Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File:                     H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier:          ExNL7AFHVdJeOT4dDeeoNJQLTm3rZBAqiOL88ivxn3M=
Subject key identifier:   F4:E9:51:9A:4E:99:F9:58:F8:B8:62:5D:ED:BF:3A:E6:57:EF:C7:61
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer:       /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial:       01963E789E68F67AA62866F3303B38B6F2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number:          0C76
Signing time:             Wed 16 Apr 2025 12:00:14 +0000
Manifest this update:     Wed 16 Apr 2025 12:00:14 +0000
Manifest next update:     Thu 17 Apr 2025 12:00:14 +0000
Files and hashes:         1: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: d2WIWuE5YoPJ2JokI2YBaApyKpUEFNtYGrQXzjon8MI=)
                          2: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:78:9e:68:f6:7a:a6:28:66:f3:30:3b:38:b6:f2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
        Validity
            Not Before: Apr 16 12:00:14 2025 GMT
            Not After : Apr 17 12:00:14 2025 GMT
        Subject: CN=f4e9519a4e99f958f8b8625dedbf3ae657efc761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:be:c8:cc:21:ed:fd:ca:cb:d8:d5:c0:d0:
                    69:cb:b3:dc:fa:3b:c8:96:f7:f8:54:ef:5d:09:94:
                    e1:74:41:b3:a9:a6:2f:0e:a9:6f:1b:80:c8:fc:00:
                    1e:f9:cc:55:0b:c8:63:cf:a1:17:e8:95:d0:97:cc:
                    3f:71:06:65:92:d3:80:23:92:63:8b:5a:5d:29:06:
                    1c:81:2a:b0:b5:9d:e3:8f:a3:25:94:89:70:d5:77:
                    9a:d8:39:84:04:85:cd:85:72:55:e4:49:11:c5:8e:
                    51:3a:ba:50:95:da:58:a7:6b:39:d6:df:55:55:81:
                    9f:9c:66:75:b9:0b:66:5d:b8:63:63:3c:50:3d:55:
                    42:d9:55:bd:31:47:18:58:43:7e:79:f2:f8:71:3a:
                    a3:ba:56:39:17:95:c2:be:0f:2b:2e:f4:47:40:7c:
                    1d:be:63:c0:23:44:51:22:22:01:f6:8c:8b:2b:c8:
                    3a:9c:71:bc:7a:1e:4e:0d:f9:17:d1:2f:7c:6b:ec:
                    95:46:43:b7:49:11:81:11:2e:b5:ef:7f:37:92:4e:
                    a0:e5:43:d2:7e:05:40:f1:b5:02:a2:4b:d1:32:b2:
                    56:79:fe:e2:d9:7a:38:21:fa:c8:db:8a:d2:a0:93:
                    d1:c8:e6:63:67:b2:2d:5e:2f:a9:d4:ed:de:01:b2:
                    9a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:51:9A:4E:99:F9:58:F8:B8:62:5D:ED:BF:3A:E6:57:EF:C7:61
            X509v3 Authority Key Identifier:
                keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2a:70:05:79:48:3c:31:18:e1:3d:fb:99:b4:8a:08:8b:77:
         ea:c3:1a:1c:6a:85:50:64:ab:5b:7c:59:57:9b:80:a5:62:ea:
         d3:02:47:f4:cd:7c:e2:9d:cd:8c:23:ee:27:19:6c:06:92:a2:
         bd:a8:37:97:35:57:c1:52:37:ce:4d:34:f7:59:8b:6a:f2:ba:
         78:94:7c:2a:f3:e9:ee:9c:3f:a3:8c:e8:b3:33:c4:41:c8:a9:
         39:4c:e6:ed:4a:30:ba:ba:79:e8:5f:13:0e:3b:51:08:e9:3e:
         80:cb:b9:62:e3:ed:40:a2:5f:4b:2f:be:74:00:f4:c3:51:2d:
         9a:e4:d7:b7:e0:a6:e7:e3:05:e4:4d:5a:3a:29:bc:5c:bb:ba:
         95:56:17:5e:14:e3:31:26:95:ed:45:8f:01:24:c5:c8:d0:3a:
         c3:cf:64:f6:54:f6:7a:75:ec:7b:f4:59:a5:e6:a3:8b:48:95:
         19:dc:5a:53:a0:6f:94:71:cb:14:36:ec:12:93:88:74:d1:3d:
         e1:ba:72:72:1e:f6:d8:3a:c0:44:24:17:36:6c:93:ca:f7:89:
         d1:8c:1e:09:3c:c7:72:63:58:28:33:5e:32:64:53:47:80:a5:
         98:d5:fd:b8:56:e1:ca:29:6e:f0:42:1c:6c:20:a0:b6:de:9b:
         76:b6:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:17 2025 by rpki-client