Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File:                     MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier:          fjDZmAsn1D+wsFqTx6foPCmZSrzU6r8AYJ71I9FR97M=
Subject key identifier:   74:34:37:55:85:DC:A7:1A:AC:80:A7:C1:73:6A:BB:E6:C8:35:D7:66
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer:       /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial:       019873E2FF44934B3C3A7A77715631609932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:01:52 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:52 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:52 +0000
Files and hashes:         1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: PcI/PrjLPKAU+HE8XSRTPn8iyOas6C9bfuicleB6Yhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:ff:44:93:4b:3c:3a:7a:77:71:56:31:60:99:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
        Validity
            Not Before: Aug  4 07:01:52 2025 GMT
            Not After : Aug  5 07:01:52 2025 GMT
        Subject: CN=7434375585dca71aac80a7c1736abbe6c835d766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:69:d0:4b:dd:8f:1d:2b:c0:27:2c:77:a4:
                    fd:d7:84:f7:fe:b8:61:f6:c7:de:75:dd:de:da:5c:
                    e2:77:74:8a:2d:d1:5a:b7:93:0b:ee:c3:c4:24:2b:
                    99:d2:55:7b:1b:25:af:2f:d7:a9:2c:33:52:d9:cd:
                    85:fd:ba:2c:fc:bc:dd:b0:4f:9c:e5:6a:3b:5c:98:
                    22:b8:f6:5a:eb:d8:4f:8d:ea:6f:29:94:cb:86:01:
                    7c:2c:95:fa:f5:a0:f0:e6:a3:be:7c:b6:e0:97:b5:
                    e6:2b:8f:8f:79:80:cf:66:58:39:f1:52:c3:c4:46:
                    fe:b1:00:cd:0b:bf:78:06:d5:9d:c8:51:0e:7e:4f:
                    42:1b:92:28:7c:e8:ab:a9:82:b5:f1:1b:b4:84:24:
                    01:92:6b:37:bd:a9:df:d5:49:61:42:75:b0:48:45:
                    3b:94:e2:85:3b:ac:80:3c:08:b5:aa:d4:b5:9e:07:
                    bb:d0:ad:62:d1:53:42:17:42:2a:c3:82:97:cb:40:
                    41:b7:74:c9:09:23:b0:9b:cd:7a:c5:e3:dc:ec:e7:
                    26:b2:62:7a:c3:88:b1:65:f4:d5:1d:dc:35:12:39:
                    1f:67:ab:e7:fb:95:46:db:d3:47:0d:69:6d:e6:2a:
                    43:1a:b6:eb:e8:47:c7:78:95:71:ab:09:8e:f8:91:
                    11:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:37:55:85:DC:A7:1A:AC:80:A7:C1:73:6A:BB:E6:C8:35:D7:66
            X509v3 Authority Key Identifier:
                keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:45:ec:21:57:eb:3f:4f:f0:44:f0:c6:3f:35:91:33:a8:58:
         c3:a4:ec:45:b3:e8:b1:64:25:df:c6:3e:f5:53:19:03:81:e9:
         8f:88:0a:a1:a6:29:52:6d:fa:0b:5a:35:2c:05:86:49:88:b5:
         c3:48:dd:8f:f5:30:b7:37:29:72:84:54:45:5a:da:de:08:48:
         7c:e7:7d:a7:31:40:94:ea:ad:3d:85:a6:64:87:25:d4:d8:0d:
         48:79:84:00:81:e8:5e:de:86:c8:a7:27:ba:81:5b:3b:63:71:
         bf:fe:d4:b9:08:14:58:cc:98:10:91:d4:be:39:c5:3f:f1:80:
         6b:0a:29:9c:93:29:cd:5f:e7:a2:bf:36:95:13:0a:8a:80:93:
         10:9d:10:00:6f:8f:68:2c:3d:97:a9:b3:6e:35:e3:c6:82:1a:
         46:ce:25:fa:1f:1a:24:6c:9b:ad:88:8d:03:f3:0d:57:4b:ab:
         ec:cd:2a:dd:62:69:9d:1c:fc:ca:4c:e9:d9:8d:d8:36:ec:08:
         82:55:98:39:91:7b:71:2d:85:2d:01:9a:31:97:70:50:b6:fa:
         fe:90:2f:22:b3:f5:08:96:39:0c:8c:7b:20:ba:ab:30:d4:87:
         dc:97:17:66:16:12:d0:7d:fc:f7:d8:4d:af:13:8f:8f:89:91:
         6c:92:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:23 2025 by rpki-client