Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File:                     HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier:          PzFfghlBAJPscgvXCfExNmi52Deq5l5o3xCR5RLT5hA=
Subject key identifier:   92:00:7A:8C:1F:06:9D:A0:7D:92:38:6F:28:45:4B:3B:4D:31:BD:DC
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer:       /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial:       01974EFC293E2E09CDB6B30A1D9B9CAE5C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number:          14E6
Signing time:             Sun 08 Jun 2025 10:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:37 +0000
Files and hashes:         1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: Fs8nsmDnU99F4nWizD4ZHaLtm/q0ETuY9o2+WpgrZ1c=)
                          2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:29:3e:2e:09:cd:b6:b3:0a:1d:9b:9c:ae:5c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
        Validity
            Not Before: Jun  8 10:00:37 2025 GMT
            Not After : Jun  9 10:00:37 2025 GMT
        Subject: CN=92007a8c1f069da07d92386f28454b3b4d31bddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5b:35:b1:d3:f1:15:7e:06:9d:3e:b6:69:ac:
                    f8:c9:56:23:b0:8c:1b:b6:86:7b:f0:66:f5:6e:98:
                    8b:fa:cf:55:53:7d:54:57:3b:dc:bc:85:b7:66:48:
                    a1:a6:78:54:f7:0d:ec:ec:de:e7:ba:f7:3b:9a:5d:
                    a4:08:d1:c0:c5:4e:fb:c1:9b:38:49:c1:ca:6b:3f:
                    48:01:2a:d4:fa:21:80:52:9b:a7:d0:60:2e:9c:11:
                    f8:aa:ff:1e:b7:99:73:94:48:7b:39:68:61:04:6c:
                    ab:27:49:c9:b3:a8:0e:50:8a:17:3b:a1:a3:02:62:
                    c8:84:d2:dd:a0:6f:27:3e:f9:c0:07:98:e7:58:76:
                    a4:90:8b:ed:3d:c1:ce:0d:18:d8:bc:44:bb:09:89:
                    3e:c6:b1:cc:8b:01:82:7c:c2:78:e5:4e:08:c0:28:
                    ba:5c:23:a4:e1:67:fb:61:9c:70:24:50:5d:19:46:
                    c4:08:44:c2:7a:eb:d2:b2:a9:3b:3c:87:a0:0a:3c:
                    d5:f9:af:50:6f:64:c7:96:42:75:a9:9f:29:14:76:
                    fa:dc:a8:e8:6d:4c:d5:1a:5c:c8:79:40:a1:eb:3f:
                    31:15:e7:2a:06:64:f0:6c:68:32:44:42:76:02:35:
                    89:75:65:c7:ed:60:e2:5a:81:3f:ef:eb:48:d5:8b:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:00:7A:8C:1F:06:9D:A0:7D:92:38:6F:28:45:4B:3B:4D:31:BD:DC
            X509v3 Authority Key Identifier:
                keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e4:29:e7:a1:a4:50:f1:c3:36:82:db:77:68:98:42:8f:84:
         fa:f4:fc:9f:12:b2:2f:b1:42:4f:93:1f:bc:b7:44:f4:05:96:
         d6:11:98:75:77:51:f6:91:43:4d:f6:48:4c:56:62:2c:b4:80:
         64:92:be:31:37:50:a7:93:ff:dc:94:c5:7a:ab:48:46:36:3f:
         0a:c6:35:50:80:a5:d2:be:95:b5:72:53:73:8c:c9:8b:ae:93:
         bf:0f:42:19:eb:0c:52:85:7a:17:a9:95:d9:fb:6b:9a:a2:58:
         c8:88:19:d4:92:13:3c:ad:46:bf:4b:3e:0c:99:5e:c4:7b:8f:
         b7:0c:4e:1c:74:aa:e1:82:97:94:94:b5:98:06:2c:dd:32:e6:
         69:25:58:af:75:7e:94:b2:02:20:ac:5d:36:93:58:f8:bb:a3:
         13:08:42:c6:c9:11:51:a0:99:eb:d2:ed:2e:11:6a:48:53:76:
         e5:32:ad:0a:a3:a6:b2:b1:7a:52:dd:47:6e:ea:3c:1c:11:d6:
         0d:ce:36:37:bc:6e:d5:ab:bd:da:b4:ac:99:6e:b7:5f:32:5f:
         88:2b:9e:87:37:4d:95:16:10:29:8a:91:9c:10:b0:37:ca:dc:
         54:01:41:b4:89:ac:65:53:f2:a2:f0:d3:9a:c6:45:2f:42:97:
         78:33:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:21:49 2025 by rpki-client