Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
File:                     V-HUowlen6i5N9f6pDdZNyfSOTI.mft (raw, json)
Hash identifier:          WHmXNGX8jK/dJN9N6lm+JZ1ZRuXiyPIP1xkehwchKpI=
Subject key identifier:   4F:7B:A9:A2:C0:A3:BA:29:25:A8:37:9B:C4:8D:A9:F5:48:16:61:BA
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Certificate issuer:       /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial:       019758DB1D51317F80709AF34848C7BA13A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
Manifest number:          04C8
Signing time:             Tue 10 Jun 2025 08:00:44 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:44 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:44 +0000
Files and hashes:         1: V-HUowlen6i5N9f6pDdZNyfSOTI.crl (hash: uUys+ZQVVYFCcKBH8YRh4gUM3XzJC0Tryk/pCHi0IFs=)
                          2: bXJ4QtYhfWp1RnpTQChAp4cUwiU.roa (hash: fSbKrEDwgOdPjCAnblJniiQxtJvOzvNWIo+25OG2EEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:db:1d:51:31:7f:80:70:9a:f3:48:48:c7:ba:13:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
        Validity
            Not Before: Jun 10 08:00:44 2025 GMT
            Not After : Jun 11 08:00:44 2025 GMT
        Subject: CN=4f7ba9a2c0a3ba2925a8379bc48da9f5481661ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:ab:c4:31:8e:f1:b8:bc:2d:b6:c4:de:0f:
                    67:c0:d5:ca:9a:9f:7f:0f:bd:9a:d7:3e:09:09:3b:
                    70:b5:f9:f1:66:56:29:74:2d:84:3b:e8:cc:bf:53:
                    64:d7:44:6f:5a:2d:7e:aa:b7:b8:70:df:b2:52:62:
                    ca:d4:9e:fb:eb:c8:c1:a5:47:b5:f8:bb:d1:01:2c:
                    80:c5:0c:da:34:83:35:1c:d2:e2:a9:ce:c5:8c:dd:
                    a2:2c:62:af:23:a1:96:9d:4f:b1:ab:c3:30:a8:15:
                    eb:58:d2:ab:bc:54:ad:6d:c1:8c:60:d9:ba:ea:cc:
                    c2:fa:d1:6e:4a:ed:ee:b2:e1:1f:81:24:5b:42:03:
                    2f:5d:22:fe:8f:2c:3f:48:b9:20:40:9a:7e:4f:02:
                    c1:74:9e:ab:1e:83:21:2d:8e:d8:ff:f4:76:08:cc:
                    c0:c2:ae:36:18:da:9d:1d:22:81:a4:55:e1:0e:9e:
                    9d:39:5f:80:27:32:e0:0a:21:56:d0:1e:ce:9f:d7:
                    f5:e1:f0:b7:c0:d7:dc:da:02:2a:84:a2:3e:33:83:
                    57:82:37:b3:e5:ae:3c:d8:dc:a2:65:05:41:64:04:
                    ad:a1:4d:8f:d5:a3:ea:6e:4a:2f:5e:24:8e:9f:6b:
                    c0:f0:91:81:65:1e:ff:f3:40:dd:55:b6:3c:3a:1a:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:A9:A2:C0:A3:BA:29:25:A8:37:9B:C4:8D:A9:F5:48:16:61:BA
            X509v3 Authority Key Identifier:
                keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:9b:12:8d:ec:9a:b8:66:3b:84:3f:22:26:53:25:ef:86:
         48:ce:60:3d:c1:3b:11:64:b6:01:c8:f6:f0:33:3c:46:05:9a:
         59:7f:4d:25:e6:90:f8:dc:d4:09:5f:79:75:71:51:d9:d4:06:
         fd:d3:b7:cb:16:a3:86:6a:b7:a2:96:70:fa:4f:bc:81:80:75:
         5f:ec:ab:9f:21:0e:27:51:75:50:ea:d0:90:e2:1b:49:a0:f1:
         04:84:9b:c7:a4:2e:e6:55:62:39:75:78:35:1d:e4:59:e7:e7:
         3b:51:a2:12:95:f4:49:17:d9:ab:0c:c1:14:db:0e:52:63:6b:
         ad:1a:c1:e5:64:c2:b8:76:0f:9e:73:61:0b:6e:c8:29:6b:ce:
         5e:5d:f7:8b:2c:2c:8f:46:f2:28:dc:7c:4c:01:51:a1:4e:58:
         1f:00:cc:eb:ce:d9:57:f9:23:4b:b5:a2:ea:a3:70:bd:71:79:
         2b:a8:9c:a7:59:65:a4:a4:a6:8d:cf:13:16:d1:4d:f6:7d:9c:
         44:7f:09:e4:1e:a5:1e:b7:0d:7b:a5:47:57:71:0f:48:3d:91:
         95:18:59:18:e8:62:40:cd:e0:ac:81:ac:22:1c:e2:37:71:dc:
         ef:88:88:d5:8a:e1:f3:cf:1c:5d:3b:4c:81:61:b9:f9:b8:d1:
         5d:bd:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:59:48 2025 by rpki-client