Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File:                     Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier:          8aUctHJBwgHTogWG3USMwuh96mjiFpV/AGLcmNK35q8=
Subject key identifier:   A9:42:75:23:66:C2:55:BC:55:FB:67:CF:A0:F7:9C:BD:02:E3:71:BF
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer:       /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial:       01969DF56E9671BD5716EA307C403B6CE86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number:          0D6D
Signing time:             Mon 05 May 2025 01:00:29 +0000
Manifest this update:     Mon 05 May 2025 01:00:29 +0000
Manifest next update:     Tue 06 May 2025 01:00:29 +0000
Files and hashes:         1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
                          2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: 82W1m3rqZzvTb8rWC/8MaZ202P9qXGUx2mgJ7q3e/PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:6e:96:71:bd:57:16:ea:30:7c:40:3b:6c:e8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
        Validity
            Not Before: May  5 01:00:29 2025 GMT
            Not After : May  6 01:00:29 2025 GMT
        Subject: CN=a942752366c255bc55fb67cfa0f79cbd02e371bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:e5:87:ae:af:23:f8:dd:1e:c8:71:fe:9d:
                    24:89:63:33:13:92:43:c3:2f:3f:0c:a9:d3:75:63:
                    4b:b3:ca:c5:8f:cc:e1:2d:a5:4c:4f:77:65:22:8f:
                    29:01:9e:b6:c3:bf:73:94:e0:70:ec:1f:17:24:eb:
                    19:0a:cd:58:fa:a1:24:86:a6:9f:81:11:bd:3b:8a:
                    f7:e7:92:fb:26:3f:71:b5:64:22:0b:ea:75:7b:2a:
                    8e:6f:49:2a:51:11:ce:29:c5:bf:3c:fc:3c:49:eb:
                    8a:78:9e:fd:3e:2b:50:d6:6f:e0:b5:ad:83:76:52:
                    37:d7:6e:24:80:e1:59:11:7a:57:79:31:b9:99:17:
                    06:07:85:24:06:8c:7a:c5:11:51:f1:e9:e8:f3:13:
                    b0:da:79:5c:b2:80:a2:fd:92:b7:2b:a6:4e:2f:5b:
                    20:c8:89:4d:74:7a:c7:cf:d9:9d:fd:4c:10:9a:3a:
                    e3:76:37:0f:af:c8:c0:3c:bb:c8:ac:57:c0:74:5b:
                    f5:62:1f:d6:02:30:57:82:9c:2b:95:b7:d6:a6:a7:
                    2e:33:0d:ba:63:80:41:e5:2c:12:71:da:48:8e:fe:
                    81:9e:fb:59:b9:c1:8d:b6:43:ab:52:8e:60:be:0e:
                    13:ee:a6:59:43:f9:04:88:a4:8f:52:25:dc:d5:eb:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:75:23:66:C2:55:BC:55:FB:67:CF:A0:F7:9C:BD:02:E3:71:BF
            X509v3 Authority Key Identifier:
                keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:3a:64:30:f2:c4:11:45:0e:2e:3a:f9:bd:20:de:3a:9a:
         38:54:52:89:21:ca:6a:3f:cf:cb:7c:da:a0:80:64:4a:a6:51:
         3f:ac:47:e9:77:ad:78:2c:ed:41:07:c4:45:a6:6a:72:29:fc:
         63:42:0a:0a:b7:99:a0:12:0e:9b:5f:74:86:89:33:80:1d:1e:
         58:2d:a9:83:da:59:6d:20:8e:56:5b:34:03:4c:d6:d6:4b:f3:
         a5:2a:d5:ff:62:a4:c7:a6:f0:4f:af:ab:9e:ac:61:fd:49:36:
         17:da:4d:16:87:81:0a:86:b5:62:84:72:74:f3:64:e8:3b:bb:
         fb:bc:b7:c7:bf:5a:e4:7e:0f:f4:79:39:45:67:e2:8e:3f:5e:
         69:27:9e:0a:76:d3:4c:f7:f7:04:ba:89:d0:f3:d6:35:6a:aa:
         4b:8e:7f:0c:83:50:4f:69:3e:c3:1c:5e:04:f1:ed:a1:35:a2:
         b4:56:a7:97:d1:aa:c9:d8:df:ea:86:35:09:a8:b2:67:11:f2:
         9f:ab:e9:0c:ec:5e:fd:99:11:ee:83:9c:9e:10:a6:42:dc:2f:
         fd:09:65:67:23:1f:56:54:e8:15:55:28:be:93:16:65:cf:52:
         01:f3:74:c2:f3:c4:ff:b7:b8:eb:99:3f:a2:ae:02:74:72:0f:
         b2:c2:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:23:08 2025 by rpki-client