Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File:                     HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier:          YjDknuHeuuHlkkNArfHDO1zb+J5QKE/xzaFviXs87kc=
Subject key identifier:   8C:86:89:7B:25:A6:BD:C1:D2:D5:88:38:17:A5:D8:13:57:46:BB:F6
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer:       /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial:       0197B7B334AF212DE154FDFEBB1B815FCFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number:          1101
Signing time:             Sat 28 Jun 2025 18:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:04 +0000
Files and hashes:         1: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: 1wsYD4OnwEjWBkiLxYJLzjlpnKl+QGGE40umt1s78q4=)
                          2: I2Um-BptLNwnopUXCKyaHVD-kHY.roa (hash: oaTE3K1HG85ox8sjIAMWSASmDZ12fR3RjImb2V3uqGk=)
                          3: V64dlNuRxsB4pj8KUNyI80O85tg.roa (hash: 2nVKvx4azH+bxWy0PRhnAkeITVbTxn6s3MeHunV69tk=)
                          4: edFVYVioPZTorF9uuac8djTSV64.roa (hash: Sqg7k+1F+ZM0n3f+ttHkMFPzbVfUdm2GmmTGOixgY9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:34:af:21:2d:e1:54:fd:fe:bb:1b:81:5f:cf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
        Validity
            Not Before: Jun 28 18:01:04 2025 GMT
            Not After : Jun 29 18:01:04 2025 GMT
        Subject: CN=8c86897b25a6bdc1d2d5883817a5d8135746bbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:1d:e2:95:e2:2a:a6:aa:56:d4:02:b9:1e:
                    a1:13:b8:ac:4c:e4:1e:9b:8d:09:7f:e6:d3:3a:6c:
                    6e:e5:08:09:92:18:1a:0f:8e:de:e7:b5:b1:65:6b:
                    41:36:3b:81:78:2f:d2:29:d0:6e:56:05:0c:e8:68:
                    96:98:3a:38:fb:24:b5:6a:5c:30:ae:d0:d3:76:8e:
                    28:63:ac:27:bf:bc:e9:68:c6:fb:d0:fa:89:a6:1a:
                    ed:76:ef:d4:e1:26:14:b0:ff:60:74:19:b7:41:ed:
                    28:d2:41:cf:a6:96:9b:7c:fe:50:84:8a:81:69:20:
                    ab:95:59:49:d4:a1:28:44:3f:12:10:89:01:02:b7:
                    05:bb:eb:38:31:e0:d7:16:22:8c:2c:24:bc:56:c5:
                    9e:ba:6a:5f:40:ee:41:cb:b0:fc:6c:2a:d9:76:43:
                    45:93:7c:a9:b1:d1:c1:f8:a4:96:56:e9:79:2b:76:
                    3a:e9:5a:17:56:ce:80:3d:f2:d2:f4:5c:63:d0:dd:
                    a8:53:f8:86:9e:b9:5a:15:2b:cb:8b:db:aa:b4:88:
                    eb:b2:9d:7a:fe:66:e5:e6:a4:d5:45:9b:4f:47:79:
                    d4:58:88:9d:7e:3f:39:fc:ec:af:15:69:8b:29:7f:
                    ea:46:09:7e:ce:49:9a:51:15:75:db:29:51:35:30:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:86:89:7B:25:A6:BD:C1:D2:D5:88:38:17:A5:D8:13:57:46:BB:F6
            X509v3 Authority Key Identifier:
                keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9d:58:9b:7f:2a:29:9d:f8:04:79:66:85:4e:fd:05:97:06:
         d3:ae:7f:d0:a5:1f:71:5c:fa:22:c6:81:8d:cc:88:80:81:e9:
         64:4e:f1:97:03:d7:20:3c:48:14:1b:99:91:ed:75:f6:c1:16:
         b8:66:f2:5b:e9:2d:5a:bb:83:a0:e4:ad:c6:5d:56:b0:f1:34:
         bd:8e:60:e3:5d:be:88:b6:81:50:9a:82:d8:50:89:aa:7d:12:
         32:25:98:48:d8:67:d2:31:62:fc:3a:36:67:96:12:29:f0:c1:
         c6:1c:75:54:bd:0e:f7:5d:03:6b:d5:9d:2b:8a:81:3e:53:ae:
         d3:ca:2e:ed:b0:20:f3:5d:a6:ab:39:70:9b:e8:b2:f2:6b:e2:
         ad:3e:9d:a4:14:bc:30:be:05:52:e8:61:9e:a4:bd:e1:62:5d:
         db:ef:16:dd:53:3b:b9:6f:d8:c8:d8:50:7c:97:df:55:69:69:
         92:b7:7b:53:ad:69:05:25:8c:fd:02:62:42:e3:00:1e:00:37:
         d5:75:3a:a9:9c:5a:dd:b5:03:97:80:56:1c:83:cf:24:20:09:
         18:71:69:16:75:37:aa:1c:80:62:4c:8b:08:b5:fb:90:3c:9e:
         09:34:41:59:ab:b6:8f:5f:06:87:fd:fa:6d:09:22:8b:d2:f3:
         b1:50:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:15 2025 by rpki-client