Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File:                     hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier:          VU34BK/Z7quEdjds8LQqbxygSbqAQsqvakiVa32jgyQ=
Subject key identifier:   E9:7F:59:BE:87:33:EA:E2:8B:07:5A:EC:17:E1:00:D5:CE:F9:9C:DA
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer:       /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial:       019747E733F7047167ECF213224BE06A8277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number:          1514
Signing time:             Sat 07 Jun 2025 01:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:23 +0000
Files and hashes:         1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: 7ts0IDhlRKLf9XNKLwtWnNLBbTItGlXGm/IXGi92T1U=)
                          2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:33:f7:04:71:67:ec:f2:13:22:4b:e0:6a:82:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
        Validity
            Not Before: Jun  7 01:00:23 2025 GMT
            Not After : Jun  8 01:00:23 2025 GMT
        Subject: CN=e97f59be8733eae28b075aec17e100d5cef99cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:26:d0:61:f5:f0:c0:58:ce:c3:34:2e:49:
                    d7:30:cc:1d:e3:0c:a4:b4:02:db:59:f6:5a:f5:5f:
                    6c:a3:32:a9:50:b4:57:d1:b8:c4:fd:00:c7:f7:d5:
                    40:ba:9c:4f:53:97:49:e4:80:03:7e:1b:9c:13:25:
                    11:d3:29:1e:13:b1:2d:0d:be:e8:12:d8:6d:d1:a7:
                    72:ea:c3:9d:68:3d:39:c1:8e:f4:47:bf:57:12:4c:
                    2f:54:80:96:f0:e0:95:e4:8e:ee:78:44:dd:61:a0:
                    68:0a:8f:0f:a1:9c:4c:05:e6:fd:71:d5:fb:5f:60:
                    5b:88:50:fe:29:a7:15:93:7d:cb:29:f1:66:c7:c6:
                    e2:63:31:18:50:22:8f:fb:00:8f:62:d9:c1:8c:9c:
                    fb:14:31:63:f3:06:94:22:b6:67:a2:e9:fc:25:fd:
                    29:35:6c:c4:24:b2:23:a3:06:de:4e:e1:05:a4:6e:
                    83:0f:23:c3:80:05:4c:c7:8f:7f:89:16:82:a0:19:
                    a9:0f:28:cf:a0:71:7f:22:d2:b9:95:f6:ba:ed:a7:
                    0e:b2:27:cf:15:5b:56:60:21:1d:ff:9f:df:af:74:
                    92:a3:53:c9:53:cf:9b:29:91:ab:8e:69:7e:bd:21:
                    13:51:ea:56:d1:bf:46:42:3c:db:51:f1:fc:e8:61:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7F:59:BE:87:33:EA:E2:8B:07:5A:EC:17:E1:00:D5:CE:F9:9C:DA
            X509v3 Authority Key Identifier:
                keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:7e:2c:f1:fc:e6:47:24:ce:fe:73:0f:70:4e:57:8c:16:
         7f:32:1d:37:aa:c9:c4:f1:2e:05:5d:02:60:95:b3:7b:df:ed:
         02:98:72:dc:d0:3c:f5:46:05:27:d2:cd:91:77:df:6a:1b:84:
         a7:da:cf:0d:e2:34:f1:6c:4f:c1:ef:dd:4a:0a:12:78:71:cd:
         5a:09:5f:5d:f8:91:af:41:d0:6b:4a:e5:32:f2:b8:da:9d:2a:
         5e:69:f8:e2:06:42:b2:71:59:17:c3:f0:02:df:85:2b:7a:e7:
         b1:64:15:cf:5b:ef:d4:90:e4:f5:8e:d3:2f:6a:89:75:eb:79:
         6d:66:c4:c8:82:eb:9b:2d:6e:fe:38:e6:23:ad:b1:11:24:cb:
         62:09:c6:59:de:f3:80:cf:8f:82:b6:9f:8f:ae:f0:a9:fe:5b:
         f0:b5:3d:76:4a:17:ad:63:46:46:a5:e1:6b:6e:2a:78:89:60:
         30:79:da:f9:68:6a:d4:7b:1c:57:37:f5:d0:9a:e6:f4:82:70:
         8d:e5:64:ef:12:f4:d0:b4:a5:6d:c9:d8:57:e5:8c:27:46:98:
         b3:48:4a:96:74:62:b4:88:54:54:d6:3b:3e:58:c5:93:bd:c3:
         19:bf:f5:4a:70:95:c9:12:6d:ec:94:93:e6:a6:3a:a9:df:4b:
         bb:a8:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:31 2025 by rpki-client