Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File:                     Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier:          YXWVndma4oOu++Q1Rwccx1X3rF6UmBzsiorqqF+BZc4=
Subject key identifier:   BF:98:9A:E3:03:94:DB:4E:9E:81:84:0C:CC:44:6D:B1:86:52:EA:F2
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer:       /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial:       0197500F1B6DE52E1C1097CB490A2BD4BF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number:          0175
Signing time:             Sun 08 Jun 2025 15:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:56 +0000
Files and hashes:         1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: tiOQAFSGxCSSR2d5dU1PEZRlqT2wFd/YTt5nAr0eHH0=)
                          2: M29MZHaUVWtK3najarc1yezWgKc.roa (hash: DgsfcRzAIkNIxHuMwWB3b5pmyNDgSLwh6M/sC1bq7QQ=)
                          3: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
                          4: g6q7q2HLmrL68PDSTTyRIYBNcJY.roa (hash: eTY6Q+eiIrBv9YE0+f1h1CVgS/oOAfzZcA42kSmU6+0=)
                          5: tVe9NnJO2Z95ZTZ1L61RChKUAa0.roa (hash: f4jqfRGm53uIrMSNBpcr7YiVL+9kyYDEvd948D1JBYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0f:1b:6d:e5:2e:1c:10:97:cb:49:0a:2b:d4:bf:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
        Validity
            Not Before: Jun  8 15:00:56 2025 GMT
            Not After : Jun  9 15:00:56 2025 GMT
        Subject: CN=bf989ae30394db4e9e81840ccc446db18652eaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:e1:dd:d8:b5:42:14:01:1d:07:d3:4f:16:
                    9d:60:07:5d:98:1c:e2:85:3f:f5:1a:a0:9e:8d:da:
                    f3:10:d4:6d:5e:2e:3e:fc:27:38:2a:47:6a:30:47:
                    17:80:41:c4:bc:96:23:41:51:60:29:52:9b:4e:f0:
                    96:9d:87:ac:8b:3a:a8:86:31:ba:07:83:af:d5:ed:
                    ee:60:f7:96:98:16:40:f7:f7:c8:e8:e8:5e:eb:24:
                    ab:7c:7b:5a:27:dd:34:11:63:b2:b5:7a:64:df:b3:
                    b7:ea:ec:42:3a:a5:a4:fd:bc:6b:2f:64:35:f6:ea:
                    85:e4:7b:9d:b6:e5:47:e4:fd:0b:87:7a:e2:00:bc:
                    4a:83:16:b5:42:b1:55:19:6c:e7:b1:07:98:30:48:
                    89:88:0b:f0:b3:c6:df:68:95:5d:b7:ba:e5:0d:a9:
                    ee:03:e2:34:55:4d:de:98:cf:4f:e9:e1:e6:a0:91:
                    5a:ab:59:17:97:2c:1c:9f:51:fd:7b:3c:b9:e1:8a:
                    68:0a:af:54:fe:b7:76:aa:85:62:4a:1c:de:2a:f4:
                    bb:91:28:7a:1d:05:9f:fb:73:e7:73:1f:1e:99:62:
                    f9:3b:a3:d6:0b:61:d3:fb:ec:ed:b7:08:b4:77:e7:
                    f4:b0:10:61:b6:59:0a:a7:91:d0:bc:76:4e:b6:dd:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:98:9A:E3:03:94:DB:4E:9E:81:84:0C:CC:44:6D:B1:86:52:EA:F2
            X509v3 Authority Key Identifier:
                keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:81:b9:5a:89:34:6c:12:00:8f:2b:5b:59:90:b6:cc:09:d2:
         04:97:3a:78:06:7b:94:d1:44:3d:ff:07:ac:79:e3:bf:b2:5d:
         cc:18:03:d6:24:6f:1d:e1:8f:01:0f:75:79:8f:71:e4:70:bd:
         05:fc:a9:81:07:cd:e6:a9:e1:3c:06:ab:9b:31:09:90:a8:33:
         0e:23:6a:78:c8:b6:94:b8:74:d7:ad:0d:1f:99:6e:ed:2e:56:
         3f:4e:45:e3:ae:35:23:82:11:45:27:06:76:13:dd:41:73:6b:
         a0:48:41:bc:4e:a6:45:ff:0d:a7:0a:8e:d9:d1:4a:f2:a6:75:
         1e:9a:a4:b0:75:88:6a:ec:35:58:56:6c:78:f3:bc:6f:c8:5e:
         0f:3c:7a:c2:c3:a1:e6:bc:d1:47:19:46:65:53:e0:01:54:73:
         71:d9:bb:c6:b6:63:b8:8d:32:14:54:8c:29:26:42:94:6b:17:
         de:e5:89:29:d9:30:5e:d3:d1:f1:7b:50:4a:c4:eb:79:a8:05:
         77:6a:ca:a0:18:c2:72:9e:ce:95:20:01:03:d4:77:71:74:60:
         f4:38:1b:00:70:5b:36:2a:04:e8:1a:15:03:f6:88:2b:1f:18:
         b9:cc:ee:d9:02:bd:7d:d3:7a:9a:59:04:94:8b:0e:2d:43:2d:
         bf:91:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:42 2025 by rpki-client