Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File:                     HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier:          HiIQ0dfByLfUkpW+5ehrRa/LUxXuVLr+L//DYvb6aBs=
Subject key identifier:   5C:34:E4:64:5F:A8:7B:56:5F:44:37:8F:47:41:0D:FE:98:4B:8C:FC
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       01963351ABE2DA3FDE4B8019D0FD3B369C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number:          107F
Signing time:             Mon 14 Apr 2025 08:01:52 +0000
Manifest this update:     Mon 14 Apr 2025 08:01:52 +0000
Manifest next update:     Tue 15 Apr 2025 08:01:52 +0000
Files and hashes:         1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=)
                          2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: u0FeDbKnubWbGGeeGaJM/2JszxlxnW0lLgMRMzNR24s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:33:51:ab:e2:da:3f:de:4b:80:19:d0:fd:3b:36:9c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Apr 14 08:01:52 2025 GMT
            Not After : Apr 15 08:01:52 2025 GMT
        Subject: CN=5c34e4645fa87b565f44378f47410dfe984b8cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:ed:05:a3:d8:34:a5:52:a4:bd:d8:73:13:
                    62:2d:2f:b5:d7:f5:76:4c:9c:5d:64:21:30:7c:1e:
                    e4:70:f3:83:f5:df:6e:4b:f2:97:93:7d:90:c2:e1:
                    0e:81:6d:db:04:f7:d3:2e:cf:fc:2b:9b:62:33:d0:
                    06:f0:6f:ec:81:63:31:bc:b8:3e:c1:3e:45:40:5c:
                    7f:4b:ff:6c:c9:51:c7:05:3d:a5:79:e8:8d:13:c4:
                    62:75:6d:a2:4d:e3:dc:32:5a:e7:ab:29:22:af:66:
                    db:2b:0d:ed:37:a8:09:b0:ec:16:03:e1:1c:ab:84:
                    1d:3d:e8:5c:bd:a3:c6:69:2f:cc:c6:0b:1a:ec:be:
                    81:0e:fd:db:83:3b:8b:d6:f5:3c:de:b4:c2:4b:e3:
                    87:70:f1:b0:06:1b:30:6e:85:77:fe:d8:8c:4d:aa:
                    98:06:3c:d5:b8:73:51:ce:7e:27:f5:2c:d0:fa:e7:
                    9d:11:60:58:f6:fd:d1:fb:45:f9:b7:df:15:7c:87:
                    44:8f:22:38:85:79:85:85:65:5b:27:b7:9e:90:f4:
                    51:67:b2:73:99:9a:36:1a:c6:b1:16:0d:ae:65:9b:
                    0e:90:3d:91:c1:16:67:55:d8:76:78:44:8a:94:d7:
                    c2:3c:5d:b6:1e:24:34:fc:70:40:dd:f7:bd:fe:54:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:34:E4:64:5F:A8:7B:56:5F:44:37:8F:47:41:0D:FE:98:4B:8C:FC
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:65:2c:4b:66:87:d0:0b:fb:25:d6:c6:c1:3c:ca:e1:86:
         cf:1d:a2:b6:28:66:ba:31:c0:79:22:09:2d:aa:24:61:3d:61:
         67:32:c4:f9:ea:83:e5:ee:b2:e8:6e:9e:c2:26:66:6b:a7:f5:
         52:42:a0:2d:33:80:e9:4c:b2:5f:f8:6c:21:52:2b:e1:38:0b:
         e9:9b:ea:cb:56:ee:34:85:2e:bf:b9:61:b7:1e:3d:dc:07:f7:
         f2:7c:76:27:b6:43:8a:a3:bf:7b:45:ff:d7:f0:ca:53:63:fe:
         62:e8:58:5c:9d:7f:55:1b:54:9c:fc:bb:41:e1:36:e5:66:1c:
         59:13:f3:fb:ab:ef:36:9c:e8:9e:9f:6f:53:64:f3:a4:7d:f4:
         24:9f:ee:c8:b4:84:07:95:56:28:a4:ee:91:c1:7c:1d:db:5d:
         82:73:12:a0:d8:17:55:50:9c:e5:cf:21:d9:dd:4b:86:e4:9f:
         51:ed:4d:44:e3:b2:6d:8e:13:2e:03:e4:87:b1:34:0a:9a:72:
         33:34:b5:fa:c1:4a:d6:63:ce:58:2d:91:56:f4:36:7f:fd:92:
         83:c0:b6:9e:73:ed:76:b7:29:ac:c1:12:bc:84:a9:ac:e0:3e:
         a0:f7:af:34:9f:c9:0a:b9:73:f9:43:0f:aa:36:b1:8c:c0:cf:
         cb:77:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:32:47 2025 by rpki-client