Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
File:                     H38fQMjrspNo9ug7-d3QZ14H1O0.mft (raw, json)
Hash identifier:          0T/maUSyk+sqnFW/YCBURHYkTIZdqAEdOCBdXlvG4PU=
Subject key identifier:   7E:D5:44:CE:19:95:F8:B2:B1:17:B0:E7:A8:5B:F0:2F:5B:58:24:A5
Authority key identifier: 1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED
Certificate issuer:       /CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
Certificate serial:       01974A7AFFF59A67F6AF8A6C2EAB97978A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
Manifest number:          0E3D
Signing time:             Sat 07 Jun 2025 13:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:04 +0000
Files and hashes:         1: H38fQMjrspNo9ug7-d3QZ14H1O0.crl (hash: RzoAh4khqlbr3dqRzEPAjMrWs/ylOOlmRhGf8sW2J/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:ff:f5:9a:67:f6:af:8a:6c:2e:ab:97:97:8a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
        Validity
            Not Before: Jun  7 13:01:04 2025 GMT
            Not After : Jun  8 13:01:04 2025 GMT
        Subject: CN=7ed544ce1995f8b2b117b0e7a85bf02f5b5824a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:74:d0:57:17:81:c9:15:d2:41:fa:e3:2e:
                    44:ad:a4:20:87:1f:f9:2d:04:d8:65:91:c3:bb:f0:
                    39:03:f6:a5:71:a3:91:82:4c:d4:95:9b:91:11:1c:
                    bc:8b:89:38:39:f9:2a:54:d1:7c:aa:63:dd:c9:7f:
                    4c:85:0a:0f:b7:58:6c:c5:09:a5:5d:f9:ae:99:97:
                    81:64:b8:50:4a:69:30:f9:db:f9:19:10:d0:26:10:
                    fc:80:f1:7d:15:5e:79:58:fb:a6:6b:a7:48:0a:e4:
                    56:e6:be:f0:1b:88:06:d2:12:24:34:9d:ba:32:51:
                    fc:ba:19:12:f3:e9:79:53:c8:eb:8b:ca:8c:2c:a0:
                    1c:a7:f2:c0:62:86:3c:63:39:d1:8a:14:11:7a:27:
                    68:86:bc:3f:3c:1c:ea:08:3a:0a:75:82:ca:9a:24:
                    14:b2:e2:df:ea:a5:73:c1:d5:56:17:28:cf:7c:87:
                    e3:5f:a1:cd:f5:47:91:6d:05:4f:d4:39:63:be:02:
                    38:52:09:d7:5b:4a:d4:ff:0e:b2:fe:75:a1:a5:d8:
                    97:2b:f1:a1:2e:37:30:87:e3:b1:29:c5:f5:ef:b8:
                    06:74:9f:fa:01:f4:2e:32:c2:6d:d4:74:63:05:66:
                    73:09:c4:f4:54:a6:f6:eb:76:17:21:90:7d:22:6e:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D5:44:CE:19:95:F8:B2:B1:17:B0:E7:A8:5B:F0:2F:5B:58:24:A5
            X509v3 Authority Key Identifier:
                keyid:1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:59:2a:e8:28:2b:5c:8b:96:9c:8b:ce:f8:0a:95:0c:6a:9d:
         8f:9b:11:b4:74:6b:c2:16:ba:5f:98:bb:22:e9:0e:50:c7:d4:
         9b:11:c7:8c:2c:d2:53:80:bc:33:6e:0f:3a:b7:e9:1a:db:d6:
         87:5d:1c:7f:b5:dd:a5:57:31:b1:ed:1c:78:ea:65:f5:4e:e4:
         f6:b9:8e:06:62:cb:ba:d2:0c:95:21:e7:14:4c:50:1b:9e:80:
         fb:ba:db:0d:c5:a6:d3:ae:82:c3:a5:3f:6e:38:0a:38:e5:98:
         ca:e0:06:e3:24:b2:48:19:7c:d1:a2:78:97:b2:a6:92:ce:43:
         87:df:07:23:ec:bc:2e:e5:1a:be:99:f5:98:f3:96:12:4f:61:
         7a:0b:0a:fe:bf:44:6a:cc:a5:ab:a2:cb:83:3d:78:6a:fc:67:
         76:4a:e9:57:8c:35:07:a4:97:d3:be:cd:3e:a1:72:de:bb:ee:
         6d:4b:97:32:fe:bc:be:d3:85:e2:4f:b9:18:97:ce:5e:0f:28:
         24:5b:5c:e2:c4:28:3f:82:70:77:d2:ac:a8:fd:d8:5c:9d:fd:
         70:f7:a6:00:bc:08:d7:54:0e:ac:93:7b:fc:19:b9:0e:f7:3e:
         2e:3a:a9:4a:01:c2:3a:42:45:39:c6:f5:d1:3b:f8:0d:a6:ba:
         8b:a4:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:20 2025 by rpki-client