Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File:                     hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier:          8O9Y/g9g3ToQaLcaefYXzUCU+3rMXKCtg2qEc+0S8fE=
Subject key identifier:   3B:E0:AE:DF:07:EF:D4:FF:56:49:D0:B9:F0:A1:F2:12:B7:B9:F6:FE
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer:       /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial:       01977A1D6C4A6EA89B649FC7520A1B3292FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number:          1429
Signing time:             Mon 16 Jun 2025 19:00:38 +0000
Manifest this update:     Mon 16 Jun 2025 19:00:38 +0000
Manifest next update:     Tue 17 Jun 2025 19:00:38 +0000
Files and hashes:         1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=)
                          2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: zGFb/aHA+JB0gFfR+BPU5Kyi2YWUstiAHiW2KsjMMW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:1d:6c:4a:6e:a8:9b:64:9f:c7:52:0a:1b:32:92:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
        Validity
            Not Before: Jun 16 19:00:38 2025 GMT
            Not After : Jun 17 19:00:38 2025 GMT
        Subject: CN=3be0aedf07efd4ff5649d0b9f0a1f212b7b9f6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:a2:79:a4:76:b6:ff:6c:4d:aa:c9:ca:b5:
                    c0:aa:91:4c:bc:b1:e8:26:60:f5:a9:4d:23:7e:77:
                    04:fe:e8:fc:89:0e:68:a7:dc:9d:09:83:d0:6a:36:
                    27:b6:74:b5:c8:d7:14:10:1e:8e:8b:7a:04:2e:30:
                    d6:c4:ce:9c:0c:96:dd:74:d9:84:f3:7d:6b:44:9f:
                    f8:ce:00:44:cc:2a:b4:3b:2c:d9:28:7a:c0:29:f8:
                    94:54:c8:bf:f6:f8:1b:c4:fc:4e:df:ed:cd:da:6e:
                    6a:4c:3e:d7:37:02:c0:46:09:64:8f:b8:70:87:01:
                    3a:cf:83:ee:69:a5:d3:42:0a:9d:04:ba:22:3e:d9:
                    96:bd:54:0a:35:8d:08:85:42:8e:28:2e:94:e1:cd:
                    1c:0e:d0:87:ea:b9:84:cb:91:e4:3f:37:e2:19:cd:
                    c0:d3:3d:ba:e6:fb:93:ce:7b:9f:20:cc:08:8f:04:
                    03:af:05:ca:aa:1d:36:57:f2:ed:84:14:e8:a8:6b:
                    62:d2:9f:33:f6:9c:bb:50:cb:17:98:60:f5:89:42:
                    ca:13:dc:32:7c:05:54:61:7b:d4:ff:29:39:68:08:
                    86:c4:75:1c:2f:9d:a8:76:0f:c6:dc:63:a9:de:02:
                    f9:4b:ca:c2:3d:3d:5a:3b:c9:b6:35:d0:59:58:ea:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E0:AE:DF:07:EF:D4:FF:56:49:D0:B9:F0:A1:F2:12:B7:B9:F6:FE
            X509v3 Authority Key Identifier:
                keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:c7:93:35:42:ca:8d:7c:b2:c2:2f:87:7c:0b:88:31:71:
         fc:a0:77:35:12:02:58:dd:b6:65:ad:ad:da:98:73:92:ba:67:
         63:fa:dd:22:6e:9a:1e:30:10:cc:45:ff:39:3a:3c:63:b2:b8:
         c0:fc:5c:ff:bc:0f:32:fb:f0:3e:6e:fa:b5:0a:82:c8:17:d1:
         ec:d8:a2:80:9a:f4:2b:35:8a:ec:38:45:70:68:05:74:85:c4:
         6f:bf:0f:3f:b1:b6:a4:07:34:bb:ef:69:39:64:a0:ac:a0:d0:
         8a:44:be:a6:6d:51:44:fd:ec:80:63:66:0e:f7:e5:0d:81:29:
         75:2e:03:44:27:dd:e5:8b:ea:c7:aa:aa:ef:eb:d1:eb:b3:01:
         70:0f:fc:36:8e:ce:13:bd:88:88:29:fd:04:32:1c:d0:2f:7e:
         6e:45:d7:e0:84:40:f1:85:29:fd:68:09:6c:60:93:24:fc:c2:
         60:d6:05:21:09:1c:a4:6d:11:7c:f1:25:c3:ac:0d:5e:5c:44:
         b6:20:4e:da:06:d2:b1:26:b2:c0:60:4c:c0:de:97:00:9e:d4:
         f8:ba:33:05:53:fd:b1:41:ed:17:da:63:ef:ba:12:0e:ab:cc:
         50:22:d3:36:49:f3:85:c6:52:49:af:96:f6:ea:19:86:e8:ba:
         5e:5a:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:06:11 2025 by rpki-client