Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          aOw5GYc3IuF6DkyVgv3MA/sdlfyfwdf4YY6i6YkEp1c=
Subject key identifier:   90:68:DD:CB:99:ED:E1:7B:91:2C:AF:F3:7F:96:90:C4:93:BF:CB:F6
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019746D4D74BFBF30EFF4AA87265EE813FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1592
Signing time:             Fri 06 Jun 2025 20:00:43 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:43 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:43 +0000
Files and hashes:         1: Co2reX9WjBlmenpbYdQoA_FU6Yg.roa (hash: q2QsExP+FdyReITqdolcGkEpneACU1Mny9QFEjumzVA=)
                          2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=)
                          3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: FYNkSNhqJL265nNoRfiGCF6q9jYfKaYZM10saxTidow=)
                          4: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=)
                          5: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:d7:4b:fb:f3:0e:ff:4a:a8:72:65:ee:81:3f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Jun  6 20:00:43 2025 GMT
            Not After : Jun  7 20:00:43 2025 GMT
        Subject: CN=9068ddcb99ede17b912caff37f9690c493bfcbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:3b:f9:99:6a:74:c7:df:dd:f4:59:2d:6c:
                    44:31:72:e4:75:c6:56:a8:d6:05:2b:ad:48:95:bc:
                    1f:18:f5:80:84:ab:8d:88:e9:f8:81:f9:e0:24:d7:
                    91:dc:85:13:ff:72:43:a4:d6:12:31:1c:c0:e0:3d:
                    4b:e0:2b:f8:4e:91:f4:0c:1a:2d:da:e9:79:50:7e:
                    f2:04:3e:1f:46:fa:19:9c:fe:a2:aa:84:85:7a:88:
                    01:fa:09:54:a3:4d:6c:83:58:de:ef:7a:91:6c:02:
                    5d:9d:c2:ad:c4:7f:75:f8:9d:37:15:af:d9:c0:22:
                    57:f1:47:61:8c:f4:a4:68:ab:78:1c:03:e8:89:0f:
                    62:86:58:71:20:45:10:3e:27:48:75:c3:dc:df:9b:
                    7d:8e:04:88:cd:bd:1e:af:fe:ed:e5:f0:27:ed:8e:
                    66:41:ec:c0:53:7f:ff:b0:61:5c:99:19:f3:90:ee:
                    ec:8b:51:c0:29:41:cf:a6:ce:98:2a:e8:c9:9b:24:
                    6d:c0:72:af:a4:77:3c:f5:b6:ae:e1:70:b4:6d:c6:
                    5f:94:60:42:6d:a3:5b:31:47:34:98:45:4a:30:b8:
                    ea:5a:b5:11:71:13:7e:f5:17:ce:41:b0:be:a4:5e:
                    c8:96:a3:bc:8c:59:db:ea:24:9b:c7:27:dd:ac:d6:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:DD:CB:99:ED:E1:7B:91:2C:AF:F3:7F:96:90:C4:93:BF:CB:F6
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:93:87:d8:b8:06:a1:31:21:65:df:96:2e:45:17:d4:9e:57:
         b0:ac:69:de:e5:36:67:b0:ff:58:76:79:bb:7a:0f:74:bb:de:
         d6:de:ff:e0:f4:21:37:d3:6b:6f:8f:09:04:3d:c3:96:3d:d6:
         d9:06:6d:e8:74:91:61:bc:2e:89:5b:52:c3:8f:d1:eb:89:ae:
         c8:ed:3a:3e:6a:1d:79:73:b4:c6:f3:d2:f5:c5:b5:59:68:c4:
         7b:89:4b:95:fe:bb:0a:0a:22:32:41:d0:be:33:59:52:84:f5:
         81:89:80:97:d4:8e:d5:cd:9f:07:42:7a:aa:cd:60:a3:92:6b:
         cb:ea:86:bf:45:b6:77:e6:ff:d7:9f:3b:f3:6d:99:26:99:21:
         c2:cd:37:c4:8e:82:39:f7:70:6e:d9:9a:db:56:85:29:6b:fe:
         79:65:07:71:9b:be:71:76:d4:2b:b5:6d:2d:05:1a:9a:a6:48:
         2f:4e:97:5e:12:ae:c8:35:f6:fa:ae:f4:f7:be:16:f2:00:19:
         0b:1d:7e:1e:88:8b:a6:ba:49:05:89:7a:d9:f8:92:b2:60:c9:
         9d:f4:50:fc:a4:d5:8d:75:bf:5c:05:b4:06:75:79:b6:3e:a8:
         64:dc:40:7c:a7:a8:38:19:5c:ca:2e:32:39:f9:5d:2b:40:78:
         62:a7:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:39 2025 by rpki-client