Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File:                     HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier:          f2MJgJL86MOX2souvUPZQ8oBFl7BXWWi9+vIYMa+zdw=
Subject key identifier:   9E:EB:43:58:8E:FC:AA:69:BD:5C:47:2E:15:5E:93:15:92:88:D9:A2
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer:       /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial:       0197B70F2806A30489485F1FA23CA6162BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number:          15B9
Signing time:             Sat 28 Jun 2025 15:01:53 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:53 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:53 +0000
Files and hashes:         1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: 7qPuZjQaYoeDUfCybQLYyQZd5j2FxtFrOGGxP8BoHGc=)
                          2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=)
                          3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=)
                          4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:28:06:a3:04:89:48:5f:1f:a2:3c:a6:16:2b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
        Validity
            Not Before: Jun 28 15:01:53 2025 GMT
            Not After : Jun 29 15:01:53 2025 GMT
        Subject: CN=9eeb43588efcaa69bd5c472e155e93159288d9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:16:24:a4:0e:b0:07:8e:9c:f0:a6:71:63:
                    d2:65:9f:3d:0f:ac:0a:bc:f0:49:b2:70:e3:e1:b5:
                    83:d0:8d:18:2b:53:ae:58:66:9b:54:d8:7f:4f:93:
                    9a:3d:c4:58:72:32:6b:0f:b2:96:dc:41:13:bc:e4:
                    e5:49:0a:58:86:d8:e3:86:c8:37:bc:62:b4:6e:92:
                    e3:32:b9:fb:ab:ba:45:b9:1d:09:01:73:fa:2c:c5:
                    2d:f0:8f:be:0c:ab:44:38:1d:8b:65:46:1a:a8:81:
                    fc:a2:35:29:1e:f5:89:7f:4c:f7:1c:1c:88:bd:1d:
                    b1:c4:9e:60:49:75:e3:23:a7:32:a8:ff:60:18:e9:
                    1f:e4:58:1c:3b:07:2e:e5:57:a4:66:2c:55:5b:e6:
                    62:ed:f8:c5:68:15:0f:ac:26:16:1f:8c:a3:3e:15:
                    9c:02:f1:fc:17:35:aa:01:46:38:7d:62:44:f1:02:
                    3a:25:f6:32:e5:9c:f2:aa:c7:8a:61:ec:40:5a:88:
                    c4:a0:99:a3:ba:1e:4a:40:9f:bc:53:61:d9:2e:08:
                    8c:5e:ae:c2:ca:c4:3e:54:1e:29:2f:f9:e6:3c:56:
                    1a:b7:f2:18:f8:c1:71:52:82:a4:86:ea:c6:49:94:
                    5c:1a:3e:79:e9:86:9a:1b:e1:aa:ad:8f:86:64:a4:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EB:43:58:8E:FC:AA:69:BD:5C:47:2E:15:5E:93:15:92:88:D9:A2
            X509v3 Authority Key Identifier:
                keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:04:a0:99:11:92:02:65:7d:d6:af:94:93:09:e2:5f:78:cb:
         47:1b:30:2c:59:33:47:0c:59:27:71:1b:e0:fe:82:34:be:24:
         b4:bc:da:02:b5:3d:c4:96:be:9b:c0:12:7a:6c:2b:b8:70:c5:
         93:df:da:8c:9f:73:86:bd:c1:e6:82:5b:45:11:64:4b:cc:ba:
         40:12:1f:6b:0b:da:f2:6e:95:f9:ac:ce:9d:f9:49:2d:8c:46:
         3d:b1:26:f4:a1:ad:3c:28:00:32:05:ba:82:72:d9:14:ed:f6:
         af:55:9b:a3:e7:c1:17:dc:06:8c:ab:00:8d:b8:aa:36:1b:19:
         df:f8:8b:71:d7:78:66:83:a0:0b:f7:07:70:93:ec:b1:b1:79:
         ac:63:07:0d:84:6d:95:fc:85:71:ab:dd:d4:04:86:3c:43:77:
         f0:ab:9e:31:27:87:00:87:27:fc:76:b0:04:16:61:ed:4c:81:
         61:85:75:cc:7f:d1:9b:d5:f3:ea:93:fc:c9:19:84:ca:d9:99:
         cc:da:3c:1a:de:eb:b1:db:84:8b:95:a1:98:cd:2f:2f:05:a0:
         21:f8:39:9f:54:4d:84:7b:b7:8c:28:a1:37:79:fc:57:fe:c1:
         26:26:80:1e:eb:34:46:a5:d3:81:1c:87:9b:c7:19:05:7e:bb:
         2b:5f:3c:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DygGowSJSF8fojymFivjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2
MjE4MmMwHhcNMjUwNjI4MTUwMTUzWhcNMjUwNjI5MTUwMTUzWjAzMTEwLwYDVQQD
Eyg5ZWViNDM1ODhlZmNhYTY5YmQ1YzQ3MmUxNTVlOTMxNTkyODhkOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+UWJKQOsAeOnPCmcWPSZZ89D6wK
vPBJsnDj4bWD0I0YK1OuWGabVNh/T5OaPcRYcjJrD7KW3EETvOTlSQpYhtjjhsg3
vGK0bpLjMrn7q7pFuR0JAXP6LMUt8I++DKtEOB2LZUYaqIH8ojUpHvWJf0z3HByI
vR2xxJ5gSXXjI6cyqP9gGOkf5FgcOwcu5VekZixVW+Zi7fjFaBUPrCYWH4yjPhWc
AvH8FzWqAUY4fWJE8QI6JfYy5ZzyqseKYexAWojEoJmjuh5KQJ+8U2HZLgiMXq7C
ysQ+VB4pL/nmPFYat/IY+MFxUoKkhurGSZRcGj556YaaG+GqrY+GZKRhJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7rQ1iO/KppvVxHLhVekxWSiNmiMB8GA1UdIwQY
MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt
NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2
LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQSgmRGS
AmV91q+UkwniX3jLRxswLFkzRwxZJ3Eb4P6CNL4ktLzaArU9xJa+m8ASemwruHDF
k9/ajJ9zhr3B5oJbRRFkS8y6QBIfawva8m6V+azOnflJLYxGPbEm9KGtPCgAMgW6
gnLZFO32r1Wbo+fBF9wGjKsAjbiqNhsZ3/iLcdd4ZoOgC/cHcJPssbF5rGMHDYRt
lfyFcavd1ASGPEN38KueMSeHAIcn/HawBBZh7UyBYYV1zH/Rm9Xz6pP8yRmEytmZ
zNo8Gt7rsduEi5WhmM0vLwWgIfg5n1RNhHu3jCihN3n8V/7BJiaAHus0RqXTgRyH
m8cZBX67K188vw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:02 2025 by rpki-client