Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File:                     hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier:          8tD6A9AveM5S43gJl+gLfurQoHWWDhIfI1XXYHgJzMg=
Subject key identifier:   EB:79:12:79:C0:53:81:D5:59:78:33:C0:7D:69:B5:A0:22:E9:32:70
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer:       /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial:       01975B6E1B3E0D7DB17059918E45CAA04C03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number:          0635
Signing time:             Tue 10 Jun 2025 20:00:31 +0000
Manifest this update:     Tue 10 Jun 2025 20:00:31 +0000
Manifest next update:     Wed 11 Jun 2025 20:00:31 +0000
Files and hashes:         1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
                          2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
                          3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: mA/4Kem9EeE7wA21piNyKHJ+IiBsUCla/vQzW2jjYyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:6e:1b:3e:0d:7d:b1:70:59:91:8e:45:ca:a0:4c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
        Validity
            Not Before: Jun 10 20:00:31 2025 GMT
            Not After : Jun 11 20:00:31 2025 GMT
        Subject: CN=eb791279c05381d5597833c07d69b5a022e93270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:cf:85:4f:1e:cb:eb:a1:d7:cf:94:e1:9e:
                    35:41:93:1b:01:fb:4b:8b:a6:e8:18:68:4d:c7:da:
                    69:0c:c0:ec:a6:ae:b6:ee:d0:71:88:fa:48:2b:39:
                    d3:d5:c8:d4:56:a0:e1:75:e1:5e:63:57:01:f0:32:
                    5e:83:77:9b:83:77:90:1c:6b:2f:1a:61:61:3f:5c:
                    1e:ff:97:c6:de:4a:3c:b2:df:0b:36:33:dd:c5:e8:
                    10:a5:72:fa:58:ff:f5:a4:28:61:d3:5a:c3:61:ce:
                    ae:7d:8d:a1:9b:52:c3:1b:2a:d0:36:9d:f9:61:af:
                    38:e7:56:18:f5:31:fd:56:71:a7:43:72:ff:99:80:
                    e9:8c:5c:af:aa:30:e7:4f:dc:bd:4e:1e:ce:cf:29:
                    f2:82:4f:b3:8a:b3:e8:6a:0a:98:06:38:7e:98:1b:
                    b1:c0:5f:df:7d:2f:d0:a1:ea:01:85:97:4d:73:4b:
                    ef:f4:73:21:7d:14:d5:48:ec:86:b5:51:1a:4a:a6:
                    a2:dc:ca:e0:3f:de:c4:4f:b6:13:16:9f:0f:92:05:
                    92:bf:f2:8c:b3:c1:ed:88:e9:db:3b:4e:60:08:f2:
                    e3:33:1d:03:fa:52:72:64:9d:26:a9:bc:a3:8c:a8:
                    ee:88:e3:9b:56:ec:65:75:29:bc:80:b5:46:5b:61:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:79:12:79:C0:53:81:D5:59:78:33:C0:7D:69:B5:A0:22:E9:32:70
            X509v3 Authority Key Identifier:
                keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2b:ed:bd:25:4e:60:18:09:ad:57:62:0a:75:3f:37:22:0b:
         4d:dd:5f:53:99:3f:21:5f:2d:f0:37:e4:60:9b:3c:2c:86:c1:
         ee:60:91:1c:a9:aa:be:a2:07:50:a3:dc:24:e4:76:4b:37:45:
         40:1c:a0:8d:fa:08:eb:7c:2e:40:ec:a4:4c:78:4d:a1:4f:23:
         2a:98:2c:12:f5:4e:2b:a1:4b:21:14:ca:39:cc:83:c5:5a:ae:
         b3:a1:0b:93:4d:5f:ff:57:e2:ce:43:e8:1e:30:07:10:36:f8:
         65:3e:ec:bd:01:1c:f0:55:cb:af:65:0a:86:51:73:97:d4:45:
         bb:e2:ee:f2:f8:7b:b3:32:0f:48:91:af:15:6d:48:ad:d8:dc:
         30:eb:ec:0f:08:9c:0e:9e:93:dc:ab:be:77:a6:43:ac:e0:29:
         0e:f6:f3:66:12:4a:43:19:c6:9c:77:1b:32:e6:50:70:a6:c6:
         e7:8e:37:84:23:6d:aa:b3:a8:27:17:39:ef:97:12:67:2f:e1:
         c9:09:3f:cd:48:98:d0:8c:cd:0a:df:e0:6c:de:96:60:53:b7:
         82:70:7e:de:02:eb:a5:89:75:85:15:33:d1:ee:23:8b:26:52:
         02:03:14:92:cf:dc:f5:32:0c:32:16:17:fe:01:8b:c6:ef:87:
         bf:d2:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:52:46 2025 by rpki-client