Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File:                     Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier:          P6hRDsC8n2zY20c0RSUXWdCp9PTG+2iASypb4g+0ucE=
Subject key identifier:   5B:DC:EE:2D:FA:C4:56:58:FD:12:6F:57:BC:95:88:75:8D:39:54:84
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer:       /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial:       01963A654A620D390DF922269F9616C2BEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number:          1482
Signing time:             Tue 15 Apr 2025 17:00:38 +0000
Manifest this update:     Tue 15 Apr 2025 17:00:38 +0000
Manifest next update:     Wed 16 Apr 2025 17:00:38 +0000
Files and hashes:         1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: JpmF1pJhGbhLBnFChSyk/DxOzkQIBqeoBJmvF2t32i8=)
                          2: yEdA_N7rWdELvU2ot9EEaCyQPBo.roa (hash: 8ht/7rJO+ixz8Sl+2g/oVNj6ivGQ0TQ42doSDeerWxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 15:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3a:65:4a:62:0d:39:0d:f9:22:26:9f:96:16:c2:be:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
        Validity
            Not Before: Apr 15 17:00:38 2025 GMT
            Not After : Apr 16 17:00:38 2025 GMT
        Subject: CN=5bdcee2dfac45658fd126f57bc9588758d395484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:20:d5:02:00:4d:bb:c5:70:88:7b:dd:65:
                    73:ad:fd:2e:b2:0b:e0:ed:31:c3:cc:ea:5e:29:78:
                    a0:89:7e:31:5d:fb:35:ba:02:19:c0:14:80:d7:92:
                    a5:9c:78:1f:53:5e:8b:cb:f3:83:00:c2:7d:d0:5a:
                    ff:a7:6f:f8:d6:a3:e7:f9:cc:92:a2:5e:c3:1c:cf:
                    04:08:d5:2f:e9:a0:d7:f4:4a:10:9e:7a:23:8c:ee:
                    13:a8:a0:80:45:4b:a9:7a:f6:70:c8:2f:af:27:6b:
                    a9:a6:e0:73:66:fb:5d:d3:d2:b0:0d:ab:19:4a:b9:
                    ee:96:1f:c0:ca:cc:8d:aa:b9:22:ef:e1:76:12:ef:
                    96:ab:07:16:6b:4c:11:39:a4:3b:33:4e:ac:82:e4:
                    bd:8b:0d:e6:c4:94:d0:7f:35:fa:1c:95:bf:ba:97:
                    f0:67:62:f5:cc:97:94:ff:cf:27:46:27:a1:0c:4f:
                    15:f8:01:8e:72:85:2c:c5:ac:17:e8:a1:35:37:29:
                    2f:19:a3:f4:b4:50:09:5d:f1:1f:42:e2:dc:4b:2c:
                    72:1a:49:37:a1:26:c2:7c:4a:51:ed:ce:bc:71:6e:
                    56:75:f1:7c:a1:a4:e4:57:3a:33:bf:51:99:1f:a0:
                    8e:44:f4:7a:f9:06:9b:65:d9:3c:5c:ad:f5:8f:06:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DC:EE:2D:FA:C4:56:58:FD:12:6F:57:BC:95:88:75:8D:39:54:84
            X509v3 Authority Key Identifier:
                keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c5:21:e7:47:78:06:17:f0:74:51:dd:e8:86:8d:07:84:8d:
         47:65:67:3d:5d:bb:77:de:0b:ab:69:a9:1e:70:5c:15:ec:c2:
         6e:92:18:63:26:ac:d5:d7:f8:65:83:bb:bc:37:d3:c6:a5:21:
         bf:bb:f4:31:80:b5:98:6f:80:0b:c6:92:83:11:9d:43:1f:b8:
         1c:13:4c:45:66:e8:31:10:cf:82:77:ce:78:b8:00:fe:2e:c4:
         04:ee:b9:38:86:5d:bc:e4:ee:4b:62:eb:96:00:51:ba:8a:8c:
         e2:93:fa:83:9c:bd:88:78:d0:b6:c1:35:24:24:42:7f:d5:fb:
         9a:82:df:a3:2c:a8:6c:ac:79:c1:90:28:a3:41:69:b9:74:55:
         3e:46:33:15:3e:59:e4:40:36:f2:de:ac:1c:24:d6:a2:01:4a:
         20:27:70:01:40:85:c7:7e:76:cd:05:fa:75:9b:55:3e:9c:af:
         42:0c:99:45:ef:ff:03:03:3f:97:1b:09:bf:0f:1d:43:2d:51:
         16:df:da:be:7d:21:75:ee:2e:b5:93:c3:3b:d0:09:01:96:33:
         a7:44:fe:e5:72:a5:51:bf:0e:c7:ac:84:31:3c:3b:84:43:cd:
         89:6f:86:bf:1d:12:93:6e:95:1e:c4:52:fe:de:2e:be:c4:e5:
         d5:ff:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:09:56 2025 by rpki-client