Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File:                     HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier:          Ge2F8AhE52cAha91uHOJJQUP8LtZSQrAyWkABAcDUio=
Subject key identifier:   24:61:E7:74:F4:24:25:CA:00:AE:86:60:76:FE:C7:43:C5:BE:CE:0C
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer:       /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial:       01974D7BB4F453EB5EB4423178B76F8D2A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 03:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:42 +0000
Files and hashes:         1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: 045hjVak7KOC3wGsbnWZTut+2HdFX278QMBdazbZDLM=)
                          2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:b4:f4:53:eb:5e:b4:42:31:78:b7:6f:8d:2a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
        Validity
            Not Before: Jun  8 03:00:42 2025 GMT
            Not After : Jun  9 03:00:42 2025 GMT
        Subject: CN=2461e774f42425ca00ae866076fec743c5bece0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:2b:5a:26:eb:7b:8f:f7:ac:11:f5:c0:81:
                    cc:82:02:cf:92:5b:92:fa:45:61:fa:8a:83:9f:48:
                    6e:b6:1c:86:82:f2:a5:af:bb:1a:e3:01:8a:19:a7:
                    13:a6:e6:83:c4:c8:b9:f0:26:59:c3:e9:cb:6d:37:
                    fa:62:01:d5:9a:44:d4:86:07:8b:d1:ae:18:1b:b2:
                    f9:a3:3f:70:cb:01:95:ce:a3:ca:6f:4c:c3:2f:d3:
                    06:ca:4c:d0:ae:07:51:40:07:6a:6e:21:1e:fd:24:
                    91:12:ff:08:77:06:5d:1e:75:6f:42:7c:0a:7e:17:
                    53:a9:fe:b6:6a:2e:7d:25:7a:c2:ba:30:44:5a:0a:
                    14:01:07:4e:88:b3:a8:22:db:8f:9f:4a:17:9b:47:
                    75:6d:ad:55:24:43:19:66:f7:fd:ae:0a:66:5d:cc:
                    37:3e:19:6b:30:39:e4:07:84:29:fe:bc:66:f9:ca:
                    06:fa:e3:c2:ea:07:d4:2e:b3:1a:60:04:80:ce:a1:
                    05:b8:b3:2a:8b:1b:51:58:5e:5f:75:57:ea:0d:11:
                    36:5c:b6:7d:30:11:f3:a3:7a:09:64:96:02:79:9a:
                    eb:6a:01:f1:c4:5f:bc:bc:b5:02:78:d3:32:2c:88:
                    49:93:14:97:41:a5:40:93:90:29:f3:09:8d:97:2b:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:61:E7:74:F4:24:25:CA:00:AE:86:60:76:FE:C7:43:C5:BE:CE:0C
            X509v3 Authority Key Identifier:
                keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8f:21:6d:4e:00:a0:97:40:02:70:52:c5:42:a3:26:ed:51:
         52:67:d2:40:9a:46:ed:34:49:d3:c3:63:12:41:d3:d5:01:b1:
         64:54:09:74:21:50:d5:90:36:fe:4d:33:87:46:fd:18:14:8e:
         49:1a:95:61:ec:76:7f:22:15:f8:26:4b:5a:03:55:6a:7c:8d:
         9c:04:54:62:d2:6b:6d:48:01:63:c4:47:95:19:04:78:af:51:
         e8:a0:a6:fe:39:69:c2:fb:fe:ad:52:ae:ce:10:d2:e9:d3:c7:
         c4:e9:ff:22:23:05:7f:8b:ab:dd:1d:81:00:b2:f4:4c:fb:fa:
         ae:9e:a5:68:fc:00:c4:5f:27:8a:3d:de:be:a4:24:b9:75:0d:
         aa:cd:15:7e:c3:4f:51:b6:ae:fa:2d:39:4c:be:be:40:48:45:
         fe:86:35:9d:d3:63:ac:2a:69:89:3a:f4:22:13:b6:da:b5:40:
         3d:b1:af:c1:58:bb:36:5e:34:1d:df:43:52:08:a6:66:2c:e7:
         a9:97:88:64:91:c4:05:01:42:cd:5b:9e:0f:23:16:e4:8d:f6:
         b7:a0:7a:d5:8b:3b:5d:f4:a2:ef:35:56:d3:b9:c1:e2:f1:27:
         72:c5:37:ec:04:aa:e8:70:f8:42:d2:a4:4c:32:21:99:94:7c:
         85:62:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:28 2025 by rpki-client