Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File:                     HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier:          s99NH0I9y9BC5LsR0by1JfuOTdYw0/3dNNLJaVD2BUk=
Subject key identifier:   29:5B:B2:0C:35:F1:24:F6:B7:05:25:46:B2:7D:FD:20:70:64:09:CE
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer:       /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial:       01974B8DA4A484DF984797031A16238B5DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number:          0C1E
Signing time:             Sat 07 Jun 2025 18:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:03 +0000
Files and hashes:         1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: ao/W911Ou2t2hMNFtzEpTGUaCuB6oPA5hArbtL2vIdw=)
                          2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:a4:a4:84:df:98:47:97:03:1a:16:23:8b:5d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
        Validity
            Not Before: Jun  7 18:01:03 2025 GMT
            Not After : Jun  8 18:01:03 2025 GMT
        Subject: CN=295bb20c35f124f6b7052546b27dfd20706409ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:39:49:85:ed:c0:aa:a8:ed:29:1d:cf:3d:
                    82:85:68:17:9e:a2:4a:35:a9:1b:52:8e:cd:5a:a9:
                    e5:a1:cb:d6:02:1c:ea:70:9c:70:03:fd:bc:6a:13:
                    30:83:46:b5:c3:66:70:e2:1b:ce:85:f1:66:0a:f1:
                    fd:71:67:39:eb:66:fa:ab:82:d2:02:2b:e0:45:f7:
                    a2:d4:85:08:4a:89:1b:39:2a:07:57:be:16:50:eb:
                    4a:35:e7:a5:57:de:51:81:56:74:1b:94:74:97:33:
                    85:8b:5f:3f:a0:1c:60:d5:83:12:eb:47:e0:59:ae:
                    df:3b:49:96:6b:a7:fa:7f:42:2d:f3:5d:b2:56:be:
                    77:a2:56:c8:8a:68:39:13:3e:0b:76:fe:ca:1c:38:
                    e1:6a:4b:b4:b1:7d:27:a5:13:08:91:f0:4d:a2:bb:
                    23:56:20:de:f3:46:40:7c:33:e4:25:fe:2c:17:0a:
                    da:2e:b4:67:46:7c:77:87:b5:14:8c:2d:f2:6a:94:
                    1b:47:f4:9a:b9:17:69:07:60:a4:c1:5e:6b:21:b4:
                    b5:ec:27:3b:36:88:a3:17:41:e0:ff:11:f1:9b:ad:
                    f6:e8:7d:43:c3:dc:0b:59:e6:c5:d7:c9:4c:c4:d6:
                    79:74:a9:df:3b:a7:01:9a:16:1e:08:8e:74:e4:76:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5B:B2:0C:35:F1:24:F6:B7:05:25:46:B2:7D:FD:20:70:64:09:CE
            X509v3 Authority Key Identifier:
                keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:20:36:45:27:91:28:bd:46:3e:ce:51:2c:37:4e:02:4e:d5:
         49:65:92:cf:43:b9:82:90:c9:6e:d5:8c:2a:4c:70:0b:29:00:
         44:4d:ca:b5:10:e1:07:3a:36:7b:c0:79:a5:e0:ab:63:fe:da:
         f7:d1:ff:b5:99:43:6e:3e:49:29:81:87:0d:87:fa:dd:8d:fe:
         5d:56:64:8c:18:66:00:11:65:f1:46:9d:6f:aa:fe:a7:25:1b:
         31:a9:11:b6:0f:89:74:36:34:90:11:6c:ef:30:88:7a:7a:29:
         f4:1c:b0:31:9c:a9:c9:12:49:a3:a2:8e:06:7a:ff:73:28:6f:
         c2:94:20:4b:02:0a:b1:fc:30:d1:b5:73:f7:e0:aa:07:4f:28:
         55:82:a6:07:b7:1e:a8:77:3f:8c:ce:92:ad:ba:c7:de:39:8a:
         c4:c9:e9:61:58:83:a3:f7:15:3a:80:a2:b4:15:9e:d6:a2:b5:
         16:61:d9:2e:24:c0:53:38:dd:ee:06:21:19:86:87:70:a0:c4:
         1f:c2:c4:db:57:de:e7:55:68:8b:b4:6c:92:22:3d:46:a3:36:
         93:12:75:13:56:9c:da:e2:76:3c:9b:c1:3e:47:0f:6f:49:1b:
         1e:39:fc:43:e5:d9:93:bc:e8:43:3b:e1:cf:85:06:3a:98:39:
         55:8b:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:57 2025 by rpki-client