Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File:                     H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier:          lvcg9Pr8op9BcHetI4od8Grpk2LkdoCp01Y8y0cfUEo=
Subject key identifier:   80:12:78:A2:7A:6A:58:1D:BA:1C:F3:28:BA:68:FF:52:6C:D4:4D:B9
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer:       /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial:       0196C984432B90DC9EDDFA593B1B4A741BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number:          1539
Signing time:             Tue 13 May 2025 12:00:10 +0000
Manifest this update:     Tue 13 May 2025 12:00:10 +0000
Manifest next update:     Wed 14 May 2025 12:00:10 +0000
Files and hashes:         1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
                          2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: oyDaswTnr/Xd+M+03nNl5zc1mPj9TXSbPrSS5IJyBr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:84:43:2b:90:dc:9e:dd:fa:59:3b:1b:4a:74:1b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
        Validity
            Not Before: May 13 12:00:10 2025 GMT
            Not After : May 14 12:00:10 2025 GMT
        Subject: CN=801278a27a6a581dba1cf328ba68ff526cd44db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:9b:57:28:3a:3a:29:2a:1e:e5:ed:b9:47:
                    d3:57:70:3c:ee:0e:82:42:31:1a:e7:f6:ae:a0:df:
                    9b:8a:f1:9e:21:42:8b:26:bf:37:c0:91:b9:5b:02:
                    a7:88:c2:85:df:e1:39:57:09:e4:8e:9c:79:43:5e:
                    e5:bf:d4:95:6a:4a:1e:fc:8e:7b:66:2f:2a:a9:00:
                    b0:52:5a:f4:76:d4:02:4f:1f:1e:82:9e:5f:5b:96:
                    33:6a:e7:5d:05:3f:aa:0a:b7:69:fc:f5:57:3b:89:
                    6e:5a:d8:3f:11:ab:d1:53:2c:bb:70:91:b4:ba:74:
                    12:24:c8:23:d5:b5:73:03:60:82:3a:a6:ac:b9:c6:
                    69:5d:76:6a:af:a0:13:02:ce:7e:9b:09:1c:ff:90:
                    ad:d1:ba:cf:fa:45:a1:76:98:f8:5a:ae:1e:7d:0d:
                    d8:8d:7c:58:75:40:c4:14:72:ca:3c:f0:0b:52:82:
                    d7:51:c9:7a:71:47:1a:84:1b:42:ab:cb:ca:f6:c9:
                    0e:29:a6:65:28:4f:b4:f3:f7:0f:f4:50:70:6b:61:
                    6c:41:a3:2d:d1:11:ea:45:83:5c:b5:d5:6c:c1:6e:
                    9f:48:e7:4a:ba:6f:40:09:a4:2c:68:af:a4:31:3b:
                    70:a3:64:9a:0f:b5:fc:0c:3a:42:a3:32:1b:79:06:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:12:78:A2:7A:6A:58:1D:BA:1C:F3:28:BA:68:FF:52:6C:D4:4D:B9
            X509v3 Authority Key Identifier:
                keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:41:9b:7f:d6:f1:ca:12:0e:f4:16:33:cd:df:60:b6:37:30:
         4c:de:eb:64:43:fd:3b:be:67:84:58:0a:15:75:97:41:db:a2:
         69:ef:82:da:64:16:55:d9:3b:0f:b2:96:2b:ac:d0:aa:95:47:
         b8:6e:a4:ed:03:b5:35:2b:70:2d:76:a8:0c:f9:74:2a:3d:9c:
         38:cf:8f:34:20:d4:7e:9f:d9:ac:b8:57:aa:ef:cf:96:cc:d5:
         95:4b:c4:bd:9c:02:b2:33:2b:ae:60:77:80:c4:3c:ce:0a:0c:
         ae:af:aa:c9:5f:9a:7f:19:b8:ff:2f:ca:d2:12:03:a4:07:81:
         f5:cb:46:43:0d:43:a1:c6:c3:6b:c9:41:c5:07:ef:bc:21:49:
         d2:c4:96:d5:4d:a8:9e:06:6f:18:bf:36:27:41:4c:af:53:32:
         6f:dc:08:83:93:ff:49:a1:c6:b8:4b:56:f4:39:b4:10:cb:20:
         4c:41:20:c4:7c:1e:08:a1:95:5b:ab:c0:ef:31:46:c2:8f:b5:
         5d:80:51:b7:5c:fc:57:6a:a4:a0:7c:96:f5:df:ea:a8:87:e1:
         db:1d:e4:ac:63:93:f6:a3:f1:c8:7d:a2:d1:3e:68:a0:8c:e3:
         5f:b8:c1:3b:20:b6:64:f2:5b:f7:5a:05:8d:75:2e:98:dc:cb:
         f7:ee:4b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:47:15 2025 by rpki-client