Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File:                     HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier:          I4crGPmIeSuXdIs5L08+3xe4W4O7Z7gMzFFELDYpECk=
Subject key identifier:   F9:BA:CD:FF:11:DC:15:CE:F9:87:C9:92:72:D5:81:92:37:16:0B:9F
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer:       /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial:       0196C2021D801B1CA47B64FC244751A93CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number:          107F
Signing time:             Mon 12 May 2025 01:00:40 +0000
Manifest this update:     Mon 12 May 2025 01:00:40 +0000
Manifest next update:     Tue 13 May 2025 01:00:40 +0000
Files and hashes:         1: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: rCfNFuaxhQqAkBV9EBpt06s+AA4adTd6UMzJAQiOqQI=)
                          2: I2Um-BptLNwnopUXCKyaHVD-kHY.roa (hash: oaTE3K1HG85ox8sjIAMWSASmDZ12fR3RjImb2V3uqGk=)
                          3: V64dlNuRxsB4pj8KUNyI80O85tg.roa (hash: 2nVKvx4azH+bxWy0PRhnAkeITVbTxn6s3MeHunV69tk=)
                          4: ix1qxgL2TzzMLmdaUd3VQtSj-II.roa (hash: 4xQMMqWbgUGGtddTWP7CtZIT8IknDRDr3HPboptp2+U=)
                          5: rardublDZeUv0hlPIjK9MqgHsg4.roa (hash: btib6COENGJ7/XnX5VKYkD1R1KApIIXPG5heSZL4IwY=)
                          6: yCRbHo_vgtvhBnONk9PIjVNkpK8.roa (hash: FITUxbAsnldqLGUftyDR4kBxN/gcDMvjb5JKmbT20Tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:1d:80:1b:1c:a4:7b:64:fc:24:47:51:a9:3c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
        Validity
            Not Before: May 12 01:00:40 2025 GMT
            Not After : May 13 01:00:40 2025 GMT
        Subject: CN=f9bacdff11dc15cef987c99272d5819237160b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:73:f6:e4:80:0b:ce:0c:1b:24:31:26:4a:
                    5f:82:a3:c0:c5:63:68:00:b4:ce:8c:f8:c6:89:2a:
                    83:7f:52:a4:93:e7:f1:41:7a:e1:38:23:32:39:1d:
                    20:9d:91:00:04:6a:7c:a7:80:26:7b:da:11:14:3d:
                    3d:30:72:24:c1:39:67:e6:db:83:83:bf:76:75:f4:
                    72:31:7d:11:da:55:52:dc:12:1f:16:3d:39:98:8b:
                    65:a5:6c:b4:5b:fd:58:25:51:95:38:66:f9:3f:2b:
                    80:35:4b:00:a7:b0:62:0a:51:37:83:f8:3e:3d:a7:
                    57:2d:7f:38:32:b5:03:28:59:4d:d8:a1:ed:b0:d5:
                    37:ad:a3:b4:bb:d1:2e:b5:8c:4a:5c:92:f6:bb:54:
                    d0:4c:75:82:f5:d6:5d:c3:31:8e:fc:7c:fc:3c:f0:
                    63:db:43:30:8e:1a:1f:c0:15:d8:13:7a:e6:f1:45:
                    9f:0d:1c:47:3e:8a:5b:f2:dd:ec:8e:04:5c:d6:69:
                    ab:58:66:9b:1a:20:24:b5:b8:1a:b8:be:f6:4f:17:
                    e4:13:de:21:be:0c:30:44:8e:93:19:a9:37:8e:7f:
                    c5:94:ad:94:83:d9:0e:5f:0a:11:58:6a:39:73:4f:
                    b7:8d:dc:0f:25:6d:85:db:76:fb:fd:14:5d:ca:d7:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BA:CD:FF:11:DC:15:CE:F9:87:C9:92:72:D5:81:92:37:16:0B:9F
            X509v3 Authority Key Identifier:
                keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:02:ce:75:8d:c2:70:71:25:7a:2f:30:6a:2f:7d:93:37:45:
         4e:36:ae:a2:d7:30:ea:b7:b1:d4:e9:4a:a3:fe:95:0a:9c:09:
         17:55:78:fc:71:ca:4c:9a:75:ef:3a:92:9a:21:37:ad:17:af:
         3e:2e:fb:c9:0e:97:fd:ed:cc:b8:ea:39:af:c2:00:fa:b2:4d:
         8c:db:c2:3f:e8:90:1d:62:f1:c8:ce:3d:89:ef:2a:d5:36:2e:
         b9:7c:84:b2:57:ca:42:a2:94:96:f6:ac:4f:e2:a9:57:d8:18:
         e7:23:25:19:d0:39:e8:c6:95:07:ba:06:fc:0d:fd:4d:6b:48:
         70:48:65:99:24:58:9a:03:d9:25:ef:99:5b:a5:0c:7f:d0:71:
         27:59:73:ae:a1:95:15:7b:91:6b:ec:a2:3d:db:fc:20:ac:42:
         22:68:6b:9e:93:0d:0e:55:03:cf:d0:82:5b:92:46:e2:59:f6:
         c0:e0:74:b6:b3:99:32:36:d4:11:d4:80:df:bf:05:e3:50:ee:
         7b:a5:32:4f:42:af:75:dc:a0:0e:99:0b:2a:8e:ac:12:e1:fd:
         a8:cf:41:fe:3e:6e:85:d9:75:01:8c:ed:ac:f9:d6:db:26:e4:
         5c:00:c4:ce:20:62:ab:42:41:d3:db:33:30:32:94:4a:d3:23:
         b3:d6:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:18:39 2025 by rpki-client