Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File:                     HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier:          eoi0/UsmB6kDljWSE6CKVZYNGT6JlrADfu0SkROORjM=
Subject key identifier:   CC:E8:41:22:AD:7E:A2:C6:5D:A5:10:F1:B4:00:45:2A:37:6C:E3:3B
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer:       /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial:       01964E9078065450EBEE4E85C5F057DC9205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number:          47
Signing time:             Sat 19 Apr 2025 15:00:12 +0000
Manifest this update:     Sat 19 Apr 2025 15:00:12 +0000
Manifest next update:     Sun 20 Apr 2025 15:00:12 +0000
Files and hashes:         1: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: 5ufyIIhXPpIYrQUpTAU3ogyBOtanHTTtnYB/kR2lwTE=)
                          2: JUZrH7esHXuIUR8S80TNsOfBgq4.roa (hash: U7uEaoA1okVxydwdN7xgsZxq5XRAaznjumXB+lt8BF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 15:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:90:78:06:54:50:eb:ee:4e:85:c5:f0:57:dc:92:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
        Validity
            Not Before: Apr 19 15:00:12 2025 GMT
            Not After : Apr 20 15:00:12 2025 GMT
        Subject: CN=cce84122ad7ea2c65da510f1b400452a376ce33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:24:32:8c:c2:52:98:de:09:51:53:64:5d:
                    11:22:9f:1e:5e:fb:3a:bf:e6:fe:74:b0:74:e9:f3:
                    d0:d6:95:06:f3:1b:6c:a7:1c:19:73:c1:1d:1d:e9:
                    2e:15:88:7b:73:57:5b:3f:1e:00:48:22:5d:2c:ee:
                    95:24:60:a1:47:7e:9d:d5:0a:c7:46:4f:0f:89:14:
                    7d:45:b4:c3:6f:dd:db:d4:31:bd:da:9e:fd:77:37:
                    25:dd:0b:26:0e:61:9b:13:6d:4e:33:19:f7:0a:9e:
                    90:3c:e7:92:89:cc:21:06:3e:b3:d9:95:4c:5e:a7:
                    ff:d6:06:b8:7f:5c:87:65:7f:8e:30:6c:8e:8f:11:
                    c0:7f:8e:1d:a7:0d:13:6f:82:e5:93:1d:c0:b8:5e:
                    2c:6a:b0:6b:b6:15:36:e8:e3:54:8f:18:14:ce:4d:
                    5f:76:60:ca:c3:b0:c8:b7:26:76:f7:eb:39:f2:e1:
                    96:7d:da:73:c2:76:8f:cf:5e:43:46:9d:8a:06:87:
                    10:00:e7:7f:a9:fa:e8:88:df:37:a9:61:b0:13:97:
                    f9:4b:2f:8f:07:b9:90:1c:a3:ad:e1:33:c0:17:61:
                    fc:69:16:8b:40:7e:43:00:c4:11:c2:d7:e9:a5:cc:
                    6a:c5:f6:82:d7:13:2c:cc:69:60:8c:63:47:41:34:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E8:41:22:AD:7E:A2:C6:5D:A5:10:F1:B4:00:45:2A:37:6C:E3:3B
            X509v3 Authority Key Identifier:
                keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:c2:a9:4e:18:26:4c:bb:4b:66:53:86:a3:63:4a:7b:dd:
         37:f9:84:71:31:1d:57:a0:a3:a7:70:ae:be:43:e9:cf:e2:7b:
         b0:f7:ef:89:7d:25:24:93:33:bb:d2:e2:fe:c8:be:a9:e4:4a:
         3f:b1:7e:21:c4:9f:64:e2:5c:85:31:0e:25:73:d4:08:22:0b:
         ae:96:6b:69:84:01:d4:7a:5c:54:ed:7e:7a:60:2b:0e:e5:9a:
         58:ac:0b:29:a9:c4:d7:b4:88:c3:b4:9d:ec:25:c3:1c:8d:f5:
         7c:45:5c:fe:f0:1b:7f:b8:52:9f:6b:e5:e1:d7:b0:d6:b9:27:
         c5:a2:73:7c:65:aa:6b:62:ac:6d:8c:1c:34:65:0c:44:4d:35:
         c2:41:8e:f0:9a:b7:cc:38:6a:04:23:c8:55:57:d8:5a:4e:2a:
         ab:7d:6a:f7:a5:d1:fe:bc:82:89:70:62:4f:c3:a8:f6:99:38:
         f4:47:9f:f9:eb:46:19:d4:9c:de:7d:7d:8c:41:74:c8:67:d0:
         48:66:33:08:38:b4:a4:bb:14:61:e6:bd:61:07:86:3e:0b:a2:
         14:18:21:00:4d:3f:04:7e:2b:70:04:76:00:c9:53:c0:53:1e:
         f0:fe:d2:06:1c:78:93:f1:af:be:2a:7e:d8:0e:cc:29:4a:94:
         8d:d9:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:52 2025 by rpki-client