Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File:                     H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier:          g2d9rpQLaHUkBuxMiQcP8VHrBphheCVNahCKipv7Ou0=
Subject key identifier:   51:B6:6B:22:A8:AD:F1:60:1F:C7:8F:29:8E:53:35:2D:49:2E:E0:7A
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer:       /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial:       01974AE8306D72185A32A8EFFDAF8AAD42DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number:          05F7
Signing time:             Sat 07 Jun 2025 15:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:19 +0000
Files and hashes:         1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: oJym3mYFoEXUFaUTwOcpfWAStNz/Pp8vX1/fMb+PokA=)
                          2: stpDfm6iNdDYaLxAEW54ErOGA3g.roa (hash: 0TvfMldTzQqqOzNlOoBnIsJUFfnXCRYAaac2mQAq9jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:30:6d:72:18:5a:32:a8:ef:fd:af:8a:ad:42:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
        Validity
            Not Before: Jun  7 15:00:19 2025 GMT
            Not After : Jun  8 15:00:19 2025 GMT
        Subject: CN=51b66b22a8adf1601fc78f298e53352d492ee07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:1a:09:f4:23:bc:fc:81:b0:82:af:67:7a:
                    c7:93:ab:3e:a3:b3:50:3b:72:bc:1a:09:4c:1f:cc:
                    3b:58:b9:1c:f5:b3:5f:f4:9a:cd:68:b2:66:b3:1c:
                    50:1a:32:1f:9d:83:ce:de:ec:33:6c:0e:6f:63:5b:
                    48:49:ba:3e:f3:69:00:c2:08:ac:47:59:df:26:1e:
                    f6:9e:aa:e6:6b:8b:ee:3f:40:ad:df:8c:1a:bb:f1:
                    d8:d5:06:24:51:8b:f9:eb:07:d5:d0:45:d1:62:af:
                    8a:8b:c3:6b:2e:0f:9b:98:f2:60:66:a5:03:49:ba:
                    c8:54:cd:b2:4d:bf:07:21:fe:ff:e5:a5:70:6a:d5:
                    6f:f0:4d:67:12:a3:a4:57:da:fe:4c:4c:4e:c3:63:
                    77:e4:fe:30:1f:7e:b9:fd:10:75:85:9d:09:13:df:
                    1f:56:4d:5e:7d:85:79:21:a2:a4:be:3a:38:9e:1c:
                    fa:0c:08:61:01:74:e5:7e:65:86:64:99:75:25:b5:
                    4d:b8:52:1d:e6:37:9a:26:c1:d2:3f:19:e1:18:aa:
                    10:e1:5b:fc:f8:0a:b2:8c:07:10:74:c9:b2:33:05:
                    3f:a1:ef:c6:e2:2f:d9:f7:93:0d:ec:ab:9f:36:00:
                    11:5d:5e:ee:ad:85:40:5a:47:78:3d:ab:d9:89:7f:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:6B:22:A8:AD:F1:60:1F:C7:8F:29:8E:53:35:2D:49:2E:E0:7A
            X509v3 Authority Key Identifier:
                keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:23:0f:6c:f7:86:e1:ff:8c:5c:c8:7c:d4:26:fb:3d:56:e6:
         82:2d:05:28:a8:56:9a:a7:06:54:02:13:ca:5a:bb:e4:ed:32:
         4b:ac:a9:5e:9f:af:a6:38:e5:e6:0c:0d:74:ee:fa:62:15:02:
         cf:b1:00:5e:d6:c0:5d:6a:46:2b:1a:50:4d:53:be:40:af:10:
         c1:f8:3c:f5:bf:7f:b6:6b:ca:9a:52:b8:94:35:32:84:45:5a:
         b2:34:9c:9d:25:81:e5:a7:47:3c:14:2a:4a:61:ec:28:e8:92:
         f8:c0:39:8f:37:5a:c8:61:fd:59:14:ce:ea:80:e5:30:2a:0a:
         1a:3d:6d:08:ae:57:e9:2d:d9:2d:93:3f:55:bb:17:74:60:60:
         1f:5c:b4:5a:c5:35:83:6b:0f:c6:fb:3b:dc:2f:54:e2:08:aa:
         7b:df:7e:d7:d8:f7:e4:0b:7e:98:5b:fe:ba:d3:a7:94:59:38:
         c4:95:6b:61:a6:db:38:c5:c7:62:f1:26:b6:0e:46:1b:b2:47:
         2a:a6:3a:6f:bc:69:5f:b4:9c:0c:a8:ef:2b:60:bc:12:55:9b:
         3f:f7:e9:7c:33:8c:43:d2:9d:7d:cd:25:2b:0e:6d:99:72:e2:
         c0:0f:1e:1c:f2:02:f6:10:69:6c:b8:68:d2:fe:e8:db:5c:a8:
         b8:b5:e1:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6DBtchhaMqjv/a+KrULbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZWRjNGMxOWUwMzNhMTY3ZTRhZjc5NWQ1NGUzNGI3MWVh
MDkzYzYwHhcNMjUwNjA3MTUwMDE5WhcNMjUwNjA4MTUwMDE5WjAzMTEwLwYDVQQD
Eyg1MWI2NmIyMmE4YWRmMTYwMWZjNzhmMjk4ZTUzMzUyZDQ5MmVlMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWQaCfQjvPyBsIKvZ3rHk6s+o7NQ
O3K8GglMH8w7WLkc9bNf9JrNaLJmsxxQGjIfnYPO3uwzbA5vY1tISbo+82kAwgis
R1nfJh72nqrma4vuP0Ct34wau/HY1QYkUYv56wfV0EXRYq+Ki8NrLg+bmPJgZqUD
SbrIVM2yTb8HIf7/5aVwatVv8E1nEqOkV9r+TExOw2N35P4wH365/RB1hZ0JE98f
Vk1efYV5IaKkvjo4nhz6DAhhAXTlfmWGZJl1JbVNuFId5jeaJsHSPxnhGKoQ4Vv8
+AqyjAcQdMmyMwU/oe/G4i/Z95MN7KufNgARXV7urYVAWkd4PavZiX82MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG2ayKorfFgH8ePKY5TNS1JLuB6MB8GA1UdIwQY
MBaAFB/txMGeAzoWfkr3ldVONLceoJPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUt
MmY4NzliNTc1NGUxLzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUtMmY4NzliNTc1NGUx
LzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyMPbPeG
4f+MXMh81Cb7PVbmgi0FKKhWmqcGVAITylq75O0yS6ypXp+vpjjl5gwNdO76YhUC
z7EAXtbAXWpGKxpQTVO+QK8Qwfg89b9/tmvKmlK4lDUyhEVasjScnSWB5adHPBQq
SmHsKOiS+MA5jzdayGH9WRTO6oDlMCoKGj1tCK5X6S3ZLZM/VbsXdGBgH1y0WsU1
g2sPxvs73C9U4giqe99+19j35At+mFv+utOnlFk4xJVrYabbOMXHYvEmtg5GG7JH
KqY6b7xpX7ScDKjvK2C8ElWbP/fpfDOMQ9Kdfc0lKw5tmXLiwA8eHPIC9hBpbLho
0v7o21youLXh4g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:09 2025 by rpki-client