Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
File:                     Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json)
Hash identifier:          rLP6emGqJHQVZpbont6Tou8fr9gclkg3V6+6mdLGsbA=
Subject key identifier:   4F:04:4B:C5:CB:3F:C6:43:86:3D:C9:2A:8F:E6:76:D2:B1:04:E9:DA
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Certificate issuer:       /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial:       0197B70EB4D682420DEB7DF4BA1D4BC7851E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 15:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:23 +0000
Files and hashes:         1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: Y216V9CofbYqBPZtzNxtvuQ2f0w5UYlMEcuGTJXe5ks=)
                          2: KAFC3cLT9QH5ScoLRsIonvwUhMU.roa (hash: whbGIDYtnScT7kdeeSbgI7fHOy+PdfaxJL9lQqTD7kk=)
                          3: aFjBtMgAkCdur0LAp1zKSd39ajk.roa (hash: k5sQSrUZApP+C12qAI5rWT2beBv2HXfS7efknu8qI8M=)
                          4: fc1Tc2Vdh2udhGPhrIhiUsNRmh8.roa (hash: an6cVXKMyV249udKkEMio/99yuvp5X9umnLVJSDoDVM=)
                          5: keIeKvMj5GFcFpqn4YnewTjX5AI.roa (hash: LybLvk7YVa5Nzz7hllr9jrHmTPWaVPacnhSof9pKAqc=)
                          6: n6Wyt3faNKWbYMKkn5PEP-ye3uo.roa (hash: dY4BYFMUjOYkYHFpRXEolqHG+4jJetToXOTWdXYn9Ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:b4:d6:82:42:0d:eb:7d:f4:ba:1d:4b:c7:85:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
        Validity
            Not Before: Jun 28 15:01:23 2025 GMT
            Not After : Jun 29 15:01:23 2025 GMT
        Subject: CN=4f044bc5cb3fc643863dc92a8fe676d2b104e9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:5d:66:e4:be:5b:bc:14:0f:4c:79:3d:f9:
                    8a:bb:53:74:56:e4:d3:a8:00:67:ba:c0:77:ce:9e:
                    58:21:33:6c:8a:35:94:cf:06:e1:94:f0:02:23:ef:
                    87:a6:11:d7:e1:0f:ae:73:1d:40:01:64:31:07:24:
                    cb:93:f7:54:3b:f5:36:81:5e:b0:d4:ca:37:5c:c6:
                    52:3b:55:05:29:5f:ff:08:6d:99:ef:86:f4:21:64:
                    40:9f:37:cb:6e:f4:a0:53:54:d1:8f:28:e5:4e:de:
                    1f:19:55:cd:b5:2e:ac:3e:c4:29:cd:7f:a6:33:17:
                    f1:a9:f9:81:40:c5:58:0b:58:74:7f:cc:6e:94:14:
                    3c:31:ea:2d:e4:1f:6e:62:1f:50:d3:f6:96:4d:3d:
                    be:8b:06:5b:36:e3:dc:3c:55:eb:c1:dd:e6:a3:bd:
                    38:da:cf:13:b4:26:c7:38:ea:f4:fa:a0:90:49:54:
                    9c:de:d6:aa:d0:37:93:b7:6e:db:6f:48:b2:04:72:
                    81:d8:62:c1:54:27:6a:69:b3:3d:ca:f4:31:e4:32:
                    d2:08:3f:41:62:a7:c0:83:e4:ab:37:7c:5e:3a:a2:
                    6e:26:5f:2b:23:e4:1d:6f:4a:b9:d4:33:0d:80:81:
                    b2:c3:1b:1e:88:2a:cc:d7:44:64:d7:92:d6:d2:49:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:4B:C5:CB:3F:C6:43:86:3D:C9:2A:8F:E6:76:D2:B1:04:E9:DA
            X509v3 Authority Key Identifier:
                keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:83:aa:a6:ba:df:ea:2f:74:7e:7d:60:7c:2e:ee:4b:1a:47:
         bd:71:bd:98:bf:6c:ad:44:86:cf:bd:b3:9a:11:7b:0b:83:f2:
         aa:d7:57:da:08:a0:58:4a:8a:43:6b:d3:53:79:6b:c6:ee:7f:
         ea:fc:97:52:8a:ea:79:ae:21:d2:24:88:b9:02:f5:b2:cf:ef:
         24:49:04:68:1e:04:24:fd:43:fe:48:be:f8:83:fa:8d:1d:31:
         fc:1d:96:ef:11:3c:b3:0d:fe:19:07:f2:ee:60:db:74:7a:c1:
         51:cc:79:fe:c8:51:d4:04:2d:69:ee:0c:b1:cd:8d:d8:49:31:
         34:e1:9b:77:09:ef:15:48:ad:bf:ea:ff:8b:6a:af:23:d8:67:
         71:7a:e9:38:1c:38:a5:67:20:4b:ef:59:b0:3a:ca:69:89:17:
         29:0c:df:e2:84:95:01:62:28:b7:7e:41:6d:c4:76:cf:a2:bf:
         9a:d7:05:21:db:cc:bc:d0:11:b5:d7:f1:69:0f:a3:bf:90:05:
         aa:e1:48:54:9f:b9:21:99:e7:0a:67:03:89:25:fa:4f:b7:82:
         0c:58:2d:f7:6d:41:a8:e8:c2:71:0e:53:c8:4f:b2:ff:30:af:
         43:01:f2:bb:da:4f:ac:fa:0b:fc:b4:f2:e9:68:1e:58:95:bd:
         9f:e3:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:27 2025 by rpki-client