Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
File:                     HqtOAMDZLLUBu7IjrPA54nCR204.mft (raw, json)
Hash identifier:          gqOXnjNrz/xswFgZ5Y6xqO5+xwlc0WClZ/mWzUFzz5Q=
Subject key identifier:   CC:D6:78:7E:F1:87:49:23:E3:7B:64:20:8F:68:EC:78:F3:25:DF:51
Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
Certificate issuer:       /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Certificate serial:       0197B6A110FEC9EECFC4359A3318698EB6CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
Manifest number:          1480
Signing time:             Sat 28 Jun 2025 13:01:38 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:38 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:38 +0000
Files and hashes:         1: HqtOAMDZLLUBu7IjrPA54nCR204.crl (hash: Izc+kxZFIMp2H4qYZd1pJBxwxsJ9KIC3eVfrme05y0k=)
                          2: TRIkg-QwPxodaMNyhJudZJsULfg.roa (hash: ufMh2ZHdT1rvdo6TTuMqjAAVY8O4a0cCsUjxcMvHh8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:10:fe:c9:ee:cf:c4:35:9a:33:18:69:8e:b6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
        Validity
            Not Before: Jun 28 13:01:38 2025 GMT
            Not After : Jun 29 13:01:38 2025 GMT
        Subject: CN=ccd6787ef1874923e37b64208f68ec78f325df51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:a5:ab:5b:b2:cc:6e:65:43:ea:ef:74:f7:
                    53:78:b9:a2:24:66:57:15:3d:bc:8d:75:e3:fe:12:
                    e0:e8:17:5c:39:3e:47:4a:66:33:5f:de:8e:5d:fd:
                    ee:90:94:e7:9f:10:24:f0:bf:c2:79:ce:e0:98:2a:
                    f2:43:ca:1e:af:8f:18:c8:53:6e:5f:b8:2f:19:33:
                    17:95:30:61:83:ac:82:db:62:50:64:86:9e:c5:70:
                    7e:dd:09:2c:5c:56:3e:97:f0:5b:98:f4:69:d4:05:
                    8b:b4:24:ef:f8:66:7a:f7:b5:6e:8a:5c:06:bc:1d:
                    83:37:55:20:0c:53:6f:8c:18:4f:e5:e6:01:e6:48:
                    29:fb:53:98:a3:20:9c:26:7e:c4:39:f9:04:74:79:
                    c3:2f:f3:90:fd:ac:19:0a:ba:37:84:6b:d9:59:5c:
                    25:f7:73:de:0d:6a:6a:b6:6e:cb:85:d8:1a:6b:95:
                    95:44:30:48:9a:71:d0:8d:8b:ed:c3:ab:b3:b7:be:
                    2c:6c:ce:41:90:13:e7:86:43:36:84:61:c7:d8:b9:
                    0e:df:e8:8e:e5:b0:f3:20:ad:b3:89:08:44:49:7c:
                    04:55:93:33:16:20:d8:5f:34:88:c9:d8:d8:e3:ce:
                    40:e1:3e:1f:2f:5b:4a:01:08:af:80:04:a3:7d:87:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D6:78:7E:F1:87:49:23:E3:7B:64:20:8F:68:EC:78:F3:25:DF:51
            X509v3 Authority Key Identifier:
                keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0d:b4:95:fa:1e:a5:af:e2:81:77:51:0c:e0:7a:18:4a:8a:
         78:c4:bb:b9:ee:f7:ad:50:72:c1:c0:e6:4f:de:72:77:74:31:
         75:22:00:16:c7:f2:0c:38:09:cf:75:48:78:6f:46:f3:9e:b4:
         42:c1:dc:15:11:a1:cc:4b:73:ca:89:71:0f:98:1a:0a:fc:77:
         45:34:d1:c2:af:d1:07:8c:04:09:1d:a4:44:66:78:d1:e2:f0:
         53:f6:08:c5:bf:43:3d:49:86:e5:5b:b9:b4:6d:1b:82:e7:1a:
         cb:67:09:f8:a6:04:59:93:6d:28:1e:90:0b:53:91:e0:18:4b:
         31:d2:73:c7:84:07:12:a5:e6:36:c1:0c:cb:75:94:e9:c1:f6:
         df:d7:06:98:7c:8e:31:b8:ef:dc:29:04:09:14:a0:88:cc:2d:
         ef:34:51:92:7a:7c:45:ed:5b:46:a3:21:f7:30:e2:08:2d:7a:
         37:a0:cc:be:99:1e:92:b4:2b:8d:5d:a5:4f:3d:61:06:c0:1b:
         a0:da:27:81:d9:35:1a:09:90:39:b8:90:20:48:ec:68:70:1a:
         7b:5b:95:c3:84:c8:aa:c5:75:e9:6f:53:fb:fb:aa:7d:e6:2a:
         b8:ae:79:b3:50:f2:3b:9b:74:c8:3b:eb:d3:76:67:65:f1:eb:
         b1:c2:6a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRD+ye7PxDWaMxhpjrbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWI0ZTAwYzBkOTJjYjUwMWJiYjIyM2FjZjAzOWUyNzA5
MWRiNGUwHhcNMjUwNjI4MTMwMTM4WhcNMjUwNjI5MTMwMTM4WjAzMTEwLwYDVQQD
EyhjY2Q2Nzg3ZWYxODc0OTIzZTM3YjY0MjA4ZjY4ZWM3OGYzMjVkZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CWlq1uyzG5lQ+rvdPdTeLmiJGZX
FT28jXXj/hLg6BdcOT5HSmYzX96OXf3ukJTnnxAk8L/Cec7gmCryQ8oer48YyFNu
X7gvGTMXlTBhg6yC22JQZIaexXB+3QksXFY+l/BbmPRp1AWLtCTv+GZ697VuilwG
vB2DN1UgDFNvjBhP5eYB5kgp+1OYoyCcJn7EOfkEdHnDL/OQ/awZCro3hGvZWVwl
93PeDWpqtm7Lhdgaa5WVRDBImnHQjYvtw6uzt74sbM5BkBPnhkM2hGHH2LkO3+iO
5bDzIK2ziQhESXwEVZMzFiDYXzSIydjY485A4T4fL1tKAQivgASjfYd3OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzWeH7xh0kj43tkII9o7HjzJd9RMB8GA1UdIwQY
MBaAFB6rTgDA2Sy1AbuyI6zwOeJwkdtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHF0T0FNRFpMTFVCdTdJanJQQTU0bkNSMjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hOWE2YmEtZDc0OC00MGM3LTg1MDMt
MTliYTg0ZDg0YWYwLzEvSHF0T0FNRFpMTFVCdTdJanJQQTU0bkNSMjA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hOWE2YmEtZDc0OC00MGM3LTg1MDMtMTliYTg0ZDg0YWYw
LzEvSHF0T0FNRFpMTFVCdTdJanJQQTU0bkNSMjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQ20lfoe
pa/igXdRDOB6GEqKeMS7ue73rVBywcDmT95yd3QxdSIAFsfyDDgJz3VIeG9G8560
QsHcFRGhzEtzyolxD5gaCvx3RTTRwq/RB4wECR2kRGZ40eLwU/YIxb9DPUmG5Vu5
tG0bgucay2cJ+KYEWZNtKB6QC1OR4BhLMdJzx4QHEqXmNsEMy3WU6cH239cGmHyO
Mbjv3CkECRSgiMwt7zRRknp8Re1bRqMh9zDiCC16N6DMvpkekrQrjV2lTz1hBsAb
oNongdk1GgmQObiQIEjsaHAae1uVw4TIqsV16W9T+/uqfeYquK55s1DyO5t0yDvr
03ZnZfHrscJqGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:30 2025 by rpki-client