Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
File:                     H_HOmuJWMQK_jqcqieBhUu9wWLI.mft (raw, json)
Hash identifier:          BMQGQ0i735oRtR8sLlGTScM2idsw6g5V/nCcxeDSMZE=
Subject key identifier:   95:02:62:22:B6:BF:39:88:39:26:81:55:1B:D7:35:AA:22:78:3D:BB
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Certificate issuer:       /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial:       0197B5C4D07C6418D3C10934A07AC4D90499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
Manifest number:          0901
Signing time:             Sat 28 Jun 2025 09:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:03 +0000
Files and hashes:         1: H_HOmuJWMQK_jqcqieBhUu9wWLI.crl (hash: Xl8TQ+vn6xbTYMEs2D2OkpKsTaXvAiVIHtqq8P0ldl4=)
                          2: y725qdTMwrOghX8GfkxscKc-PM0.roa (hash: EDVLr0vu1gCBKbpCOMXFSj7zevxafD+c2G6jh65rh+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:d0:7c:64:18:d3:c1:09:34:a0:7a:c4:d9:04:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
        Validity
            Not Before: Jun 28 09:01:03 2025 GMT
            Not After : Jun 29 09:01:03 2025 GMT
        Subject: CN=95026222b6bf3988392681551bd735aa22783dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:5f:bc:f9:db:1b:cf:8a:09:2c:8e:b8:5a:
                    ec:48:73:05:a9:06:5f:b5:58:dc:4d:7d:c1:44:63:
                    e2:b0:73:a1:d7:b7:8c:c3:cd:6a:24:d0:ba:c5:b6:
                    46:9a:92:4d:a2:61:7f:ca:d6:58:30:ac:13:5c:36:
                    be:65:f9:65:06:10:44:e4:29:5d:e3:5e:6f:7f:e6:
                    e1:20:23:ca:c5:7d:9e:65:7f:2b:7d:a5:ee:68:98:
                    52:c4:64:41:ed:5e:c8:34:72:b6:6d:71:5c:6f:2d:
                    20:90:48:eb:90:02:8f:d5:b8:97:aa:b3:c4:59:72:
                    35:18:1e:80:b8:7b:26:6e:ce:90:1f:4f:4f:91:24:
                    b0:95:72:30:91:74:76:b7:a7:a4:b4:70:c0:23:9a:
                    d6:1d:44:9d:1f:c7:99:5b:c6:2b:0b:50:34:5e:97:
                    6d:7c:9e:79:63:87:0b:d5:07:37:b6:54:8c:d0:f1:
                    35:4b:fe:6a:2d:e4:a4:e8:11:9b:de:f3:e4:78:2d:
                    a9:86:68:6c:f4:26:d8:71:69:4c:66:ed:40:24:ea:
                    75:56:c9:65:a5:6f:cc:e9:6e:e9:87:ef:0b:b6:00:
                    f3:8c:a8:56:01:24:8e:65:89:03:91:3f:ef:3c:7e:
                    96:02:35:ee:15:a0:01:6e:7e:d3:0c:b1:93:ba:a5:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:02:62:22:B6:BF:39:88:39:26:81:55:1B:D7:35:AA:22:78:3D:BB
            X509v3 Authority Key Identifier:
                keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:df:96:d2:18:86:c7:41:ae:bd:d6:a5:23:55:6d:55:e9:6f:
         7c:70:b7:c4:3a:2f:ef:71:1e:7b:8c:03:13:00:60:66:4e:d0:
         4a:bc:3e:bb:b6:dc:ac:bc:a5:f0:17:5e:f4:7c:68:7f:a8:04:
         51:aa:76:ed:b7:8b:22:92:df:3b:bb:ee:09:98:4b:a6:9a:56:
         a1:20:76:01:b7:95:9f:36:ac:e3:af:63:f0:4f:fc:68:9a:75:
         8c:19:bd:28:e0:10:c1:a8:ce:83:d6:1a:86:0b:2c:33:b2:97:
         e3:7e:9a:b1:28:1c:34:12:a0:c9:88:18:50:d9:d8:88:22:49:
         61:05:9e:65:bd:1f:96:cd:71:05:c6:e4:99:4d:bc:39:78:be:
         27:01:2e:fe:bc:dc:45:c1:7c:11:0c:83:47:84:86:8b:6d:09:
         e7:4c:66:f0:9c:f5:41:20:bf:d3:a8:a3:bc:b1:35:0a:8c:e4:
         e1:64:d0:6f:0d:ce:36:01:5d:9e:4c:c2:ba:71:1f:44:87:94:
         a7:4b:29:05:dd:82:ef:04:ba:c8:99:7d:72:1b:11:d3:3d:f1:
         3a:4b:55:22:d7:c6:bf:d9:22:f2:95:aa:d1:f7:0a:b1:1d:26:
         d7:83:10:b2:95:53:bb:5f:b9:95:b3:91:de:40:0c:c9:f0:ad:
         06:5d:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:32 2025 by rpki-client