Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File:                     hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier:          UraXBcAqHPWU79OLvemmDzZKXg/uWHOTBURbji2JHDM=
Subject key identifier:   D9:8C:CB:14:5A:33:8B:44:21:8E:BD:E9:DB:F5:9D:54:3B:64:84:0B
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer:       /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial:       0196B6D95D0E7DF090911AEA042904E2128E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number:          062A
Signing time:             Fri 09 May 2025 21:00:20 +0000
Manifest this update:     Fri 09 May 2025 21:00:20 +0000
Manifest next update:     Sat 10 May 2025 21:00:20 +0000
Files and hashes:         1: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: +GLx6tqMrypE4IiB2ji3mqrwEHtJY4q88TwJQR/B2Jk=)
                          2: iVxulShReTYBVaVMHOSAPgJMX4w.roa (hash: K1U4ekJDUmOT/6sNVV1rdRQsFS3D9+kf/By0ijYc4Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:5d:0e:7d:f0:90:91:1a:ea:04:29:04:e2:12:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
        Validity
            Not Before: May  9 21:00:20 2025 GMT
            Not After : May 10 21:00:20 2025 GMT
        Subject: CN=d98ccb145a338b44218ebde9dbf59d543b64840b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:e2:52:2f:33:d8:93:28:20:73:5c:5e:9b:
                    e3:6d:e3:6c:26:e7:75:75:84:7e:5d:95:47:c6:84:
                    c6:0d:db:1c:b5:c7:15:de:41:bf:1f:d0:70:91:69:
                    ad:46:c2:51:5f:df:87:0f:fc:ae:19:a1:b4:4b:ed:
                    8e:33:50:9a:e3:19:c3:24:17:62:ef:01:c8:fb:2a:
                    bd:7e:f0:4b:32:fa:2d:5a:99:c1:f5:4d:38:63:e6:
                    1c:5d:92:31:8a:54:de:0f:20:6c:5d:69:45:5f:0e:
                    82:31:37:16:bd:46:65:a3:11:20:61:eb:ae:f6:0b:
                    ef:ce:ca:30:6f:dd:5a:7b:a1:88:d8:f8:b0:15:21:
                    b3:0e:23:50:7b:dd:85:f3:01:d4:56:a8:f8:29:93:
                    27:65:44:d0:d0:ac:6b:bd:10:1d:59:68:2c:07:12:
                    12:03:d4:cc:76:c5:57:17:f7:03:8f:34:b4:fd:2a:
                    9c:d3:7e:1f:eb:14:f6:39:80:5c:0e:14:5f:1c:01:
                    ed:e8:25:ce:cf:a4:e0:64:e5:21:79:e4:bf:fa:13:
                    9b:76:bf:de:79:b4:f8:c0:48:52:d2:a5:e2:83:83:
                    fb:b6:4c:f1:97:21:27:7d:f1:10:a7:20:dc:9c:b0:
                    e9:6e:c9:6d:24:54:2b:72:ad:58:b9:f7:ef:af:58:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8C:CB:14:5A:33:8B:44:21:8E:BD:E9:DB:F5:9D:54:3B:64:84:0B
            X509v3 Authority Key Identifier:
                keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:43:4f:2f:c5:fe:11:97:a4:0f:36:c8:5c:39:0a:18:d6:
         44:28:3a:50:29:e7:b1:30:99:99:a7:0e:89:90:48:53:fb:76:
         34:75:f3:f1:40:d3:4a:5e:c1:7d:fa:b6:97:67:fe:bc:25:17:
         30:04:d1:cc:1a:51:1c:54:c1:30:75:84:ec:aa:96:cc:b0:bd:
         61:24:da:a8:c2:d4:34:50:45:fe:35:03:48:ff:fd:b0:3e:e0:
         9f:64:91:28:4c:74:47:87:84:37:09:89:35:ad:c8:34:55:ad:
         8b:c0:75:2c:6f:06:08:04:ad:6a:93:16:00:39:1e:1d:6e:cc:
         d4:05:c6:91:a8:6b:ab:4c:03:23:c9:17:fc:3f:46:19:55:c2:
         a4:41:cf:a1:50:7c:05:b8:5e:1d:67:66:13:2e:44:2c:29:64:
         51:30:33:e6:f6:98:66:f1:76:1b:5d:7a:5c:e1:36:1d:e1:74:
         03:0f:da:bc:4c:99:9e:cc:09:d6:92:0a:a0:fd:f6:b0:4e:83:
         a7:fb:55:27:cd:88:4e:ad:3c:18:13:8a:ae:75:57:61:72:07:
         d3:8a:f7:2f:1e:7c:90:fb:63:ff:d1:ef:80:9b:93:90:de:10:
         b1:da:f1:5d:de:15:db:51:5e:4f:d4:23:ab:3c:92:a2:7c:3b:
         57:68:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:16:02 2025 by rpki-client