Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          HnX+XYs3S8XIiL7KCXl7GEMPd7/r62Cci/C38DQfI1M=
Subject key identifier:   17:52:42:51:8E:EC:DF:7E:2D:14:70:58:A9:65:44:37:CF:C5:13:47
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       0196726656C8D32A22A13281843B8B3DB7F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1524
Signing time:             Sat 26 Apr 2025 14:00:31 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:31 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:31 +0000
Files and hashes:         1: Co2reX9WjBlmenpbYdQoA_FU6Yg.roa (hash: q2QsExP+FdyReITqdolcGkEpneACU1Mny9QFEjumzVA=)
                          2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=)
                          3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: 1EjrQI+tCPxsC2hXtb0Vo0tGOiswUcVo3dMFbryxMDo=)
                          4: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=)
                          5: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:56:c8:d3:2a:22:a1:32:81:84:3b:8b:3d:b7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Apr 26 14:00:31 2025 GMT
            Not After : Apr 27 14:00:31 2025 GMT
        Subject: CN=175242518eecdf7e2d147058a9654437cfc51347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:70:c4:cf:5c:d7:d6:8e:de:9e:45:25:b3:9a:
                    f5:f6:07:50:88:44:30:5f:52:1c:89:a0:60:33:83:
                    80:5f:8f:ea:bc:25:0d:d2:26:eb:98:2a:aa:51:e3:
                    fb:a6:bf:0d:37:91:5e:2b:d4:35:e4:98:0b:cc:75:
                    fe:d2:df:e2:df:b3:87:83:3d:7d:c9:ed:58:29:86:
                    15:a3:05:11:e1:bb:bb:3f:c3:a7:d2:3b:de:db:bd:
                    48:db:f6:1b:1d:a3:c3:4d:82:51:3a:7e:c1:f2:d5:
                    7f:b8:61:4b:c3:de:98:35:6f:f3:8f:40:94:ba:8f:
                    89:85:7c:30:59:d1:1e:8f:92:34:54:92:79:be:fc:
                    66:7a:8b:1d:57:8e:bb:d8:6a:5e:88:e2:fb:91:5a:
                    3e:f7:05:68:22:94:db:dd:9e:05:bb:7a:7d:38:01:
                    42:ac:b4:0d:79:5c:e9:e8:f9:ef:04:a7:07:11:79:
                    44:4c:07:fe:68:80:e8:b9:e3:9c:9e:69:02:02:6d:
                    11:3b:0d:5d:69:47:56:28:4f:f0:4d:ca:e9:b4:aa:
                    71:c3:6c:4d:a4:e7:9d:d6:d8:ea:84:53:69:4d:7f:
                    15:89:78:da:20:13:2b:8c:1e:26:14:5c:d1:9a:b3:
                    5c:02:a9:ec:71:d2:27:c7:c8:64:91:dd:93:84:c1:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:52:42:51:8E:EC:DF:7E:2D:14:70:58:A9:65:44:37:CF:C5:13:47
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:31:f5:ec:01:c0:2b:88:80:f0:99:aa:25:2c:d7:e2:e9:59:
         68:00:2f:2d:e8:95:5f:a2:b5:86:90:f8:09:66:a3:f6:22:f3:
         d8:e3:ec:68:34:45:f4:32:6f:4c:f2:87:9c:5b:3d:31:9c:43:
         98:7c:7c:07:d9:b0:23:a9:cc:9e:d5:05:dd:aa:b8:ca:b0:e0:
         52:f4:7c:d4:44:b8:5b:06:05:8d:cd:3a:79:e2:53:e0:89:d9:
         c2:55:fb:ea:ee:72:92:55:c1:2d:91:a1:84:9d:ba:75:cf:f1:
         ff:a1:85:5b:db:0a:90:25:0b:cb:78:3c:a9:ff:dd:8c:fb:55:
         bb:dd:d0:f1:00:9d:c7:16:21:c2:fb:47:2d:f0:e9:15:40:c4:
         90:16:f8:06:41:f0:eb:cc:42:12:0d:0c:1b:78:4d:4d:4d:78:
         01:d1:74:54:c4:91:f4:bc:b4:d9:df:52:38:3f:2a:18:ff:71:
         e7:d6:59:d6:e8:7d:db:69:65:c7:03:a9:df:14:13:94:5e:26:
         ca:bb:00:73:cb:7b:18:69:0b:bc:6e:92:11:0a:c6:1d:36:25:
         a6:6e:52:21:a0:00:b0:cc:a2:59:02:6c:e1:6b:38:e3:d0:9e:
         b0:e0:ff:fa:1f:a1:ad:a4:20:c6:23:73:70:5f:84:26:80:5c:
         61:97:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:52 2025 by rpki-client