Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File:                     H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier:          jc3MowaoCSG9wnwWq/wQbPkxROVu8o598ZT6vPvtysI=
Subject key identifier:   7C:4D:CD:6B:2E:5E:BB:00:BE:72:E8:B7:FD:73:25:85:BE:82:9F:A4
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer:       /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial:       01974CD6C8B1FFA4BD383D68AD2024D155A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number:          0E38
Signing time:             Sun 08 Jun 2025 00:00:33 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:33 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:33 +0000
Files and hashes:         1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: 6YyxSWoCOtXLKWUQGalCY6Pg70KLRnRdpDzRPIpH0hM=)
                          2: vNstzceOXGplN-vBnPrAujnN1Ks.roa (hash: A1jnUd+2zoPrt/m5wPvY6xxOOy1gAscK2t40BFmGG10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:c8:b1:ff:a4:bd:38:3d:68:ad:20:24:d1:55:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
        Validity
            Not Before: Jun  8 00:00:33 2025 GMT
            Not After : Jun  9 00:00:33 2025 GMT
        Subject: CN=7c4dcd6b2e5ebb00be72e8b7fd732585be829fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:e2:7b:6a:de:4b:4f:f8:4a:fc:2a:ea:7f:
                    07:27:07:33:cf:53:04:6d:22:95:64:7c:8e:50:0f:
                    e0:3d:14:d2:e5:58:a8:a7:a8:2b:4f:f6:16:40:d9:
                    04:f0:3a:ad:d1:80:b8:02:04:e0:0d:38:86:2d:d8:
                    80:bc:fb:67:84:d0:0d:5b:9a:07:60:b8:62:cd:0c:
                    05:de:07:5b:df:7c:45:8a:5f:14:99:f7:a0:2c:f8:
                    0e:af:c9:52:92:fe:68:d0:d4:14:24:60:2d:92:e3:
                    27:70:0b:4c:c1:3d:2f:bd:a6:4d:f6:64:42:b9:43:
                    b6:93:8a:0d:f5:39:f2:b4:0d:63:08:05:9b:f3:d7:
                    f6:1b:dd:06:4f:61:62:74:ab:12:57:3f:8c:eb:d2:
                    ca:de:10:83:7b:ee:81:f0:2c:3a:33:dd:e9:4c:be:
                    99:f5:36:ed:30:dd:aa:f6:33:13:6b:a9:4d:41:e5:
                    62:83:b8:b3:cb:4a:1b:3c:35:33:76:0a:00:c0:b7:
                    70:fc:cc:18:e8:b3:6c:d0:8f:77:d4:66:3d:df:3c:
                    e9:5e:bf:de:de:0c:d5:5c:fd:c2:a4:08:5f:4c:b1:
                    09:ed:e5:be:eb:02:3a:ec:9a:d2:c5:7a:a0:97:7d:
                    b0:7a:ec:7d:2c:1e:33:ef:7a:b2:ad:0d:b5:0f:45:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4D:CD:6B:2E:5E:BB:00:BE:72:E8:B7:FD:73:25:85:BE:82:9F:A4
            X509v3 Authority Key Identifier:
                keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:48:7f:cf:74:fb:76:07:eb:37:74:43:f0:21:6d:4c:30:bb:
         f4:64:a1:0e:15:85:58:4a:56:46:9f:8a:1b:f1:ae:a4:a1:9c:
         3a:55:18:ec:c4:5f:bb:61:17:45:44:09:43:c7:e3:f8:e9:c1:
         42:37:7a:f3:7c:93:4a:c3:5b:fd:db:1b:00:41:88:fc:41:e6:
         33:42:4e:d6:80:b8:d7:8c:e5:a4:2b:be:3e:03:9f:f7:ef:6c:
         db:f5:75:b0:5e:48:58:22:d1:22:6d:ff:20:6f:28:79:18:2c:
         60:34:b0:87:43:f5:ab:97:53:18:c4:49:51:df:df:f4:6a:20:
         49:b2:ff:9d:b7:e3:89:52:80:55:2d:91:b9:20:0e:e1:e7:d1:
         69:1d:62:f1:c3:d6:5b:ec:fc:1e:58:ea:68:bc:f5:44:8b:56:
         c3:54:5c:c3:96:1f:17:e1:24:a5:93:98:21:f3:23:42:f5:8f:
         af:4d:96:27:56:c4:80:2c:32:4d:78:28:27:82:ed:59:5a:59:
         e1:a6:46:f5:73:b9:2b:29:7b:52:ba:14:6f:f9:0d:36:18:3d:
         24:9e:34:3e:d1:49:5a:22:16:c0:4f:2c:36:fc:2c:19:7e:cc:
         06:c7:b8:54:60:14:55:69:9c:5c:da:ea:de:30:ea:17:88:ab:
         45:94:e1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:12:47 2025 by rpki-client