Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
File:                     hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json)
Hash identifier:          /nO0Ty9SQYnvi4RmvY0x2zqxkCTWmV+LmRmXooVYSJ0=
Subject key identifier:   DE:49:CA:49:2F:A3:82:69:99:D8:CE:DB:2A:F9:C9:D2:43:20:13:93
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Certificate issuer:       /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial:       0197499F4B3ACBB03AA1D2899D3D8A06AA3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
Manifest number:          0B7B
Signing time:             Sat 07 Jun 2025 09:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:05 +0000
Files and hashes:         1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=)
                          2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: fBUoWeDwiMZdO4ksJgCjy+XQr1zG+J6zCRit8SI5g7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:4b:3a:cb:b0:3a:a1:d2:89:9d:3d:8a:06:aa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
        Validity
            Not Before: Jun  7 09:01:05 2025 GMT
            Not After : Jun  8 09:01:05 2025 GMT
        Subject: CN=de49ca492fa3826999d8cedb2af9c9d243201393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:52:13:07:ce:fc:19:f9:32:dc:34:c5:32:
                    5c:16:d4:91:9c:1d:76:03:a2:a6:2c:07:80:a7:6c:
                    f3:07:99:4f:c5:9a:97:0b:54:68:d9:fc:36:eb:89:
                    dd:ed:3c:ad:0f:05:ed:ce:b8:2a:38:8b:2a:6c:4d:
                    fb:14:6d:6a:64:6d:9e:4c:ce:87:ef:31:12:83:f3:
                    e7:a9:17:89:60:be:5e:6d:e6:d6:f5:be:d4:5a:d5:
                    ac:01:ba:a8:8a:5a:dc:6a:0e:6e:a1:05:5b:03:a3:
                    d7:21:e1:dd:52:fe:cd:2f:93:1e:29:c3:7a:66:23:
                    2d:02:23:af:5e:af:c9:df:79:58:17:bc:c2:85:eb:
                    a8:29:b5:57:e5:72:f3:19:20:9a:08:c1:40:ed:64:
                    cd:3f:48:96:ff:9e:d9:5f:35:60:10:6a:aa:5f:1f:
                    75:ac:e6:04:e6:63:44:86:ff:fd:fe:eb:52:6f:d5:
                    7b:b0:eb:1d:f4:91:c7:ce:5a:29:37:c8:b7:b7:85:
                    60:f3:a4:51:d3:a9:13:a2:f4:a9:07:6e:59:eb:69:
                    21:fe:ba:5d:1b:4f:54:d9:10:74:1e:f5:27:b1:cd:
                    72:8b:08:c2:2e:aa:05:bb:8f:3b:81:a5:d3:ff:2f:
                    e9:15:88:88:c6:5c:ca:9a:57:5f:10:6e:16:be:cc:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:CA:49:2F:A3:82:69:99:D8:CE:DB:2A:F9:C9:D2:43:20:13:93
            X509v3 Authority Key Identifier:
                keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:11:7e:fb:7f:4d:c3:1b:73:93:56:10:4e:86:cf:b0:14:7c:
         ad:5d:aa:0f:f8:4d:21:3c:af:94:00:ba:34:1e:a3:30:fd:5e:
         7e:9f:f3:58:c5:9f:03:06:68:84:6f:4c:b4:fa:84:d4:e4:97:
         b6:c5:f5:ef:69:e7:a5:09:33:ad:c8:df:bd:3d:fc:fd:b2:cd:
         44:f6:91:fd:b7:b6:b9:f5:1a:01:c0:64:aa:6a:78:67:e3:f5:
         2e:b7:c5:be:04:a7:45:6b:91:ff:0d:c3:66:e1:df:56:e6:95:
         e5:3a:f9:d9:c8:38:4d:96:cc:86:6b:d8:31:e2:2c:b6:78:d9:
         b9:bc:b7:22:8a:90:ad:5b:ff:1a:32:ab:50:d6:b7:ea:7e:a9:
         e9:6d:f5:f7:14:25:78:27:1a:0b:1e:e4:eb:6b:3f:5a:6d:10:
         ba:7c:68:21:29:15:a9:b5:99:52:bd:ee:fe:eb:90:45:a7:02:
         d8:dd:b3:37:79:f9:ca:37:4a:d9:15:99:13:c9:41:16:a4:47:
         d9:a1:66:02:7d:d1:0f:96:02:04:ea:e6:6f:31:6a:83:6d:e7:
         74:2e:b6:ef:1b:65:60:3d:f5:fe:08:ee:a6:a1:c5:ac:32:27:
         5a:7a:ae:42:b0:1f:9d:50:dd:18:91:d4:d0:e4:bc:94:c5:66:
         9e:c8:6f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:28 2025 by rpki-client