Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          DZ3/IcUc/t2ihNzZhmv19dO7eENXTudG4x2KFLATdq8=
Subject key identifier:   7F:88:2F:35:27:BA:09:CB:C3:35:F0:7B:46:F3:CC:1F:DF:18:29:F6
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       0196C3823AF7D3D6B587E2623DFF29F1085A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          154E
Signing time:             Mon 12 May 2025 08:00:13 +0000
Manifest this update:     Mon 12 May 2025 08:00:13 +0000
Manifest next update:     Tue 13 May 2025 08:00:13 +0000
Files and hashes:         1: Co2reX9WjBlmenpbYdQoA_FU6Yg.roa (hash: q2QsExP+FdyReITqdolcGkEpneACU1Mny9QFEjumzVA=)
                          2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=)
                          3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: xOPj+ZpcASYKAAsIdIkzVhWqYAvIqyodOYJO8DIl1Fc=)
                          4: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=)
                          5: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:82:3a:f7:d3:d6:b5:87:e2:62:3d:ff:29:f1:08:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: May 12 08:00:13 2025 GMT
            Not After : May 13 08:00:13 2025 GMT
        Subject: CN=7f882f3527ba09cbc335f07b46f3cc1fdf1829f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:92:46:c4:cd:4f:78:60:f0:cb:cf:ff:d3:
                    9d:26:5f:4c:5c:ce:d5:73:d8:81:ad:e9:56:b6:5c:
                    37:6e:f8:8f:24:f7:67:01:e7:5c:61:c1:10:6c:b5:
                    ea:7a:84:ba:ff:ca:b6:41:14:1c:b5:b9:f4:61:3b:
                    45:79:3f:41:a3:f6:f9:34:a9:4a:8d:7d:b9:80:b5:
                    f6:11:75:ea:9f:0f:6f:3b:1a:cf:67:18:03:cc:95:
                    e2:26:67:40:de:c2:eb:52:55:e2:18:75:38:b3:89:
                    12:f0:b8:00:2a:cf:24:70:e4:68:d2:e7:51:0e:65:
                    ea:d0:16:76:11:4d:67:4f:a7:5e:e9:94:59:65:e6:
                    11:0e:1e:13:f7:20:35:ec:3d:7b:e9:17:ad:4f:0f:
                    d0:02:29:06:63:77:99:49:8f:bc:25:89:3d:98:b5:
                    56:c5:e4:e7:09:4b:f8:4d:0b:15:02:a3:f1:2f:56:
                    73:a6:9b:1b:df:55:01:4e:00:56:1c:08:d7:d9:d7:
                    68:8b:00:01:18:4e:d7:e9:2f:85:0a:a3:fa:fa:67:
                    83:9c:e6:e6:18:27:eb:6b:1e:40:94:7e:7a:16:a5:
                    6f:c7:98:94:00:c7:d6:30:48:f2:66:32:9a:25:10:
                    53:e2:c0:57:90:84:6a:a0:f5:ae:38:f6:62:93:be:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:2F:35:27:BA:09:CB:C3:35:F0:7B:46:F3:CC:1F:DF:18:29:F6
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b6:c4:9e:c4:9c:b4:ad:8f:80:ac:05:5f:e9:b7:40:09:7b:
         67:b6:b0:4a:78:5a:2d:48:b6:58:51:a8:fc:35:ed:60:94:91:
         bc:d3:1d:76:99:e5:1e:f6:88:6d:b4:a0:a5:af:85:05:ff:71:
         dd:7c:9c:bf:8a:de:47:5b:be:27:0a:e5:5a:7e:04:d4:9b:68:
         84:12:fa:ff:65:e5:40:05:e0:31:58:99:f0:8b:cf:4e:3c:bc:
         de:3d:d7:46:b7:b3:bb:9a:09:02:39:e9:c2:9e:55:03:c5:7e:
         b5:51:de:a5:f4:9a:be:18:42:be:79:ba:8d:50:ad:a0:0d:81:
         1e:34:93:bc:dc:ea:ef:be:c3:1e:33:08:51:9f:b7:4f:44:03:
         2a:d5:24:9b:b5:59:aa:42:55:71:3e:58:6c:d5:cf:8a:19:f9:
         60:c9:d3:61:a0:2e:a3:3e:bd:f0:98:5a:96:4d:6d:0d:ec:6b:
         7b:1d:9c:a1:22:45:9b:51:bc:b6:59:57:6e:30:89:ed:b3:1a:
         51:fc:15:29:fc:0d:ec:ee:a6:51:96:8f:36:ea:fe:1e:e3:38:
         12:e3:1b:f1:b2:45:fc:13:d6:66:b5:e2:9a:32:f6:cd:e2:ea:
         6a:ef:36:83:43:35:cb:d0:25:9a:8e:89:35:ea:ad:66:dd:ce:
         e7:2a:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:01:17 2025 by rpki-client