Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File:                     MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier:          HtkRpwkMo1sQ8MaXOdK7jNMsv0Ql1DEAUb0ep87NBow=
Subject key identifier:   E6:8D:4E:4A:32:FE:9E:90:E1:CD:7B:07:B5:65:ED:FB:40:DB:D6:DC
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer:       /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial:       0197469E56A3021AFB097196978864DC0A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 19:01:11 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:11 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:11 +0000
Files and hashes:         1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: hsH3Q4rXamhgjvl+FEJCleKmUXsEVPVXnjBQaDDcJB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:56:a3:02:1a:fb:09:71:96:97:88:64:dc:0a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
        Validity
            Not Before: Jun  6 19:01:11 2025 GMT
            Not After : Jun  7 19:01:11 2025 GMT
        Subject: CN=e68d4e4a32fe9e90e1cd7b07b565edfb40dbd6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:f7:cd:33:97:43:fe:27:c6:7a:e8:df:de:
                    0a:76:f6:02:20:5d:f5:2a:ae:e3:03:93:72:55:95:
                    26:95:09:e0:69:dc:0d:27:33:2a:1f:87:b2:c6:c2:
                    c2:ed:6a:85:bc:67:a3:3d:e7:b9:f7:4e:48:56:45:
                    f8:39:58:ee:d3:44:ae:0e:13:0b:de:e9:4e:f8:b8:
                    eb:97:08:dd:48:c7:15:10:39:d7:f6:17:81:80:38:
                    6f:43:aa:cc:ff:7d:1a:0b:e6:5c:6c:15:56:f8:d2:
                    37:40:8b:b5:d8:e9:12:c4:eb:c0:8c:8a:90:8c:8e:
                    de:9b:3a:dc:53:aa:2e:3c:de:ca:f1:4c:0a:e5:03:
                    c1:8f:26:75:f0:db:b3:7d:04:44:de:7f:a0:92:5e:
                    74:29:c8:2a:1a:9d:c5:26:d7:3c:67:11:94:6c:7b:
                    0d:6a:cb:0c:fa:38:b3:6c:d3:5c:6f:b1:00:7e:0f:
                    f6:a2:b0:b7:b6:f0:fe:2c:9b:8f:7d:cc:77:d0:09:
                    94:9b:81:76:25:00:2d:a0:86:57:2d:c2:99:84:2a:
                    69:5f:54:54:4a:1c:8e:4f:72:c9:f2:4e:22:8d:5c:
                    07:27:f3:da:39:8d:eb:1b:00:91:93:b0:2a:a7:3f:
                    a8:46:72:46:1d:c4:83:ee:a4:a4:6e:96:48:49:ae:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8D:4E:4A:32:FE:9E:90:E1:CD:7B:07:B5:65:ED:FB:40:DB:D6:DC
            X509v3 Authority Key Identifier:
                keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0e:59:43:e1:4e:46:df:f2:b5:76:26:44:04:b0:0c:cb:62:
         58:c6:c5:1c:22:9b:21:e4:ee:d7:6c:72:d0:f7:aa:6c:17:e9:
         95:b8:81:31:1b:50:e7:87:69:73:23:bd:46:24:4f:b9:3e:f2:
         ee:40:b6:c3:79:95:2a:0d:6f:a4:79:a5:8c:48:76:6f:c5:e6:
         8e:33:aa:92:60:91:36:c0:27:ce:d8:04:44:fa:72:e6:99:22:
         59:60:51:84:47:c6:56:12:02:78:5c:63:8e:bc:ae:d4:9d:98:
         6b:95:51:19:0e:08:b7:fb:fd:1e:41:62:b8:30:6e:09:f3:27:
         80:d0:3b:ea:39:00:7c:f4:74:2f:93:71:ce:8f:69:98:d3:0e:
         45:b3:b0:39:1a:1b:ff:cb:9b:64:02:59:a4:1c:7c:70:1c:e2:
         5d:99:80:de:d2:59:51:b6:de:64:58:26:50:f9:3d:ca:a9:3a:
         13:ba:4c:f3:01:bf:c0:d9:c5:fd:c6:f0:15:c2:66:d2:71:0b:
         39:eb:e8:d8:55:2b:1d:d0:c5:2a:26:b6:6f:0b:4c:9e:e0:ea:
         58:24:c5:d1:2a:1f:a0:87:cf:ab:93:57:72:e6:c5:70:b6:5a:
         6a:b9:3e:88:6a:f4:8c:26:c4:e6:ac:37:62:e1:79:a5:c2:c2:
         99:6c:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:19 2025 by rpki-client