Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
File:                     HWcc95_PZtKf7A13pmp9DqG7dZs.mft (raw, json)
Hash identifier:          mFPEtrceG4jiNIK9SEyF5Th1CF8Rv8fz+0mYlu6is2o=
Subject key identifier:   D8:DA:DF:7D:23:D4:40:D8:19:8F:61:D7:A5:3C:00:DE:97:ED:03:EB
Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
Certificate issuer:       /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Certificate serial:       0197B7B34C7119A56E164AE1DF023E285136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
Manifest number:          078F
Signing time:             Sat 28 Jun 2025 18:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:10 +0000
Files and hashes:         1: HWcc95_PZtKf7A13pmp9DqG7dZs.crl (hash: sT+VA1Wo7dB5mFNMN2BU0YPQ+1FeDOaeEsuDG935LaM=)
                          2: rqzhVkzi0h4-wh5hdOyTariCyBE.roa (hash: JZPGst2h9b4mhNt9N69P+3mEwzrtYiQhlPMWkUbgxjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:4c:71:19:a5:6e:16:4a:e1:df:02:3e:28:51:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
        Validity
            Not Before: Jun 28 18:01:10 2025 GMT
            Not After : Jun 29 18:01:10 2025 GMT
        Subject: CN=d8dadf7d23d440d8198f61d7a53c00de97ed03eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:33:f3:4a:45:61:b4:dc:1d:2d:20:c8:73:
                    a7:7e:df:84:8e:1d:19:06:27:04:cf:85:c2:fe:e4:
                    8f:20:1e:37:ee:9c:34:d5:08:0c:6b:46:5f:99:d4:
                    e8:41:68:0b:6d:55:4b:99:47:4a:74:89:66:11:84:
                    8a:18:27:47:17:26:08:32:09:d2:7e:a1:e6:23:0c:
                    16:1c:16:2a:90:b7:be:70:d7:f0:03:27:9d:ea:cf:
                    dd:c0:74:8f:1f:7b:37:15:9e:f6:cb:2e:85:5a:3e:
                    40:9b:2b:6b:19:3a:ec:23:21:86:9c:85:c8:c3:3e:
                    4f:c1:c6:61:46:e8:8f:b7:26:ec:f5:4f:dd:42:17:
                    ab:1b:4e:e5:50:d7:eb:7c:57:97:88:a9:0d:eb:c0:
                    e9:8a:30:e5:85:33:a5:e5:1c:1c:1e:b6:f7:c2:36:
                    ab:99:50:8f:73:81:b2:4a:ec:53:e8:96:81:8c:03:
                    97:1b:04:7e:6e:9d:70:b7:fb:94:f8:59:38:5c:34:
                    0c:39:58:af:61:cc:8f:ab:7d:e6:f1:2c:6e:31:3d:
                    a2:e9:bd:5b:d4:32:ca:46:2b:bf:2b:96:75:bf:a4:
                    4b:bc:07:b3:1d:02:4a:8b:c4:8a:b6:52:56:03:6f:
                    6a:cd:cd:2e:ad:4a:f4:9d:41:62:de:e9:29:c1:41:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DA:DF:7D:23:D4:40:D8:19:8F:61:D7:A5:3C:00:DE:97:ED:03:EB
            X509v3 Authority Key Identifier:
                keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:76:d2:57:7f:52:83:89:d0:e3:fc:25:20:55:0a:04:de:2a:
         08:5a:1b:d3:12:db:99:84:6f:a4:2d:84:c2:88:4f:9a:02:73:
         ad:32:fb:a2:cf:ae:43:e5:92:d9:d7:d7:67:4a:d0:79:7a:85:
         3d:81:10:c6:68:c7:16:65:7b:f1:ca:7c:51:67:19:89:b0:3b:
         f4:e5:39:fd:00:9e:4d:5c:cf:22:e6:5c:77:dc:2d:3d:7d:97:
         74:8f:80:25:60:f6:09:74:2c:7c:e6:0d:8c:5d:39:57:9e:48:
         cb:fc:a2:16:55:ae:26:67:d8:7b:0b:12:77:eb:ab:c4:24:98:
         05:41:bf:22:a3:57:9f:dc:fb:69:3c:5b:77:2d:41:05:64:61:
         af:fa:a9:c8:d4:13:0f:63:9b:cd:31:42:22:f2:d7:00:fe:73:
         13:da:e8:eb:a4:08:40:f1:0d:2b:c9:ec:b1:e8:04:b4:75:0b:
         99:2d:84:ea:17:7d:da:0a:7e:07:93:49:22:1c:2c:b0:7a:12:
         0c:6a:a0:85:36:7a:0a:60:6c:55:70:3e:2f:e6:8e:3e:4e:4b:
         b3:0c:96:ae:a9:c9:69:6a:b6:f0:0d:45:68:23:24:7e:31:81:
         39:bf:97:81:0d:90:b9:51:98:f5:82:db:d6:58:42:a7:2b:f1:
         58:d8:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:54 2025 by rpki-client