Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File:                     Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier:          zzwm02ONRjW6oA/iq7B7wxylx+gdIUkhtOSitNrKspg=
Subject key identifier:   20:15:FB:C9:DF:67:F2:7D:0D:7F:E4:B9:BE:4E:F3:08:93:5A:02:D8
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer:       /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial:       019690DEA107AC7A3C358AA366A62EF949CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number:          046B
Signing time:             Fri 02 May 2025 12:00:31 +0000
Manifest this update:     Fri 02 May 2025 12:00:31 +0000
Manifest next update:     Sat 03 May 2025 12:00:31 +0000
Files and hashes:         1: 1-i_f4gNCAnPwT26M-00faBCZ1ec.roa (hash: rf9DtMiWGOZOoz1U+iRouParfUgOp6ltk1lTfbvhGLM=)
                          2: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: 9em1IXtK1hEZOKydMKeJEZx3Hfjv11w5H4j2UXGxxL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:de:a1:07:ac:7a:3c:35:8a:a3:66:a6:2e:f9:49:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
        Validity
            Not Before: May  2 12:00:31 2025 GMT
            Not After : May  3 12:00:31 2025 GMT
        Subject: CN=2015fbc9df67f27d0d7fe4b9be4ef308935a02d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:d8:96:4e:13:a4:47:af:eb:f5:aa:d4:32:
                    4f:59:84:75:de:85:78:56:1d:bf:18:b2:8c:f8:26:
                    24:9b:e7:96:bc:88:c9:00:4a:10:16:dd:b7:f0:17:
                    b8:6e:17:d3:12:95:17:57:76:cc:24:56:2b:99:af:
                    be:2a:42:65:1c:83:7e:bb:71:c3:f2:95:7b:3b:47:
                    0f:a6:b5:61:08:49:47:5a:a5:00:89:14:49:fd:08:
                    3e:a3:37:c2:c5:29:f7:0e:f0:c0:27:d7:66:ec:02:
                    eb:19:b1:ee:52:63:3c:99:45:6d:ee:e0:98:da:e3:
                    c0:b0:f2:67:be:b8:d6:e2:66:64:05:e6:a1:a8:2e:
                    a0:ff:41:a9:01:d2:74:c8:38:98:31:c5:8a:32:1e:
                    d0:26:92:c9:ed:37:58:c1:9a:05:01:d2:7f:db:f1:
                    58:1a:b4:c0:88:76:cc:6e:6e:e6:f9:cc:14:7a:88:
                    13:4a:d3:d8:48:1e:c8:f3:39:b1:97:6b:7d:dc:ee:
                    aa:f2:54:fc:87:d7:a3:7e:f2:9f:fc:14:a9:8c:4f:
                    56:be:06:bb:ba:ec:c6:b2:b7:56:76:ff:28:d6:bc:
                    3b:45:9d:14:7c:6f:10:67:72:d4:59:10:c4:8b:5a:
                    5d:7c:ec:c9:65:20:da:52:cb:c3:65:88:55:a5:f4:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:15:FB:C9:DF:67:F2:7D:0D:7F:E4:B9:BE:4E:F3:08:93:5A:02:D8
            X509v3 Authority Key Identifier:
                keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:0d:e1:df:73:10:bc:a5:a8:9c:d6:b0:0f:79:17:b4:00:
         69:1d:09:a1:1a:2a:54:07:7c:0f:8f:65:47:77:89:af:55:6e:
         91:39:b8:cd:58:a3:c6:66:aa:8e:de:2e:5a:15:d1:c1:80:5a:
         d0:30:95:1e:c9:b1:ad:cd:21:dc:bd:96:88:74:1d:3b:2b:26:
         f5:c2:cf:cc:48:bc:14:9b:f3:ee:c2:76:04:68:1b:b5:be:7a:
         93:81:4c:08:e5:7f:64:53:c8:e6:e9:b6:61:92:c9:1a:16:d0:
         07:82:3b:79:5a:46:a4:7d:81:13:4e:18:b5:77:97:b1:b9:81:
         fb:8c:28:a4:77:5e:f2:8e:d7:b1:24:36:ad:02:e4:6b:40:82:
         e4:96:06:90:8b:a7:d6:a9:57:f2:29:e3:83:7c:78:c5:b4:42:
         ca:2e:69:49:8b:24:76:10:34:ca:7b:ba:25:8e:3d:05:d9:73:
         d0:15:85:48:f5:9b:2f:61:ad:52:33:71:e5:8b:5f:dc:2c:5c:
         91:09:84:df:99:28:7a:eb:44:b2:86:52:06:8e:2c:3b:52:e2:
         75:00:13:69:a9:29:90:04:0a:65:39:1b:6c:9f:cf:c9:c9:3e:
         fc:05:e3:15:1e:7a:80:6a:37:7f:68:26:de:9a:3e:1e:39:61:
         2b:ff:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:38:08 2025 by rpki-client