Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File:                     Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier:          oNrDdLRt4YpzGMbaCpn4x/9ifPaty+rBg7Dj0NNUbSs=
Subject key identifier:   04:05:CD:C5:23:A6:C9:2B:E4:05:CF:83:3A:6A:A2:6E:51:63:1C:E9
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer:       /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial:       0197B9337FFAD0817111C2047D288408259C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number:          094E
Signing time:             Sun 29 Jun 2025 01:00:49 +0000
Manifest this update:     Sun 29 Jun 2025 01:00:49 +0000
Manifest next update:     Mon 30 Jun 2025 01:00:49 +0000
Files and hashes:         1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=)
                          2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: TV0eFqPalqjf27znJ1sOyF592GnSMPXT6auIRzR7yIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:33:7f:fa:d0:81:71:11:c2:04:7d:28:84:08:25:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
        Validity
            Not Before: Jun 29 01:00:49 2025 GMT
            Not After : Jun 30 01:00:49 2025 GMT
        Subject: CN=0405cdc523a6c92be405cf833a6aa26e51631ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:51:ab:c7:95:93:f7:c4:50:d9:46:6b:c8:
                    ee:9f:95:31:2a:a7:15:5b:f1:82:43:c4:d3:df:b6:
                    48:c3:35:3c:0a:d2:28:f4:7a:40:38:3e:a8:87:9a:
                    c1:8b:f0:f4:83:26:e2:f9:f1:a3:aa:f8:9f:a8:ec:
                    3f:32:9b:74:5d:90:5a:85:66:fb:c4:48:c9:4e:fa:
                    82:b0:4f:30:f1:a1:e6:12:df:b4:29:bc:50:e6:8b:
                    90:8f:62:82:52:35:e5:32:6f:ca:6f:7f:7d:97:0d:
                    87:e1:63:d5:bd:84:25:29:08:26:e6:6b:e8:49:5f:
                    97:9d:ea:d9:6e:0e:5d:e5:c0:17:b0:fc:13:ee:f7:
                    c7:5e:45:d8:e8:82:82:e0:0a:8f:cf:e0:32:4e:f8:
                    aa:35:07:68:5f:a3:11:0f:d4:70:79:6e:b1:2e:15:
                    e5:ba:25:9d:52:3e:9c:02:9b:54:16:ea:43:d9:20:
                    7d:47:7a:83:61:69:c7:74:90:a1:41:55:59:92:a7:
                    6a:37:58:31:ac:19:4a:44:3b:f1:86:94:2d:77:2b:
                    72:88:2a:1b:59:a7:14:29:66:26:2c:b2:58:76:c2:
                    3d:96:27:79:3f:52:2b:29:e1:e0:2e:5c:ed:e6:0c:
                    63:3c:d5:a1:cd:98:6f:ef:61:6b:96:a7:24:e9:01:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:05:CD:C5:23:A6:C9:2B:E4:05:CF:83:3A:6A:A2:6E:51:63:1C:E9
            X509v3 Authority Key Identifier:
                keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:69:b5:32:8b:9c:53:ec:3f:c6:c3:60:ef:e9:a7:79:54:
         df:70:56:3c:5c:ac:95:b7:96:1f:00:04:d5:76:7d:cc:4f:a8:
         d7:0b:95:17:77:0e:43:f1:7c:ba:5a:28:a5:1d:c7:d1:7e:ae:
         70:cc:de:80:c7:79:41:91:ce:77:c1:14:b4:1e:05:6d:87:09:
         20:84:21:32:fe:2b:1d:24:c1:5c:d0:53:84:41:26:c7:03:36:
         02:f1:cd:60:a8:de:30:f3:06:7c:8d:b8:0b:77:2e:15:6b:98:
         b9:7a:92:25:17:9f:7b:57:aa:28:da:c2:83:d4:d7:ca:9b:72:
         c3:52:51:fe:bf:1a:d4:91:b1:72:b2:fc:9b:6e:66:b1:b6:ba:
         47:2e:a8:42:25:e5:ff:c2:88:00:77:c8:98:f5:63:64:8b:de:
         eb:8d:74:5e:fa:3a:5e:69:9f:c4:22:38:3c:c9:0e:2b:e5:53:
         08:5f:e0:f8:ee:56:2f:f1:18:8a:68:e6:2a:e7:e6:f5:f3:e3:
         3d:50:4c:92:21:0e:bd:e2:ab:8c:8e:43:4b:87:b0:fd:7f:b8:
         9b:a1:c1:a4:4f:9a:d3:86:17:4a:0c:46:3f:f5:a0:18:be:a9:
         da:03:49:7e:79:b4:f1:3c:86:b0:22:b1:f9:6f:8c:c7:e9:2c:
         23:9d:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:34 2025 by rpki-client