Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File:                     HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier:          hjRiUTwZkDFE7XxFXPNWLTi8ECixikIxh0cuSStKikI=
Subject key identifier:   B5:18:A1:56:06:F6:82:CA:35:E0:22:03:C8:40:2E:40:15:DE:D0:48
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer:       /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial:       01974779F84061EA5D2C4E505B69C6CCC64C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number:          0CD0
Signing time:             Fri 06 Jun 2025 23:01:05 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:05 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:05 +0000
Files and hashes:         1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=)
                          2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: D7RvU5rKbQCuTJKvXvBLusV2z0LaJZgI3/yJaqMTWfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:f8:40:61:ea:5d:2c:4e:50:5b:69:c6:cc:c6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
        Validity
            Not Before: Jun  6 23:01:05 2025 GMT
            Not After : Jun  7 23:01:05 2025 GMT
        Subject: CN=b518a15606f682ca35e02203c8402e4015ded048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:3c:fa:9c:2d:72:57:7e:71:57:4a:ae:23:
                    ea:83:09:99:a3:7f:d6:a3:62:0b:5e:08:a4:fb:8e:
                    aa:df:98:b5:f3:11:bc:a2:a1:14:4f:69:ad:6c:95:
                    10:e4:e8:27:0d:16:f2:ad:0c:99:b6:79:5c:a2:81:
                    1e:d3:d4:ed:c1:ef:b3:8a:09:28:ec:6c:6e:37:14:
                    db:f6:39:3e:85:31:f6:19:bb:2a:5c:7e:5f:b9:d8:
                    90:22:7b:51:8e:2d:f5:fb:2f:72:51:62:29:01:06:
                    d4:fa:fa:49:a5:76:ab:55:09:ed:78:73:88:73:a4:
                    5c:a8:70:6f:e3:80:fe:a3:6b:4a:48:d4:a4:1d:e7:
                    96:18:3e:45:2c:6e:71:e8:71:d9:a1:26:95:7d:81:
                    c8:6b:16:92:78:95:57:02:de:8e:18:18:d5:83:6c:
                    e4:df:95:ce:bc:4e:65:eb:51:9c:ff:72:e6:64:72:
                    e5:d0:0d:de:28:0a:eb:56:82:a5:91:bf:1e:e7:bb:
                    10:2d:b7:20:85:cd:ca:84:b4:ea:23:c4:e5:0a:0a:
                    a4:ee:f2:c7:f0:40:30:9b:10:d3:20:21:43:4c:ee:
                    6a:dd:a6:75:b6:84:e0:17:67:28:04:90:57:4f:16:
                    12:ab:a8:cb:dc:c4:8c:80:4e:96:48:15:3f:46:30:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:18:A1:56:06:F6:82:CA:35:E0:22:03:C8:40:2E:40:15:DE:D0:48
            X509v3 Authority Key Identifier:
                keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3a:e4:9d:e8:13:e0:3d:e2:61:6a:05:42:c4:53:d7:e4:d6:
         c2:d6:c8:1c:c9:95:15:10:3a:75:c7:1b:06:b2:54:a8:76:b1:
         86:18:2b:90:2c:9a:4f:19:97:95:82:92:bc:8f:76:ab:42:d2:
         83:a1:d1:57:67:00:72:67:49:8d:76:85:5c:bc:34:6e:e7:63:
         1b:9e:0c:20:23:a0:5f:9f:11:57:aa:39:6f:5f:ac:2d:d2:0b:
         d2:e6:a2:17:4e:45:25:5b:97:3d:d8:7e:89:e2:f8:20:c6:9d:
         f2:dc:77:3c:9d:31:7e:a1:da:7a:d9:91:c3:bf:ef:d5:06:68:
         e5:94:6a:cb:3d:bc:e0:b4:81:c3:86:73:61:3d:4f:d5:98:f1:
         2b:ce:09:84:ef:24:e4:20:e1:d3:f5:b3:62:98:18:86:6f:46:
         b4:0a:e6:52:73:ee:f5:f5:aa:26:cf:fb:87:b0:f4:96:65:9a:
         f1:75:bf:b9:11:c5:08:30:a9:92:8d:54:e2:bc:73:d6:e9:ce:
         5e:0b:1b:1a:b6:19:6f:8f:c1:10:72:98:3b:9d:01:ad:5a:c6:
         36:86:14:75:1c:2c:77:d1:50:05:35:30:89:96:e6:ce:ba:8a:
         9e:a5:59:fa:94:f6:be:c9:01:a3:48:b7:dd:8c:26:2a:61:1b:
         7e:87:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:53 2025 by rpki-client