Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          YGLH4AId+ceSTx8WBeBStOJz3XnPygfNWlN61WJIAEk=
Subject key identifier:   32:C4:33:EA:E7:31:4D:B1:7C:A1:98:E5:D6:C1:FF:32:33:46:3E:7A
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       0197CCBB068CE22B51DE4509DA6F71381FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          10E5
Signing time:             Wed 02 Jul 2025 20:01:38 +0000
Manifest this update:     Wed 02 Jul 2025 20:01:38 +0000
Manifest next update:     Thu 03 Jul 2025 20:01:38 +0000
Files and hashes:         1: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: aBfYMeZpAZ01e41C9AxzU9viAPs8+Rk6DM6ywH463A4=)
                          2: Hwa64s5gh2ljZYzswq1MygUDPHc.roa (hash: 0SMaVRBltPWPlJCAMP0PbN6yDjOR3rc4e6/DOO/swOM=)
                          3: SGwhn__bVbPsccKspAWva0mlWKE.roa (hash: 7jfyjyJCW+XQBhQgGW4lFXSavEUqWujd+R1L9MnkSV4=)
                          4: bVV-LmRxrJACwIt_3H5Y-KZM4tk.roa (hash: YG03EdxheWfNj9nAWSYO4FwqQuG3FqjegdG/4SAUoRw=)
                          5: tDDvO4ewPeixYnF0BIHSLyjo8w4.roa (hash: 2D9w4MUI/GtrAMc5KswKAPRyDxDgFgv99Z5MGOrURSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:bb:06:8c:e2:2b:51:de:45:09:da:6f:71:38:1f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Jul  2 20:01:38 2025 GMT
            Not After : Jul  3 20:01:38 2025 GMT
        Subject: CN=32c433eae7314db17ca198e5d6c1ff3233463e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:0d:c0:76:2b:7c:2d:ac:61:6d:53:ab:eb:
                    42:4a:d8:af:8f:ff:77:18:73:65:91:ea:9e:fd:22:
                    16:52:8a:3f:9b:00:b0:d1:15:d5:f7:32:04:82:2e:
                    b3:22:de:ff:cb:d9:f7:28:72:d1:33:eb:89:f0:8d:
                    b0:c1:bb:5f:5a:ff:d1:0b:0f:fd:c9:2c:11:f3:dc:
                    70:44:24:49:6c:27:23:38:21:21:c8:d5:fd:d4:64:
                    00:68:57:1d:d7:83:9d:34:89:c6:33:02:26:54:4d:
                    a2:e6:2b:33:c2:2c:6a:10:3a:ef:3c:a9:e8:b5:c7:
                    0a:cb:86:f7:25:af:3b:e1:7d:5f:db:af:55:6c:c1:
                    b0:19:4d:f0:40:8f:8b:aa:9f:4b:21:22:80:93:eb:
                    04:07:9c:a5:00:24:96:a8:22:a1:40:73:00:b7:94:
                    95:70:17:88:1d:87:b2:5b:c9:81:be:74:2e:81:31:
                    04:bd:31:e8:7f:9d:33:8d:25:18:1a:ef:7f:17:fb:
                    b8:e5:19:b1:51:64:34:9f:ed:33:cc:ab:60:52:eb:
                    c6:68:c7:6b:60:86:71:72:47:de:75:13:ad:46:32:
                    45:a7:da:f4:10:e2:0b:79:c4:a4:17:e8:99:8e:20:
                    d3:93:71:41:a3:62:04:64:78:6d:d8:72:f8:60:43:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C4:33:EA:E7:31:4D:B1:7C:A1:98:E5:D6:C1:FF:32:33:46:3E:7A
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:dd:c6:5c:9a:ba:08:67:b6:09:a4:00:29:f2:6e:36:8c:66:
         4d:48:8d:60:6f:23:e5:e2:1c:19:48:cb:96:0f:ee:b6:b5:ea:
         c8:4d:f4:c7:b7:e2:dc:90:0a:97:27:e5:da:83:9a:ad:e7:f9:
         7f:62:34:2a:92:cf:7a:08:37:97:70:a4:b1:9b:21:8b:56:ae:
         4c:ea:5a:ca:d7:b5:b7:96:1c:fb:2e:ba:0d:a5:6f:d9:eb:0b:
         ee:7b:55:9d:65:85:5c:ed:bb:7e:e0:d6:ac:e9:ed:d4:15:48:
         9d:7a:29:b3:b7:3c:3d:32:4e:83:49:22:ae:2a:60:cb:a3:9a:
         dd:0c:2e:80:4a:f0:a3:8f:7f:2b:59:36:a2:3e:69:80:57:8f:
         1e:d7:13:d6:3f:45:8a:95:a5:10:fb:ea:80:47:34:09:e0:39:
         a0:98:dd:47:d0:2e:d2:9f:22:e7:ee:5c:cc:d1:0e:8b:42:57:
         ed:36:2b:58:57:7f:a9:92:b5:5b:4a:7f:6e:65:bc:8a:b2:8d:
         df:fc:62:98:b1:19:2b:19:29:9a:fe:0f:4d:10:0d:2e:3e:4f:
         95:b5:dd:94:66:59:cc:37:fa:59:c4:da:68:70:08:4e:eb:81:
         90:c4:a5:61:e7:e7:0e:d0:0b:0d:6c:63:2e:69:ac:36:60:90:
         a2:d0:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:22:00 2025 by rpki-client