Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File:                     Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier:          GquRt3Uh0YhlQHkPikuMBtQDKVDsR5lH5UUtj7wC888=
Subject key identifier:   6B:FD:36:B3:8F:A0:AA:68:40:BB:E5:15:10:CA:3B:10:2F:0A:89:77
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer:       /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial:       019880C2600C9DAB6FC529A720D97B71E9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number:          049A
Signing time:             Wed 06 Aug 2025 19:01:18 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:18 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:18 +0000
Files and hashes:         1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
                          2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
                          3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: CCCd37WU4E4wxH+r2tHIk2S0SAYpXuL5Z3FFuVkgcLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:60:0c:9d:ab:6f:c5:29:a7:20:d9:7b:71:e9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
        Validity
            Not Before: Aug  6 19:01:18 2025 GMT
            Not After : Aug  7 19:01:18 2025 GMT
        Subject: CN=6bfd36b38fa0aa6840bbe51510ca3b102f0a8977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:3c:1e:00:08:7a:09:61:07:8a:6d:d5:9b:
                    a5:0b:f1:5e:99:8b:7c:95:d0:49:e7:0f:90:55:75:
                    6d:94:a0:9d:9e:51:dc:9d:e2:c8:53:84:22:ff:e9:
                    0c:af:34:a3:aa:db:6f:b6:46:c7:11:89:b7:a6:e3:
                    02:35:6b:73:51:95:ad:72:2c:17:b9:13:c3:dc:86:
                    f1:80:3e:d8:5c:e5:aa:ea:c6:bc:8a:52:d8:09:96:
                    50:10:62:69:e3:9b:b2:1e:f3:ee:25:f4:78:13:24:
                    c0:e6:2d:aa:d3:f1:fb:1e:b8:28:e5:39:9c:d0:ec:
                    81:04:ed:8f:68:6e:04:41:65:15:8c:49:a1:d8:46:
                    45:eb:55:62:ba:71:d6:f0:ad:31:6e:ab:74:3e:65:
                    e2:a0:55:18:30:ae:11:ce:e1:d8:89:12:71:d8:d6:
                    86:be:35:3a:ac:5f:90:64:74:48:f8:21:ad:7f:2e:
                    db:6c:e6:f6:c6:c0:3e:40:62:5b:b0:71:97:bf:9e:
                    b6:0d:20:17:46:ea:2a:9f:97:f2:3e:b4:74:6d:25:
                    04:83:be:b2:82:6e:48:81:83:a1:60:50:88:e4:07:
                    2f:43:b2:35:a7:28:0e:2d:78:49:ea:4c:d6:27:0f:
                    bc:fe:fb:3f:31:55:ef:07:4a:e2:ff:c7:3b:b6:2c:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:36:B3:8F:A0:AA:68:40:BB:E5:15:10:CA:3B:10:2F:0A:89:77
            X509v3 Authority Key Identifier:
                keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:68:f1:92:bd:74:95:38:dd:c1:d1:17:bd:44:d8:5a:e5:
         b1:70:20:7d:24:f6:b9:df:ab:a6:c6:5e:13:29:b2:49:ad:3f:
         47:57:b1:6b:a7:c3:50:af:b0:b7:20:e5:2e:d5:c2:4e:c9:24:
         27:51:c6:59:7f:27:d4:3d:12:28:f1:e0:01:2b:81:0c:b9:ea:
         fd:28:c9:2b:37:6a:c6:8a:3c:29:c0:8c:06:9e:cf:18:36:41:
         be:c0:fc:30:10:46:da:1c:9d:f8:69:30:2b:31:43:06:59:b2:
         61:7e:9b:66:e3:90:0d:71:0a:36:de:bc:5b:10:d6:92:42:bb:
         99:86:e6:ce:14:eb:bf:ca:29:ff:f9:24:f1:bf:1a:55:8e:c2:
         21:67:45:6d:d0:9d:38:db:3a:7f:cd:65:32:73:52:b1:ee:37:
         bc:4e:95:64:f2:5c:0e:98:a0:64:df:46:5a:fa:45:da:6b:d1:
         1d:cd:a5:93:34:8f:54:64:00:16:7a:64:b3:c3:67:ca:6e:1b:
         2c:c7:f9:0d:60:33:73:91:1c:c4:0e:d5:f6:66:a3:3b:cb:1b:
         73:e5:c5:3f:9b:a5:38:14:be:e6:a9:2e:26:ef:cf:4a:03:fe:
         40:21:21:b0:ea:82:6d:96:51:d6:24:a9:9d:92:b3:3f:dc:08:
         22:44:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:42 2025 by rpki-client