Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          C+8s5gHu5xWWPqp+qoKDnst11T5a8XSLmm3YNc/kw18=
Subject key identifier:   7C:2B:FC:CA:2A:D0:F6:B7:F5:44:BC:06:14:FC:C1:FF:66:C4:48:71
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       01974BC46EB95F31CD2B04F663DF8454D04E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 19:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:53 +0000
Files and hashes:         1: 0Ox66VfhpkksOxsQKvgplGDbF6A.roa (hash: 2hQepAwHuEvKh7LX4V/wopW78ujoteaNGMyduaqzBZo=)
                          2: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: 42e5EUAXWhtP5YnHwoq8Gd4xN8FeQaRLvJDVU57+Reo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:6e:b9:5f:31:cd:2b:04:f6:63:df:84:54:d0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Jun  7 19:00:53 2025 GMT
            Not After : Jun  8 19:00:53 2025 GMT
        Subject: CN=7c2bfcca2ad0f6b7f544bc0614fcc1ff66c44871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:8c:b8:6b:f3:17:d9:9d:a7:8c:49:fd:07:
                    d7:d0:7c:e2:f2:43:92:44:48:14:d1:aa:18:15:7e:
                    7d:df:b5:ef:e4:0b:6e:eb:f3:3e:08:a4:87:4e:ce:
                    52:f1:fd:e8:be:59:4d:6e:18:9f:95:72:bf:b4:e7:
                    9f:a7:70:45:05:bc:fe:db:78:3c:c5:d5:6b:cc:90:
                    11:10:ee:46:86:71:a0:f9:5a:78:2b:b0:19:77:27:
                    de:35:48:5c:a3:7c:ee:c7:f1:e2:76:4f:a6:c7:03:
                    6e:7c:8b:a7:22:84:78:d7:c1:e7:7a:72:7a:4d:55:
                    5a:c8:0c:7a:ea:27:53:2a:b0:0d:0e:dc:e9:b5:cf:
                    75:0a:3f:59:81:96:47:76:7f:61:e9:d3:00:eb:f6:
                    a4:bf:76:93:b1:2c:da:46:82:f9:77:eb:dc:8d:ce:
                    f0:3e:b6:86:18:d8:29:9c:17:b4:69:1c:12:a3:0a:
                    69:f9:40:0f:37:9a:80:af:6f:bb:38:e5:18:fc:37:
                    cd:dc:b7:35:7e:71:6b:db:e6:1c:db:23:9d:d4:f0:
                    af:19:42:23:4f:fd:f0:0a:93:40:b8:1d:8e:26:62:
                    ca:75:2c:63:1b:e0:9c:f5:15:0c:3c:bc:30:37:23:
                    ed:d6:86:8d:bc:b9:05:a6:f0:50:bc:34:67:d2:74:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2B:FC:CA:2A:D0:F6:B7:F5:44:BC:06:14:FC:C1:FF:66:C4:48:71
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:07:98:03:d7:93:1d:76:60:97:27:57:77:05:75:6e:f4:8e:
         d3:88:42:c3:bf:fe:49:99:89:e8:e7:87:19:28:d0:74:e2:17:
         76:f7:9b:3b:d0:01:5a:74:4a:2d:a4:1b:ed:a1:03:14:16:9b:
         c4:2c:b5:69:0a:cf:59:ae:f2:35:87:af:a3:46:73:5a:e6:2e:
         6b:78:02:03:80:4e:a9:91:11:02:75:7f:e2:5a:c8:38:c4:99:
         df:83:c8:d3:80:17:cc:8b:6a:29:03:92:d1:53:15:2f:b8:e8:
         47:80:0d:70:fe:75:7d:15:9a:df:d4:b2:d6:b4:c2:de:f2:5b:
         bc:cc:98:cf:09:90:a6:f2:9b:ec:a4:96:8d:a8:db:3b:72:60:
         4f:77:f7:47:51:b4:02:18:a6:c3:6d:de:c3:13:ea:d3:1c:bf:
         e0:a5:60:e9:38:d8:a5:c6:34:2d:e9:87:9e:1b:95:f0:13:b4:
         e3:53:6c:79:a2:6b:2e:c6:30:ed:b2:2e:55:68:5e:ee:3d:7e:
         ab:b1:13:20:d4:17:4a:d4:b8:da:6f:4f:18:66:0f:31:8f:44:
         ed:14:c8:43:28:51:c5:08:93:1d:1b:6f:1f:ca:44:0c:21:d6:
         d1:45:be:fe:dc:14:28:cf:9d:fe:47:3a:a7:a8:7e:d6:77:10:
         71:34:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:08 2025 by rpki-client