Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File:                     h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier:          Jt+gJjVdhkJEjg4+0IHFpLleTMcFWiodGEyHtR0RgWs=
Subject key identifier:   6B:63:68:40:44:5A:71:DD:19:8F:80:ED:43:02:33:90:4B:92:E1:1A
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer:       /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial:       0196C8A8D1B91028ABFC83EB042FF0B138BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number:          0632
Signing time:             Tue 13 May 2025 08:00:28 +0000
Manifest this update:     Tue 13 May 2025 08:00:28 +0000
Manifest next update:     Wed 14 May 2025 08:00:28 +0000
Files and hashes:         1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: prHURdKpFpJ6xATeybmlcIZhDylhI6mOnd1/pp4Xr/E=)
                          2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:a8:d1:b9:10:28:ab:fc:83:eb:04:2f:f0:b1:38:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
        Validity
            Not Before: May 13 08:00:28 2025 GMT
            Not After : May 14 08:00:28 2025 GMT
        Subject: CN=6b636840445a71dd198f80ed430233904b92e11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:90:67:bc:0d:94:28:fa:6d:56:d9:47:e3:
                    fc:fd:9a:8a:b9:2b:63:5b:e2:18:b8:c0:38:24:37:
                    1a:4b:20:3c:ff:2f:50:35:04:76:72:73:0a:53:e2:
                    43:26:80:06:28:b5:69:25:bf:21:bd:7e:d4:3e:cf:
                    bc:8d:13:12:7a:4b:5d:63:c6:96:0d:0a:77:5b:69:
                    e0:f6:ec:68:11:48:c1:50:1f:c2:6b:c2:47:8b:32:
                    f0:de:0a:f2:48:82:bf:a5:f9:55:fa:2e:01:6d:a2:
                    25:dd:3a:9d:6f:b8:90:6a:e6:c0:83:83:3c:6e:d0:
                    ec:b2:9b:37:aa:60:ef:cf:39:fb:ef:96:cc:60:1b:
                    fc:13:49:48:7b:19:12:7a:ea:05:a8:72:f5:5c:5a:
                    4e:3a:99:6b:f9:02:d6:a1:4b:0a:e9:2d:0b:ae:96:
                    6c:ef:cd:0d:a5:b7:75:49:f4:79:ce:ef:46:b1:9c:
                    9d:fc:41:a5:30:34:80:96:3a:96:dd:f0:6b:b6:05:
                    de:cd:d1:69:1d:c0:87:9c:05:29:49:5a:c6:18:01:
                    0e:3c:40:2f:6b:83:fa:3a:c0:02:45:7d:0b:af:96:
                    3b:67:8a:98:ad:f7:e0:7f:4f:48:5b:61:28:30:ea:
                    a6:38:3e:c5:8a:42:10:a9:d1:c8:9d:d5:d3:a2:9c:
                    62:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:63:68:40:44:5A:71:DD:19:8F:80:ED:43:02:33:90:4B:92:E1:1A
            X509v3 Authority Key Identifier:
                keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:12:eb:9a:8a:69:4d:7b:6b:e8:31:8a:26:42:39:4e:6d:bf:
         4c:22:94:a8:e0:37:2a:5e:11:aa:a1:31:00:ce:3e:52:d9:9a:
         4e:9c:9b:be:59:10:03:38:b4:38:1c:6a:8d:56:ab:99:88:3e:
         87:58:eb:dc:64:71:b1:7c:35:cf:af:aa:71:f9:c7:c8:58:85:
         08:43:65:e7:8c:85:7f:f3:2b:88:1e:d2:53:0e:e2:79:79:3d:
         06:e9:57:8b:a1:0c:fd:26:b2:bf:75:f0:7a:38:ac:b5:2b:69:
         5e:ca:35:5d:d7:71:e1:71:ca:f1:ff:a0:1c:bf:06:a4:da:25:
         3f:78:b8:83:45:f6:a4:18:ab:a7:c8:17:70:33:89:ae:8a:e7:
         82:49:69:ab:8a:a0:30:5c:ab:40:51:93:34:34:92:ee:a3:dd:
         99:af:96:6b:e5:dc:15:57:9c:9c:52:0a:36:df:cf:b2:60:45:
         45:16:98:f9:c1:26:5a:a9:b0:ca:16:d9:2b:7f:70:b1:66:78:
         f9:c0:e4:d1:2d:5c:17:80:83:94:d4:65:d3:2c:4e:c0:62:3e:
         8d:39:f2:6d:0f:de:77:f0:02:1f:64:e2:f4:f0:f5:b1:7d:0b:
         f6:a9:5a:58:bc:9c:69:f2:47:d1:e6:34:e1:8c:7e:f7:ce:ac:
         05:7c:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:29:20 2025 by rpki-client