Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
File:                     H_HOmuJWMQK_jqcqieBhUu9wWLI.mft (raw, json)
Hash identifier:          E3lP89oZqexAq61IakN56FsNxbok6SfQa1Hnp9KNn1E=
Subject key identifier:   60:8A:D1:0F:0E:AB:E4:54:66:19:B8:B7:D2:F9:7C:0D:72:8E:5A:9A
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Certificate issuer:       /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial:       0198D5839FC64A7B677255A3F64CED56F6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
Manifest number:          0996
Signing time:             Sat 23 Aug 2025 06:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:29 +0000
Files and hashes:         1: H_HOmuJWMQK_jqcqieBhUu9wWLI.crl (hash: sPj5th7FuGZd9P1o3zZuwKC08gR3WDaTKtWN4MxCKA4=)
                          2: y725qdTMwrOghX8GfkxscKc-PM0.roa (hash: EDVLr0vu1gCBKbpCOMXFSj7zevxafD+c2G6jh65rh+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:9f:c6:4a:7b:67:72:55:a3:f6:4c:ed:56:f6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
        Validity
            Not Before: Aug 23 06:00:29 2025 GMT
            Not After : Aug 24 06:00:29 2025 GMT
        Subject: CN=608ad10f0eabe4546619b8b7d2f97c0d728e5a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:2d:5b:b1:8e:eb:2e:d4:fe:23:f1:3f:63:
                    95:4e:97:e2:16:13:91:48:47:ed:52:ca:14:6e:27:
                    32:ab:8e:0f:5a:f4:ca:15:a4:8e:b5:3c:89:53:30:
                    bf:ae:0c:6e:fd:60:63:13:b4:39:ef:56:2d:cb:dc:
                    02:b8:fb:91:b9:48:00:c6:87:7d:30:f1:ec:9c:a2:
                    cb:5a:21:82:40:ec:49:01:1a:92:58:d9:18:b0:f5:
                    4c:67:00:f0:39:de:cc:13:49:0c:1d:ed:9f:4e:42:
                    a8:90:90:8e:86:82:34:11:5b:9c:3e:8b:26:df:70:
                    a8:3a:ca:c4:c8:24:73:a8:f1:68:57:22:1d:31:e4:
                    c1:18:2d:2f:f4:41:66:ef:ea:f7:00:01:9d:93:35:
                    dd:8b:55:7d:bd:a7:18:61:5f:0d:e9:06:a3:cf:2f:
                    ac:e3:da:9b:31:58:6a:88:2d:80:3f:35:f2:4b:ae:
                    d9:31:45:86:fb:54:18:92:b7:b3:35:fb:73:e8:67:
                    cc:01:d1:40:62:ff:6a:11:a5:38:69:5d:dd:75:62:
                    c0:fd:29:dc:e3:4f:2b:c8:c5:fe:e4:d3:dc:e4:cb:
                    c5:9e:80:fb:2a:07:ef:ff:71:ff:32:75:35:b5:18:
                    34:a9:0d:a5:62:89:18:77:f3:01:42:47:23:32:fb:
                    13:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8A:D1:0F:0E:AB:E4:54:66:19:B8:B7:D2:F9:7C:0D:72:8E:5A:9A
            X509v3 Authority Key Identifier:
                keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:a1:e5:87:78:6b:d8:2c:82:52:d1:87:f7:30:31:07:e9:
         d2:48:1d:7e:d8:df:3b:7a:d3:8a:39:6d:70:5b:73:d4:ae:69:
         5c:7e:50:b7:f8:13:0d:a4:9a:a3:22:5b:5d:3a:75:04:b5:5e:
         41:da:95:ee:86:e0:ef:d7:9b:6b:68:f0:3c:e3:14:c5:1b:49:
         9e:30:7e:3b:12:cd:0b:18:cc:c8:83:e9:10:5e:bf:1b:25:48:
         f2:f0:1b:99:ee:96:3c:f8:78:27:84:73:3f:f0:80:1a:a7:aa:
         51:db:59:07:f2:b6:2f:00:0d:d6:73:6a:6f:bc:41:9b:38:a7:
         8e:49:4b:52:07:39:0a:da:93:57:3c:46:23:8f:0b:99:a1:2e:
         ce:86:3e:21:43:97:73:fe:b7:b9:d3:97:18:08:3c:10:20:45:
         01:ea:06:99:d4:ba:62:7e:d0:07:8a:09:0a:4a:2d:97:67:ed:
         d7:22:32:1f:86:1e:ad:da:68:59:f9:fa:95:07:2b:e0:90:e5:
         71:33:eb:6f:99:57:d8:cf:d1:76:0b:4b:17:f7:d1:3c:70:9f:
         a7:ec:0d:f7:f3:56:ea:5d:5a:b9:1d:ee:21:19:0f:40:e0:9f:
         e7:1e:44:51:ca:80:e1:b6:1a:75:f9:b7:7d:92:2a:7a:df:a9:
         2b:81:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:26 2025 by rpki-client