Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File:                     HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier:          plnDO8ywWQYdqi1vfQzvcCVgvmf/UkDdjo8so23Z42s=
Subject key identifier:   69:A2:1D:C2:83:C6:C6:D1:83:EB:3F:78:3E:ED:D7:A2:C4:06:23:45
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer:       /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial:       0197451D31B326C528C7974D80A166570674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 12:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 12:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 12:00:30 +0000
Files and hashes:         1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=)
                          2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=)
                          3: 80uZVWp_iWFE8vdma8FvwSsz-Uo.roa (hash: pm27AxcsLfVMm1BA5QNNe0QMO134e9SV+S+h9WFlZjs=)
                          4: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: IQbKB9vKUznxZmJ5PGj4rhtURf3MUmuzz/z2lmgwzYs=)
                          5: Mxsx50Ph9_qr5vUqU-Gjhz8TFEo.roa (hash: r/sY/VoJqmcdsNcKGmTBnZbt3tc9vj95Qx95jR+/+BY=)
                          6: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=)
                          7: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=)
                          8: _3NlYGtAccp6zaeP-Zhm_oVq4fE.roa (hash: 7Ai+yD0w7Uc4wl5Kdh07MB6GvX74tuDak744pWBhJkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:1d:31:b3:26:c5:28:c7:97:4d:80:a1:66:57:06:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
        Validity
            Not Before: Jun  6 12:00:30 2025 GMT
            Not After : Jun  7 12:00:30 2025 GMT
        Subject: CN=69a21dc283c6c6d183eb3f783eedd7a2c4062345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:ba:1a:84:90:c0:26:ec:e9:ee:d9:56:3b:
                    82:da:73:d8:1c:dd:2b:02:f4:82:65:05:bd:e0:94:
                    88:04:45:df:ab:04:ed:bc:eb:d4:f9:41:b5:ea:e6:
                    e3:7b:e9:6a:d7:a2:a4:dd:78:28:de:cc:c1:f4:09:
                    64:a3:4a:26:a5:0c:94:25:5f:70:9d:7b:43:99:9c:
                    d6:0e:df:d3:ce:35:36:9b:5f:b0:7c:3d:ba:0c:ec:
                    d3:c0:f2:d3:6d:af:c5:16:6f:ca:0f:92:dc:70:1b:
                    08:71:82:74:ad:ea:6b:2e:ef:e0:00:fd:ff:39:f1:
                    23:32:9e:8d:46:a9:03:4e:2b:16:ea:b4:f6:1b:01:
                    91:6f:f0:03:ba:f2:ef:6a:00:e8:b0:a5:54:69:d1:
                    7f:83:d1:89:c0:90:27:13:fb:31:b2:dc:d7:62:53:
                    f7:1b:43:b1:92:94:2c:0c:90:26:5a:0c:14:c4:f9:
                    16:9b:11:37:97:9b:02:6d:af:6a:a9:ac:12:54:4a:
                    22:73:1f:bb:c2:bb:76:b5:b3:0f:75:54:42:dc:bb:
                    46:8f:9a:dc:8d:7e:35:b9:23:bf:12:89:40:35:61:
                    81:78:72:1d:76:d4:4c:a5:75:e0:84:b1:24:31:2b:
                    6b:53:a9:a5:70:5f:bf:e6:81:70:0d:f4:2d:88:a3:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:1D:C2:83:C6:C6:D1:83:EB:3F:78:3E:ED:D7:A2:C4:06:23:45
            X509v3 Authority Key Identifier:
                keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c4:9a:d1:39:8e:f7:3c:66:26:c0:50:49:d4:ac:71:a4:11:
         01:f1:81:22:27:a3:d1:86:6a:2f:30:91:35:30:3f:18:ae:7a:
         9f:53:34:59:81:98:c9:d8:8d:47:47:2f:6b:fc:ef:8b:ff:6e:
         01:17:b9:ca:0f:cf:df:d9:0b:55:b1:f5:06:71:f4:57:96:f0:
         8b:41:bc:89:59:ed:8c:80:c6:f5:a7:83:73:d0:9a:a0:83:c0:
         9b:9f:aa:6c:6a:a5:ef:61:18:2d:49:cf:ef:ee:55:2b:b9:5c:
         2f:93:51:3f:27:be:49:24:b9:8b:f9:b0:17:63:66:66:c4:2c:
         97:e3:d9:77:7b:8a:cd:78:b5:bb:da:e8:2c:68:db:9d:a1:c5:
         66:a3:38:b5:f1:08:5e:0e:e3:87:ca:13:4b:ac:2a:25:b8:0e:
         ed:77:13:58:bb:c1:8f:43:98:01:9f:c2:de:dc:fe:e4:66:57:
         2d:86:71:dc:47:2d:10:06:85:8d:1c:25:19:3d:06:bd:80:f6:
         d9:9d:30:7f:de:9c:3f:06:df:7b:43:2c:0c:2b:4f:ff:57:92:
         0a:93:e4:6c:43:85:b3:1a:dc:2f:7f:d7:c4:6b:cd:da:2a:f5:
         a7:13:93:fc:b6:0a:02:23:c9:da:a9:5f:f9:8e:cf:0c:8b:0b:
         d8:ea:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:27 2025 by rpki-client