Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File:                     HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier:          CcE68YUfOFcK3XEFOFbcvhuzWQ7s5ZOWIXMrZ2ZXmWA=
Subject key identifier:   F8:48:A3:D6:1B:25:0A:72:41:6E:03:BD:64:E5:52:33:E4:CB:E7:C8
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer:       /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial:       0197488CB02E9E6D6309B43D695F6F407803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 04:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:09 +0000
Files and hashes:         1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: kqUn/PymXdlfXsFMDXawVEEvrIqZTLeA5UisggwHHM4=)
                          2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:b0:2e:9e:6d:63:09:b4:3d:69:5f:6f:40:78:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
        Validity
            Not Before: Jun  7 04:01:09 2025 GMT
            Not After : Jun  8 04:01:09 2025 GMT
        Subject: CN=f848a3d61b250a72416e03bd64e55233e4cbe7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:2b:b5:9c:24:5d:41:f7:3c:d2:23:69:b8:
                    29:c8:9d:b3:5e:a3:75:14:13:c9:2d:37:63:09:8c:
                    6a:77:ae:5d:d2:73:a8:b6:c8:f6:f8:14:1d:fa:32:
                    62:4e:6a:d2:6d:c2:b2:bf:46:27:ce:01:d4:9f:63:
                    3a:4b:b1:84:02:25:24:bb:86:c9:cd:a9:bd:d1:4e:
                    f6:b5:e3:e3:0b:b5:d1:82:41:fe:e5:ea:26:05:28:
                    04:e5:98:b1:23:c7:fd:31:30:25:25:5e:64:1f:1d:
                    7d:46:7d:d1:44:95:e0:9c:d2:48:0b:63:df:f7:10:
                    35:03:08:11:82:e4:20:a2:c3:6e:f1:be:8e:27:87:
                    5c:7a:83:16:1f:d1:af:81:ac:7c:a9:f1:6d:dc:7e:
                    e2:30:4f:4c:85:19:01:20:a2:0a:fe:8c:48:6e:27:
                    9b:c6:1b:a1:23:d1:ae:d5:c5:68:4a:66:da:bb:33:
                    16:e9:83:89:54:2f:9f:21:6a:ac:55:65:f6:16:31:
                    13:af:1d:99:94:36:8d:2d:e3:98:1e:ea:0e:d3:92:
                    2b:b7:85:33:fc:4b:84:de:d1:86:48:a6:c4:27:8b:
                    da:af:21:13:82:42:98:72:6b:3a:45:be:f3:fc:42:
                    75:39:95:40:99:5c:81:42:6e:00:d6:6c:a7:7e:0f:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:A3:D6:1B:25:0A:72:41:6E:03:BD:64:E5:52:33:E4:CB:E7:C8
            X509v3 Authority Key Identifier:
                keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:54:34:2a:d8:4d:90:7a:9e:7c:d0:a9:35:0c:97:50:49:d7:
         a3:2b:11:9b:3f:4e:a4:95:54:30:66:25:51:8c:55:59:2d:ef:
         12:04:3e:29:f6:20:71:5f:d6:41:cb:a0:88:09:4a:f1:0e:56:
         ab:cf:9c:5f:d7:b6:42:ee:f2:97:20:e2:9d:2b:5a:57:68:56:
         db:38:69:98:69:30:fb:aa:dc:c4:fd:42:2e:00:43:84:7c:01:
         17:d1:d9:45:7e:83:20:3c:53:c8:bf:98:ea:4f:67:70:1d:94:
         d2:8c:1c:db:1c:f7:f8:5c:02:b0:90:ab:bf:bc:da:15:f1:cd:
         01:d7:2b:65:4e:c9:65:9e:8e:2f:47:f7:26:81:66:a7:60:f7:
         f4:27:16:86:50:72:41:5a:64:07:48:86:64:9e:aa:ed:e3:57:
         2c:db:ce:27:b6:14:f9:4f:5f:1c:10:de:1c:1b:47:9a:3a:a2:
         3e:14:b8:80:87:5c:d8:d5:86:7a:34:59:c7:54:2e:0d:b0:e2:
         6b:08:94:1f:1e:14:93:5f:44:bb:a1:3c:1a:de:99:23:26:a5:
         c3:22:2e:08:3c:f8:69:37:ff:dc:aa:89:6c:a9:8c:6f:fa:4c:
         7b:9a:38:be:33:97:f9:96:16:ee:03:56:f8:74:82:c4:92:37:
         30:b4:9f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:23 2025 by rpki-client