Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File:                     CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier:          Dgiud1FdyFNUaxzIJji7mkq9wYLNYxZH6jns6WiSes0=
Subject key identifier:   7C:85:4A:5C:8F:3E:E8:F9:FC:71:A0:4C:EE:BA:1E:D0:AB:91:75:69
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer:       /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial:       0198443F30DA693B49C1B4BD5B18554940F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number:          1202
Signing time:             Sat 26 Jul 2025 01:00:48 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:48 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:48 +0000
Files and hashes:         1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: 216LL1ak/97KVYoRPyewz0uCDK2KUmP+q1lVcPXfWhc=)
                          2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3f:30:da:69:3b:49:c1:b4:bd:5b:18:55:49:40:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
        Validity
            Not Before: Jul 26 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=7c854a5c8f3ee8f9fc71a04ceeba1ed0ab917569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:0f:8c:bd:04:1d:37:1c:cd:16:fe:d2:10:
                    af:03:72:16:38:ea:33:fd:ae:79:4d:67:19:35:13:
                    c5:e6:e7:b5:13:17:ff:0a:3d:87:a4:b0:01:48:2a:
                    64:31:c1:1a:5f:75:f2:6d:de:d0:f1:6d:a3:24:df:
                    69:8e:1a:54:69:af:98:10:3e:40:dd:e0:4b:c4:d7:
                    3f:fc:41:f1:d1:26:46:fa:5a:36:5c:73:df:65:2d:
                    44:33:66:49:22:f8:46:42:3c:58:38:47:d8:31:8d:
                    59:d3:d1:a5:c5:6d:29:d3:5d:1e:db:29:ba:d7:a6:
                    f0:21:e5:1e:75:51:c5:d2:af:66:a5:13:09:41:a5:
                    a3:1d:85:6c:bb:11:66:13:04:59:fa:1a:a0:65:86:
                    61:57:3f:24:40:2c:a0:cf:e6:50:2b:dd:25:fd:55:
                    36:62:76:1e:a1:16:0d:b9:b4:00:cd:88:d0:a1:1a:
                    47:4e:16:9d:a5:c1:b0:dd:ac:2b:76:85:1a:45:36:
                    d9:b3:bc:2e:8b:03:e0:76:63:82:10:f1:f4:4c:6b:
                    c3:52:51:77:76:7e:45:2d:91:f3:29:1a:29:d4:6f:
                    39:f6:69:86:01:98:cf:a4:27:16:ba:bf:e6:93:3e:
                    3d:a8:8d:02:9a:50:4b:b0:eb:3a:9a:9d:57:8e:4f:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:85:4A:5C:8F:3E:E8:F9:FC:71:A0:4C:EE:BA:1E:D0:AB:91:75:69
            X509v3 Authority Key Identifier:
                keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f2:1d:65:35:4e:ac:e4:f0:8e:1f:7b:bc:d2:a0:bd:72:19:
         ba:f4:51:2f:75:ee:e5:11:ee:02:6f:f6:1e:0c:0f:67:7d:db:
         84:e8:58:97:55:bc:22:b7:f4:4a:dc:82:67:93:50:92:bf:cc:
         79:d4:87:40:b2:f6:3c:8e:2a:42:09:51:32:ec:62:90:a3:13:
         ea:67:dd:5b:e7:84:21:89:62:32:4e:bb:dc:18:03:5d:a9:9d:
         5e:b3:a1:47:1f:8d:29:7e:8c:6a:c1:37:7c:af:06:5f:1f:6a:
         ac:39:09:8f:61:86:45:77:c4:14:a6:04:70:c3:1c:de:98:44:
         17:d6:30:d8:61:0f:ff:c1:ed:79:8d:d3:af:e2:72:db:37:d0:
         26:05:f4:04:91:9f:df:5c:bd:41:b3:ab:fe:c1:e1:b3:8e:bd:
         3b:cd:62:db:46:ac:56:7f:9b:f9:4d:c7:24:c2:67:67:ed:f8:
         bf:8b:fe:7c:ec:26:80:f3:3f:81:65:66:e8:13:73:07:95:17:
         71:6c:3f:20:98:6f:c4:92:37:41:c0:e3:4e:db:b6:fb:b0:0b:
         58:a8:fc:44:48:a1:d3:1f:15:16:a5:e4:83:66:d9:6b:72:78:
         a0:3a:58:bd:db:18:cc:88:26:67:54:42:65:6a:d4:31:53:27:
         5b:0d:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:02:49 2025 by rpki-client