Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          FR3FBu+erN6trdvznVMXxR8IFZkRYKVvJ8wVBTn+dIU=
Subject key identifier:   42:46:96:EE:7C:42:93:83:F7:CF:B5:59:73:97:4B:8D:6D:71:D0:A8
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       0196BE2540BB2462F2D89FE6B3BAEA68409E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          153C
Signing time:             Sun 11 May 2025 07:00:34 +0000
Manifest this update:     Sun 11 May 2025 07:00:34 +0000
Manifest next update:     Mon 12 May 2025 07:00:34 +0000
Files and hashes:         1: ESdFHrMTT9CdnTueAws85KzTpOo.roa (hash: EFe4+WtiIfRKsYq3EhY1PIgLIFzMrHc8WS2QY4wWHBs=)
                          2: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: HV3BMZNTb3UWmkTUkVm5efrfzN4mEnoDZ7VS8h6oz4w=)
                          3: S7dw96BjJHjSAZkMcxGi_FB5doA.roa (hash: KE2tpzq8RhZkUzoGjIN+rbgmJi4KOhIPNewQQ1O2Z3o=)
                          4: lHt_Mh1w-7vs8I-ZaeWKv1xW2Ps.roa (hash: /8Glm1hc9AeZKEAxOBVRVagGt2gyvK5usk/gBvfbgls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:40:bb:24:62:f2:d8:9f:e6:b3:ba:ea:68:40:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: May 11 07:00:34 2025 GMT
            Not After : May 12 07:00:34 2025 GMT
        Subject: CN=424696ee7c429383f7cfb55973974b8d6d71d0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:69:c5:ad:54:46:6e:dc:3a:17:16:8b:ad:
                    54:8b:77:96:55:3d:e1:fe:0f:a2:c0:d8:65:2d:67:
                    27:2d:6d:4c:fb:4b:e6:f4:c2:66:13:70:31:b4:1b:
                    6d:48:d0:f7:de:5b:d1:ff:c6:79:f9:0f:69:73:db:
                    78:0f:75:f3:e1:b0:c0:05:7f:df:9c:f2:51:f5:2e:
                    e9:e0:a4:2a:f6:ee:8e:50:f6:03:60:af:67:32:fb:
                    14:5d:f3:4d:03:45:18:0a:f7:60:32:31:c8:21:bb:
                    e5:2f:86:83:38:21:94:05:11:dc:49:e1:58:9c:6c:
                    5e:41:67:ac:aa:35:da:a9:ec:79:a7:fe:2c:f4:96:
                    1a:14:e1:dd:ba:94:2d:a4:f9:11:34:64:12:ef:4d:
                    0d:be:4e:08:3d:46:b9:fa:a6:2b:d7:2f:77:af:07:
                    9c:2b:3f:9c:5f:eb:d3:cc:43:85:67:d7:0d:9f:ed:
                    b8:ea:7e:cb:b2:09:13:aa:ca:24:5b:8f:4c:77:4b:
                    5b:26:ec:05:7c:48:7b:2d:9e:9f:f8:a7:16:25:72:
                    f9:66:6d:2b:7e:44:b7:6d:38:ce:22:9e:e3:8c:eb:
                    67:47:36:cb:13:30:2c:3f:22:4c:df:6f:97:78:58:
                    f8:b5:2d:62:f8:a4:97:4d:cb:b7:8f:b9:7f:ec:be:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:46:96:EE:7C:42:93:83:F7:CF:B5:59:73:97:4B:8D:6D:71:D0:A8
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:f0:74:d4:40:e2:42:71:11:f7:0a:b8:62:ce:22:36:5c:
         ee:c9:71:78:64:13:32:a1:d5:aa:ca:4e:b1:fb:d7:d9:67:53:
         59:f2:0d:e4:4d:7d:f6:d4:de:9a:51:62:8c:f3:2c:78:a0:79:
         e7:6e:9c:2e:13:ad:32:a5:91:1c:18:ec:c5:5d:8e:0c:7d:d9:
         87:be:e0:60:89:36:c8:53:66:01:99:c6:46:e3:4b:c3:3c:dc:
         83:68:6a:29:d6:76:bd:45:2f:6f:5f:22:85:7d:4e:f8:d7:28:
         88:80:18:ed:01:2d:cc:99:0d:52:6a:a2:3f:8b:8b:d6:d4:f2:
         7c:c3:c2:53:2f:99:8f:fa:a7:f8:22:02:75:2a:76:2f:7d:15:
         73:e5:a6:1f:76:d4:71:e8:33:10:48:08:c5:74:2b:9e:d1:3e:
         e0:df:c6:63:ec:60:b3:7b:45:5b:01:64:29:8f:ff:64:80:7f:
         13:be:bb:79:c6:dd:f5:fc:77:b4:83:e0:82:4d:47:fd:fd:4d:
         11:68:76:6c:de:88:bb:38:64:c9:41:30:25:cc:a3:b9:19:cd:
         a8:df:ed:95:b9:59:67:25:f6:69:9a:35:3b:70:5e:7e:7d:ef:
         20:5b:2e:17:13:ee:57:dd:21:ef:77:4d:13:f7:d7:da:5f:db:
         ba:b4:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:58:44 2025 by rpki-client