Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File:                     Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier:          yntBMRNScMPyjDgQPNR6K3v5sjwU/R4qsyI21nJKAGA=
Subject key identifier:   69:69:06:7C:72:FD:A8:20:6D:72:FD:96:74:8F:18:7E:72:DD:65:9A
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer:       /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial:       0196B7EC31620D9BA1BF7AD2B18D51DC628D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number:          14C3
Signing time:             Sat 10 May 2025 02:00:31 +0000
Manifest this update:     Sat 10 May 2025 02:00:31 +0000
Manifest next update:     Sun 11 May 2025 02:00:31 +0000
Files and hashes:         1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: O3t1Ek49dWjh09TiPNRB3bHbx605FFblu8mw196mVnU=)
                          2: yEdA_N7rWdELvU2ot9EEaCyQPBo.roa (hash: 8ht/7rJO+ixz8Sl+2g/oVNj6ivGQ0TQ42doSDeerWxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:31:62:0d:9b:a1:bf:7a:d2:b1:8d:51:dc:62:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
        Validity
            Not Before: May 10 02:00:31 2025 GMT
            Not After : May 11 02:00:31 2025 GMT
        Subject: CN=6969067c72fda8206d72fd96748f187e72dd659a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:c5:5a:d3:df:7c:45:64:c7:13:55:75:d3:
                    32:6a:ee:75:eb:10:b2:91:8b:a2:91:cd:ef:d2:d1:
                    65:5c:2e:80:a5:76:3c:83:53:5f:52:4a:51:8b:93:
                    96:98:b0:0c:b7:db:b9:54:cc:cd:8e:37:e4:8c:4a:
                    85:b2:af:52:66:2f:13:e8:c5:ea:92:ce:73:8d:e1:
                    8b:4a:38:07:f6:63:c8:74:db:52:11:47:a8:ac:d5:
                    bd:13:1d:9d:74:33:6f:de:57:50:a1:a2:c7:7a:20:
                    ca:dd:c9:ab:93:12:27:a9:37:8d:86:bf:ee:c6:d4:
                    d9:a4:47:45:87:01:d9:3c:ed:21:f0:9c:ef:94:5d:
                    6f:17:5a:25:f2:9e:42:5f:f1:67:b1:fa:36:d4:05:
                    f8:d6:5c:84:8d:d4:dd:0c:8f:31:ca:d7:e2:0b:06:
                    89:84:2a:93:d3:8f:5a:c5:b1:69:e0:24:8c:30:e9:
                    20:24:4b:62:96:1b:29:cf:08:ba:ae:95:ea:91:31:
                    02:50:20:54:b8:5c:c9:09:3f:31:b7:c3:d7:78:6d:
                    91:3e:7a:05:34:c6:46:f0:b6:ab:16:d1:81:8e:8c:
                    b7:2e:d9:17:08:dd:44:28:9c:d0:40:bc:0c:15:64:
                    12:c4:8f:8d:94:3c:85:3c:ef:99:72:4d:d3:8e:9a:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:69:06:7C:72:FD:A8:20:6D:72:FD:96:74:8F:18:7E:72:DD:65:9A
            X509v3 Authority Key Identifier:
                keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c9:cc:1e:71:a1:2b:89:86:e2:a6:ee:69:e6:cf:5b:00:db:
         f2:1e:25:3a:28:00:0c:ec:ae:51:63:ae:25:43:1f:02:bd:3c:
         93:9b:0e:36:b3:3c:59:81:93:72:4a:b7:06:52:1b:31:71:5d:
         1a:ec:38:9c:6d:a8:19:7a:07:03:74:88:bb:9c:1f:e2:d8:3f:
         76:f3:9b:01:75:65:eb:39:b5:a0:33:33:1b:59:56:e6:3a:70:
         0d:cd:2b:a0:f0:18:f2:66:83:b2:20:6c:ca:8b:92:b9:5c:75:
         01:c6:ae:83:26:2c:79:76:91:f3:6e:88:0d:87:08:5b:ba:ec:
         b7:09:f5:28:63:73:52:a0:1a:24:03:0e:43:4b:43:d7:0c:86:
         27:8e:59:5b:42:7e:c9:81:41:63:34:27:b3:38:36:c7:0a:1e:
         ed:d4:81:87:03:5b:29:5a:d9:ee:60:0a:c7:d8:f1:26:85:d9:
         74:0f:5c:5c:1e:55:b8:00:9e:63:6a:d5:5e:5f:a7:75:90:f5:
         24:6e:29:58:c6:de:00:0c:14:0c:76:1f:d1:1a:59:26:0b:8b:
         46:f0:bc:07:b4:a7:ef:fb:8f:6f:56:13:8c:78:eb:67:5c:0c:
         57:c2:75:b0:49:42:e3:1a:cd:4e:f7:b9:7e:24:3e:1b:d3:90:
         20:2c:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:30 2025 by rpki-client