:E8:84:96:66:28:3B:33:F0:34:9F:9A
Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
Certificate issuer:       /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Certificate serial:       01974BC43503809554D0C03A0BF1B19EE6AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
Manifest number:          0BED
Signing time:             Sat 07 Jun 2025 19:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:39 +0000
Files and hashes:         1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: /zDTPtys2PlqPEg5ydaUtYtRIggxrr/pxNbVXimtOIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:35:03:80:95:54:d0:c0:3a:0b:f1:b1:9e:e6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
        Validity
            Not Before: Jun  7 19:00:39 2025 GMT
            Not After : Jun  8 19:00:39 2025 GMT
        Subject: CN=e392469963b38a792ae8849666283b33f0349f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:41:c8:f9:b8:56:c2:3d:e7:bf:c9:81:02:
                    c3:5a:ab:c3:e5:d0:9e:46:2a:17:58:52:bd:b9:80:
                    d3:bd:59:6c:71:a0:b1:09:de:b8:d8:0f:9f:a1:b5:
                    e5:1f:e7:42:d4:a1:ac:3f:8b:b1:3f:e1:62:8e:cd:
                    d1:97:86:3c:96:33:8c:ea:66:9c:b5:fe:46:df:69:
                    ef:5a:8b:f3:9b:32:d4:dc:f3:a2:e7:47:c7:bb:c2:
                    ec:6a:09:6d:ba:4e:4e:55:87:fe:84:f0:c5:7c:87:
                    8f:b9:fc:2d:7c:08:28:33:42:e2:9b:ad:c7:e6:f7:
                    e5:d2:01:6c:77:a9:d3:83:60:74:3c:03:b6:68:22:
                    bc:72:b1:fd:d3:c0:dc:d4:56:65:f3:5b:4d:43:86:
                    68:96:cc:87:23:3d:f0:c0:e3:13:20:0c:a6:88:72:
                    fc:cc:88:cf:bb:5b:d8:f0:0d:e7:56:96:96:df:96:
                    5e:d3:0a:ba:d5:5f:ee:30:87:1c:ef:53:fe:0c:39:
                    dc:91:bc:0a:ab:84:8c:28:ba:3f:38:7c:92:f1:6d:
                    43:5d:63:0f:45:31:2c:d9:7f:ff:42:a2:38:28:db:
                    c8:db:fe:9e:11:54:52:ab:07:50:a6:20:17:c9:c8:
                    52:88:f0:e0:a7:a4:a3:1d:cc:2f:2f:9f:01:e6:ff:
                    2c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:92:46:99:63:B3:8A:79:2A:E8:84:96:66:28:3B:33:F0:34:9F:9A
            X509v3 Authority Key Identifier:
                keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b1:70:f2:6d:2e:2b:ba:68:6d:82:ca:a7:b4:33:13:fe:77:
         f0:41:a6:db:13:e8:67:f3:54:e0:a9:e3:bc:9e:48:1f:4e:d3:
         3a:9a:74:eb:96:92:f2:e2:40:12:a2:cc:e6:5a:d3:b1:b2:44:
         5f:1d:57:24:11:ed:58:a1:e6:55:ae:34:cb:26:d4:27:f1:e8:
         02:76:ed:9c:c8:ea:97:44:c3:7d:cd:36:ed:68:9b:ca:2e:44:
         a9:00:36:69:fe:70:53:11:33:eb:7e:29:d3:11:3a:68:88:45:
         b4:f7:b3:fe:54:11:36:b5:47:d5:9a:7d:29:75:29:5b:ac:19:
         e0:48:2c:fd:34:33:49:0c:d0:56:20:a9:05:9a:4a:11:1c:29:
         f7:98:b2:4f:35:8e:8a:cd:2a:03:9d:44:77:7c:2e:bf:de:c2:
         8b:ba:18:35:c3:fb:e7:7f:1a:7b:72:40:23:b0:e9:d8:10:ec:
         2e:fd:2a:66:bb:cd:d2:3f:aa:e9:50:35:3a:7f:46:70:76:8d:
         f3:fe:2e:dd:6e:a4:66:2d:e6:81:69:41:dc:96:87:0b:53:d7:
         7d:5a:d7:39:04:2c:d5:91:35:45:fa:95:0b:7a:38:01:2b:b0:
         b6:50:fb:fa:7c:03:46:47:dd:ac:44:1e:6c:12:ff:da:47:20:
         9b:d4:af:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:34 2025 by rpki-client