Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
File:                     Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft (raw, json)
Hash identifier:          z9Qp6Aoo96RX1SeS1fZh4Fqk6ZsCdeU1v+8bJtlR4Hk=
Subject key identifier:   8C:B3:86:30:7E:88:29:2F:2A:8D:1B:91:ED:9F:72:04:BA:A3:5E:25
Authority key identifier: 1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A
Certificate issuer:       /CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
Certificate serial:       019766290C6531C2AACDD32A6C729B507F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
Manifest number:          03C3
Signing time:             Thu 12 Jun 2025 22:00:55 +0000
Manifest this update:     Thu 12 Jun 2025 22:00:55 +0000
Manifest next update:     Fri 13 Jun 2025 22:00:55 +0000
Files and hashes:         1: Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl (hash: PgbY375/lWadSK/hxUaklQ1BaKEyHqTnOc0vjygMzTE=)
                          2: dt7OMFAxYi9mfSy74b5_x7Lhpto.roa (hash: 4uikV6DgluHoEAMF2XeMMDlFi1mz2gwrijFHfMDuXc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:29:0c:65:31:c2:aa:cd:d3:2a:6c:72:9b:50:7f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
        Validity
            Not Before: Jun 12 22:00:55 2025 GMT
            Not After : Jun 13 22:00:55 2025 GMT
        Subject: CN=8cb386307e88292f2a8d1b91ed9f7204baa35e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:dc:d4:a6:93:ba:66:8b:53:64:00:78:9a:
                    44:47:2d:18:a3:de:4c:7c:56:82:64:3c:e6:94:9c:
                    20:37:4c:d6:1f:1b:1a:af:29:e7:73:c5:a0:fc:9a:
                    31:d7:5d:90:d6:8c:ea:20:6d:f8:96:08:84:3f:9e:
                    70:0f:d5:90:34:d4:51:1f:ad:04:e5:ca:60:fd:75:
                    39:12:c0:69:38:6a:cb:b8:2e:d2:2b:0a:c3:92:fc:
                    b3:b1:81:8c:a4:f7:ca:40:0a:73:03:b9:72:00:58:
                    56:fa:21:65:d6:df:42:8d:1a:e8:b7:e2:22:fd:0b:
                    64:1e:e7:af:0d:56:c6:af:21:88:46:60:df:ad:57:
                    cd:72:a4:0f:84:90:aa:23:23:00:be:bf:4c:6c:0a:
                    52:f8:51:61:69:22:94:b5:17:fe:36:ab:c9:af:98:
                    fd:6a:8a:60:41:88:79:f9:0b:9a:68:3e:60:96:81:
                    fc:d5:38:35:0e:2c:9e:8a:84:fd:1a:1f:96:ae:0f:
                    c3:e4:0e:95:b8:dc:ac:d6:0a:2b:9a:66:d5:cb:3a:
                    ac:62:a6:87:39:d0:2f:d3:bf:e3:44:ec:25:fa:cc:
                    5e:c3:62:36:54:0b:03:6f:88:18:ad:83:eb:e4:6f:
                    a3:98:1f:d6:83:e1:6c:bf:e8:02:5a:c3:ae:4d:5b:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B3:86:30:7E:88:29:2F:2A:8D:1B:91:ED:9F:72:04:BA:A3:5E:25
            X509v3 Authority Key Identifier:
                keyid:1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:73:c9:cf:c3:05:cb:cd:76:42:eb:7a:94:52:bf:f9:6a:6c:
         71:d4:19:0a:de:a2:0b:a2:d5:2e:f1:3a:1b:fb:e6:fa:02:2e:
         2d:96:6b:fd:73:04:28:52:d1:f3:f4:27:ef:a2:ac:09:c5:8a:
         93:60:57:eb:76:76:5c:78:4d:98:5e:39:14:47:34:19:26:00:
         06:61:4f:0c:d5:9a:bf:66:67:55:0d:24:3e:e6:fc:ab:b8:6d:
         b1:6b:c9:23:8e:9b:fd:17:2f:e0:94:c6:4e:6e:89:5e:c0:32:
         ed:cc:2c:89:93:9e:97:9c:82:5d:2f:b6:55:4c:ca:f4:a4:0e:
         2e:ab:e7:61:9f:62:d7:a8:5e:fe:7c:85:8d:68:22:2e:99:f5:
         cf:1b:de:0e:d3:ee:63:f4:68:de:05:cc:23:ff:b9:2d:90:10:
         13:9f:bd:3c:88:57:d7:e3:f1:0f:e7:fa:5c:65:00:cd:ee:2a:
         12:bb:00:14:d5:98:cd:f6:35:fa:93:81:28:dc:ba:93:2f:f4:
         2a:63:4f:e7:99:c2:11:01:49:fa:8f:4e:89:b8:85:f1:d5:61:
         55:9c:2d:d1:01:fe:03:90:37:53:f3:ae:f5:a7:f8:78:fd:60:
         ec:33:6e:9b:26:84:da:38:59:69:f7:ab:29:7b:93:0e:2b:46:
         f1:ba:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:16:34 2025 by rpki-client