Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File:                     Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier:          DlHdYw5mzZjOoF4AqfO81Ux4wD8pCbCzk+Irshkfbj0=
Subject key identifier:   B2:47:7E:1E:F8:AB:12:8C:CC:7E:C3:AF:8F:15:C3:F9:98:78:52:78
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer:       /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial:       01975AC99301A87BBC93ABB7B1FDB2F101BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number:          1585
Signing time:             Tue 10 Jun 2025 17:00:49 +0000
Manifest this update:     Tue 10 Jun 2025 17:00:49 +0000
Manifest next update:     Wed 11 Jun 2025 17:00:49 +0000
Files and hashes:         1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
                          2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: DXIzXjNjL4YILjFGsAYRTbYEC7hMg6N5LaCwuU5ZKPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:c9:93:01:a8:7b:bc:93:ab:b7:b1:fd:b2:f1:01:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
        Validity
            Not Before: Jun 10 17:00:49 2025 GMT
            Not After : Jun 11 17:00:49 2025 GMT
        Subject: CN=b2477e1ef8ab128ccc7ec3af8f15c3f998785278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:23:a0:7f:2f:09:e2:40:69:52:c5:d2:f4:c0:
                    dc:1e:39:c8:f7:83:0a:81:6e:c1:ed:81:51:39:a3:
                    bd:ab:15:80:98:b4:be:8d:0a:f9:4b:76:a7:4c:3b:
                    da:b9:fa:cc:a5:e1:be:de:ef:fe:1e:5f:2b:88:b1:
                    54:f8:11:ee:a4:c5:4f:f9:e0:f9:e2:53:98:22:99:
                    96:bc:53:eb:70:70:3b:cb:4c:09:48:7c:59:ec:ff:
                    72:d5:dd:80:55:47:af:5c:08:e9:0e:50:aa:9e:77:
                    0f:b0:71:7a:67:70:29:0b:d6:67:53:68:fb:5c:4d:
                    ae:57:d5:a4:b6:e1:d4:68:08:13:29:df:38:cd:2e:
                    3f:74:83:9b:8c:f5:32:1e:76:24:ca:11:b6:ba:84:
                    fb:bb:c1:4c:b8:13:e7:76:00:8a:59:96:e6:71:f3:
                    7c:c1:96:9d:67:e6:0c:c2:a0:ce:bb:aa:4e:3d:25:
                    a2:24:c1:9e:2e:52:d2:f8:f7:41:f3:4c:27:fb:a1:
                    8b:17:21:65:25:84:f9:4a:ce:01:90:e0:96:7d:7c:
                    cc:d5:47:65:07:67:05:2d:13:47:10:31:ca:42:83:
                    93:f0:2d:05:d4:a8:42:5c:5f:54:a9:d2:43:11:14:
                    c1:8a:a8:a1:64:cd:a2:ec:37:d7:10:26:1f:19:a5:
                    a4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:47:7E:1E:F8:AB:12:8C:CC:7E:C3:AF:8F:15:C3:F9:98:78:52:78
            X509v3 Authority Key Identifier:
                keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c2:cc:b2:c8:4b:68:32:54:9e:10:43:89:e6:39:68:30:40:
         a4:28:d4:10:98:12:42:26:ae:83:8b:61:07:4f:d5:c9:ce:eb:
         ae:26:77:3d:e6:23:c7:0f:29:29:f4:a8:a7:3d:6e:73:6a:c2:
         b2:eb:20:72:6d:18:44:7d:4b:66:e9:4c:ab:9a:ea:16:3d:62:
         6d:16:c2:f9:c5:66:f4:36:8c:72:c6:af:f8:ee:45:6b:ca:f4:
         fa:0b:fd:86:51:36:8c:ff:9e:b2:20:54:bc:be:52:3c:8f:d0:
         db:d8:df:e0:47:9e:43:9d:a4:2c:eb:47:ff:bc:8d:56:56:e3:
         b7:0a:7a:31:fb:38:62:cc:f7:e6:b3:e7:33:f1:90:5f:12:9c:
         7c:6d:88:29:36:b1:af:51:3d:b8:e3:60:33:02:06:31:80:00:
         b2:44:40:ec:19:15:a0:a4:8a:c6:38:1a:eb:c3:1c:1c:a9:7f:
         dc:31:75:29:9a:b9:f1:b4:f6:f7:27:1a:9e:42:6b:00:0b:a5:
         82:b9:42:20:68:ad:d0:e5:e0:bc:52:7e:ec:4a:ce:96:d0:cc:
         56:2c:67:15:2b:74:4e:8a:37:d6:61:54:a0:a3:40:cf:f9:92:
         27:9a:6b:cb:37:00:9c:2b:24:1b:6a:83:2c:37:16:56:aa:5b:
         ba:6a:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:03:33 2025 by rpki-client