Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File:                     H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier:          ExJasAdxeNOh7JX7/MjPHHg/OVhoUHgNPO1I4ZZaxhk=
Subject key identifier:   B0:AB:B6:67:89:B4:CF:F3:DD:BE:2C:DD:4F:D2:5B:C1:65:47:9D:E9
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer:       /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial:       01964B2222CAD5B6942AC9F14A4497A37CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number:          0C02
Signing time:             Fri 18 Apr 2025 23:00:50 +0000
Manifest this update:     Fri 18 Apr 2025 23:00:50 +0000
Manifest next update:     Sat 19 Apr 2025 23:00:50 +0000
Files and hashes:         1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
                          2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: Hgg7ikDIuVCiog5QsVH5inInbC2c6aQLjuXtbjKwRQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:22:22:ca:d5:b6:94:2a:c9:f1:4a:44:97:a3:7c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
        Validity
            Not Before: Apr 18 23:00:50 2025 GMT
            Not After : Apr 19 23:00:50 2025 GMT
        Subject: CN=b0abb66789b4cff3ddbe2cdd4fd25bc165479de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:f1:13:07:b2:e0:48:89:2e:23:f0:53:5a:
                    42:24:d1:dc:61:4a:dc:ac:73:08:73:ed:1d:d6:b3:
                    86:e0:a8:eb:5b:96:2c:ec:8a:e9:05:9a:e2:c1:88:
                    60:e8:3a:b4:03:08:56:fc:cd:88:36:46:ff:4b:ee:
                    2f:4f:7c:e4:d4:36:97:1a:13:94:5b:b1:4e:7c:af:
                    34:45:49:1a:d2:51:8d:92:6e:8f:af:0e:67:a0:f3:
                    d2:f8:48:33:bb:70:d7:e9:5e:87:7e:99:51:27:e4:
                    51:0d:34:7d:df:5c:34:33:1a:d4:7e:b7:2c:d3:15:
                    66:d8:f2:5c:0d:c3:f7:bb:ba:88:9c:f3:64:9f:30:
                    eb:4f:3b:d1:81:c9:57:12:30:9e:c6:2e:6c:b4:ee:
                    55:4c:aa:17:55:b1:1c:21:2b:94:9f:11:3d:25:38:
                    c6:72:e4:1e:1b:5d:04:8e:b0:58:cf:2a:b3:6d:dd:
                    2b:77:c7:3f:4e:77:45:27:cc:b7:1c:f1:48:5d:cb:
                    1c:be:52:99:a6:7d:4d:aa:db:30:7c:12:69:c8:57:
                    05:0b:1e:49:43:84:5e:8e:23:77:9c:50:4d:94:f4:
                    49:23:22:74:19:1d:24:d5:d5:35:0d:70:25:5f:86:
                    49:5f:d7:bf:8c:d9:9b:90:8c:e5:62:15:20:c6:35:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AB:B6:67:89:B4:CF:F3:DD:BE:2C:DD:4F:D2:5B:C1:65:47:9D:E9
            X509v3 Authority Key Identifier:
                keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:f2:af:ad:50:af:41:bd:0f:53:fd:c8:1a:52:c5:33:21:
         c4:62:41:1b:a8:68:8e:64:12:3e:40:36:bb:49:5a:fe:57:e0:
         43:32:82:98:57:d2:de:85:af:5b:fe:f9:8b:96:be:0d:8e:66:
         76:d0:33:9b:e2:f3:80:73:cc:d0:d4:12:8e:05:88:94:2d:b1:
         45:b5:fa:a8:61:1d:79:b4:8d:28:3e:5f:c2:5d:cb:47:13:b5:
         29:c9:a1:63:4a:b4:a1:55:c8:61:83:27:b7:31:57:97:86:3a:
         40:f5:6b:72:9f:7c:9e:b0:5e:f6:ec:bf:2c:78:24:be:d1:d9:
         aa:07:5c:61:8a:f5:e9:71:f4:89:bb:26:be:f5:9c:60:ba:7f:
         c1:df:0b:2b:27:ec:70:8a:ae:bb:91:38:c0:f4:a4:95:91:46:
         83:e4:52:10:7f:f3:8c:d3:30:97:5d:a0:96:ff:c9:61:af:44:
         2a:30:57:00:61:39:f2:1e:04:f6:4e:c0:88:2e:95:44:9e:65:
         68:54:0a:7f:ca:44:f0:e6:6c:17:13:c8:c6:04:ea:49:5c:7b:
         15:c9:e1:3e:2f:82:7d:0e:ea:10:cb:f7:3b:c2:4c:2f:5b:a2:
         3e:18:37:96:98:4b:50:76:68:a5:b2:53:a5:b0:f0:63:4b:0e:
         dd:f5:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:04:12 2025 by rpki-client