Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File:                     hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier:          xbb9cKQpSQVuw9VjdT22f8mJhtCnzQYDedQYGxzKsLg=
Subject key identifier:   7C:F6:0D:55:A2:52:59:FF:9B:29:65:82:DC:4A:7B:D4:32:9A:5B:3C
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer:       /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial:       019762F07F447673C8EA3FEA80C97EC7C6D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number:          0C40
Signing time:             Thu 12 Jun 2025 07:00:17 +0000
Manifest this update:     Thu 12 Jun 2025 07:00:17 +0000
Manifest next update:     Fri 13 Jun 2025 07:00:17 +0000
Files and hashes:         1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
                          2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: 8OcMELEKqJpfan5akzNJm8D4AftPJomBp96Lm1TNufg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:f0:7f:44:76:73:c8:ea:3f:ea:80:c9:7e:c7:c6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
        Validity
            Not Before: Jun 12 07:00:17 2025 GMT
            Not After : Jun 13 07:00:17 2025 GMT
        Subject: CN=7cf60d55a25259ff9b296582dc4a7bd4329a5b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:97:11:c4:09:85:b0:43:07:b5:cf:24:5e:
                    21:45:82:ca:c8:dc:80:e4:49:2d:ae:66:9a:57:66:
                    c3:fe:63:dc:da:fd:d1:de:00:fe:ea:00:15:d3:b9:
                    18:d3:22:3b:bf:73:9c:9e:c0:84:fe:09:2f:32:5f:
                    a1:9d:23:21:58:65:0b:29:61:0a:75:36:99:73:3b:
                    e0:b1:df:1d:a4:e3:ab:cc:26:c4:38:03:2c:ec:7d:
                    b4:45:31:1a:02:aa:20:59:75:a1:94:a6:e1:95:58:
                    9f:08:27:3c:86:7a:25:1e:40:00:e7:6d:65:3d:31:
                    1a:b2:29:82:de:e7:11:7d:d4:1a:25:aa:9f:cf:26:
                    b8:e2:9b:24:e0:3f:f7:3e:34:13:ba:62:c5:02:67:
                    b9:d6:0e:20:b0:9c:0e:0c:12:4a:a5:80:60:37:f0:
                    b7:cc:a3:24:5b:aa:43:d5:ed:81:c5:60:e8:a4:b8:
                    6f:92:ab:00:22:87:cd:6b:df:55:45:00:42:61:84:
                    15:0f:c0:ff:b8:f8:ea:31:b3:b8:b2:34:d3:63:12:
                    a8:cd:82:3d:6b:f6:d5:b4:2e:ae:14:9d:06:20:2c:
                    7b:77:ac:1c:69:db:fc:bc:5f:ae:2d:0a:46:28:9e:
                    51:ff:38:82:7a:90:60:1c:1a:e6:a9:1e:9e:e8:10:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F6:0D:55:A2:52:59:FF:9B:29:65:82:DC:4A:7B:D4:32:9A:5B:3C
            X509v3 Authority Key Identifier:
                keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:60:8b:f0:5c:65:15:86:4c:4d:9e:1d:14:04:56:13:6f:
         f2:97:67:8b:4c:89:13:49:64:bc:63:0c:ef:ac:f8:14:45:6f:
         35:6f:76:6e:e3:5a:70:b2:47:03:1d:f5:c3:b7:a9:69:ac:b8:
         d2:66:20:80:ff:4b:b9:7d:b7:d5:62:84:c8:06:2b:28:0a:f4:
         3b:e8:a6:cd:02:ca:c6:0e:4f:97:bf:19:92:a4:83:75:e7:96:
         23:c2:b2:94:9b:8e:4f:a0:ed:49:54:5b:7c:b7:9a:c3:fa:91:
         79:dd:e7:d2:80:4f:cc:42:9b:55:a2:45:11:8d:6f:4e:97:9b:
         98:8b:b0:5e:e6:45:f5:da:5e:00:f6:df:6f:11:73:97:98:3d:
         82:18:7f:89:ef:f0:24:b7:1a:5e:22:41:36:d0:b7:60:f1:a0:
         05:c9:04:ad:6f:86:56:6a:8a:85:49:5d:7a:43:b5:9d:53:14:
         c3:94:c0:a1:f7:ed:b0:bb:40:fa:7c:c1:9d:23:cc:2b:36:57:
         4e:2f:b5:6b:f5:fd:44:e6:f1:f2:7d:78:d7:7a:23:f7:c6:1b:
         b9:da:13:4e:24:20:1c:a3:f2:0a:38:0e:70:84:ea:d5:d1:58:
         f5:d8:52:e4:93:ac:68:c2:5b:d1:01:2a:c2:63:df:21:6e:7f:
         60:60:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:06:25 2025 by rpki-client