Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File:                     HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier:          L/wXg9aItC+PRaXwSdFykyPkf0qWulDdftU1IX4caoY=
Subject key identifier:   A5:23:26:BD:45:A1:73:E4:37:16:2C:68:8A:29:40:77:CB:95:99:BC
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer:       /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial:       0197469E1D4B6292CD4FA7CF48E8D0F5D36B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number:          1577
Signing time:             Fri 06 Jun 2025 19:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:56 +0000
Files and hashes:         1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: 5OqCgcJC9obJe4jqFfTbyFfYi7W3qPqRuAPoKrTrVpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:1d:4b:62:92:cd:4f:a7:cf:48:e8:d0:f5:d3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
        Validity
            Not Before: Jun  6 19:00:56 2025 GMT
            Not After : Jun  7 19:00:56 2025 GMT
        Subject: CN=a52326bd45a173e437162c688a294077cb9599bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:fb:98:f0:db:a0:d7:49:99:dc:71:14:40:
                    44:ea:d3:e3:76:df:40:a2:0f:f2:a8:ad:94:c9:49:
                    b3:e3:2f:0d:46:1f:ec:e9:28:dd:bd:9e:7d:8b:0e:
                    15:06:de:fa:be:ab:d4:0c:2a:f1:3c:34:ac:07:ed:
                    31:a0:18:fb:0d:9d:0b:bf:1f:b1:e4:e4:d1:e9:4d:
                    a5:61:e6:57:ef:07:3f:fe:80:0d:58:be:3d:3f:ff:
                    85:90:9b:46:f2:10:63:77:71:9a:84:7f:75:b9:8c:
                    c5:3b:a8:3c:ea:a6:6e:26:37:04:5f:95:95:37:4f:
                    00:af:dc:7b:3b:7f:de:91:89:cb:33:73:7c:4d:bd:
                    95:8b:7a:7a:90:fb:84:c1:89:84:10:62:cb:fe:71:
                    f1:9e:a8:d6:ae:06:2b:61:49:f2:98:26:47:b2:55:
                    da:d9:f2:7c:8b:75:1c:1e:aa:05:bd:af:a4:e1:6c:
                    d7:5b:6a:50:f3:27:0e:56:b3:76:23:ac:48:b2:f8:
                    54:84:ff:d8:83:a2:77:6b:0d:07:c9:4e:08:85:86:
                    86:9f:57:32:c1:51:28:81:ac:7e:e2:9f:82:11:ce:
                    a9:25:81:7f:14:a3:dc:57:3f:4e:a6:d0:ae:b4:8b:
                    d1:86:59:98:3b:f0:05:38:c9:c1:7e:0e:30:7f:f6:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:23:26:BD:45:A1:73:E4:37:16:2C:68:8A:29:40:77:CB:95:99:BC
            X509v3 Authority Key Identifier:
                keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:15:f6:9e:22:f6:75:27:b4:a4:4e:1d:05:91:9a:8c:05:99:
         b6:7d:62:3f:8e:54:d2:46:2c:a0:6c:10:9c:0a:6d:6c:81:9d:
         56:74:be:25:1b:c5:d7:b2:50:10:25:0f:7b:cf:26:ba:b2:52:
         56:ef:dc:cd:52:01:27:37:76:55:18:a7:c4:bd:d4:3f:54:15:
         37:2e:ad:08:84:b1:e1:6d:92:98:12:6b:c0:bf:31:d1:e7:e3:
         19:cc:da:54:27:4d:fd:b4:20:95:4c:e5:f4:97:e8:12:02:6a:
         e7:11:7c:31:4f:75:7c:76:de:41:81:e7:7d:90:0d:d2:02:66:
         c7:83:24:b9:a5:b7:6b:ca:2d:4f:0b:f9:2f:47:0b:1f:3e:7e:
         5d:60:46:29:52:83:2a:e6:45:67:31:73:b0:f7:11:cd:fa:be:
         35:62:34:07:40:dd:94:46:3a:41:15:ed:95:7f:96:97:3b:69:
         f4:59:90:99:05:6f:de:ad:52:78:97:f6:4e:f3:fd:a1:93:78:
         1f:a6:74:bf:65:b6:cf:b2:58:8b:e4:c9:41:d8:85:b7:1a:d6:
         79:11:7e:a2:07:1d:21:f9:07:7d:24:c3:a8:c3:de:21:db:d0:
         9e:d9:b2:70:e4:f8:4b:e8:61:e0:df:65:be:31:fa:0a:84:78:
         e9:d0:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:53 2025 by rpki-client