Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File:                     H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier:          tBJHD8F9FyJ+XK1wrJkZXqvsuFjBthtQRwJtX3Ox9q8=
Subject key identifier:   E6:EE:59:A0:45:F7:19:DC:5E:20:8B:22:0C:17:92:B2:5B:36:A6:69
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer:       /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial:       01974D7BA8167F37FC0979D803CBB5E752B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 03:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:38 +0000
Files and hashes:         1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: 9rKqjPZdsKR9CY560WDp616fBCRLtg9ypVqB3FCRI5E=)
                          2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
                          3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:a8:16:7f:37:fc:09:79:d8:03:cb:b5:e7:52:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
        Validity
            Not Before: Jun  8 03:00:38 2025 GMT
            Not After : Jun  9 03:00:38 2025 GMT
        Subject: CN=e6ee59a045f719dc5e208b220c1792b25b36a669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:1d:3e:37:6b:9e:9e:27:c3:bd:b0:07:79:
                    4b:09:f7:04:0a:18:0b:d1:9b:0e:4e:76:44:5b:5c:
                    93:20:ec:c4:9a:1a:69:50:2c:87:6e:20:9c:ae:79:
                    ac:24:41:a0:87:ae:be:52:95:44:e9:60:77:e1:4a:
                    c7:40:62:e4:b6:01:e3:dc:4b:97:3d:f1:ca:f8:c7:
                    03:31:17:28:dc:78:60:6b:f4:60:fb:7f:2b:74:57:
                    7d:c4:02:97:f6:2e:3f:88:d5:b4:18:b2:00:4b:3f:
                    ae:9f:94:36:8a:63:d7:15:b4:1d:08:e0:5c:2a:0e:
                    47:ec:8c:b2:9d:bf:94:29:0c:88:78:7c:81:14:99:
                    7a:95:c6:dd:5b:8f:97:e1:56:ce:67:c5:80:e2:3b:
                    17:31:6e:76:a8:30:55:b2:51:2b:ce:9f:44:58:d7:
                    bd:bc:39:70:13:f6:b5:0b:f6:9b:73:c5:e8:5d:21:
                    59:f8:da:64:70:7d:b5:8e:61:ce:02:38:2d:8d:bf:
                    95:81:d5:ca:69:6f:da:b9:24:d9:09:94:0c:3e:74:
                    84:6c:dd:9b:97:be:ff:37:2c:a1:bd:3d:69:c3:1d:
                    0f:1c:21:77:89:fb:76:80:88:f6:31:c8:70:d3:82:
                    5e:c0:b4:2e:70:13:36:9d:23:11:4c:29:9a:f7:b5:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:59:A0:45:F7:19:DC:5E:20:8B:22:0C:17:92:B2:5B:36:A6:69
            X509v3 Authority Key Identifier:
                keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:1a:59:4b:b0:c6:eb:f7:7a:30:32:0e:36:8b:8d:8f:76:26:
         ca:f6:d6:b5:c0:3c:6a:9d:ef:24:b5:fb:1c:78:cd:91:96:0e:
         36:49:fb:12:bd:fa:db:1f:21:f0:c9:01:38:01:dc:2b:44:0d:
         93:3c:f5:66:23:f9:7c:36:49:48:68:e2:4f:3e:a4:f0:18:7e:
         75:64:c8:c3:bd:ac:f6:4c:d2:d8:ba:9a:d7:e6:43:4d:47:c3:
         52:a5:6c:9f:24:df:67:92:0d:f6:4d:97:cb:63:18:d7:ce:85:
         2c:6c:0a:61:7b:e9:48:b6:a8:89:c8:fb:94:a2:32:16:e7:07:
         d4:16:36:a8:0d:be:22:58:03:1d:83:90:2e:9a:a2:9b:d2:c8:
         12:61:70:a7:8b:c7:54:6a:c4:ed:50:53:be:f0:f6:7f:cc:72:
         46:79:0a:c9:d6:5d:30:55:f6:4f:09:f7:3f:04:e3:5c:c5:47:
         59:47:9e:81:42:a9:bd:cb:71:5b:46:d6:64:f1:d7:7d:24:6f:
         c3:27:fa:85:cb:02:b8:39:3d:76:aa:7c:0c:b2:fb:58:4e:ae:
         71:bf:38:ca:04:4c:05:e0:92:35:cd:95:46:db:2f:98:53:9a:
         4d:4e:a7:2b:bf:9c:63:c6:88:64:98:9c:76:3f:a4:b5:04:2b:
         32:82:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:16:17 2025 by rpki-client