Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File:                     pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier:          p0vlmy0icjcROCPyjVJNC+CzJvcGoNQ/vcFtf4Wvot4=
Subject key identifier:   85:58:D9:35:C7:C2:32:AE:54:77:F1:C4:4B:89:7E:1E:DA:AF:1B:86
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer:       /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial:       01976C621D62A081DE291550D1F52A79976B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number:          1446
Signing time:             Sat 14 Jun 2025 03:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:58 +0000
Files and hashes:         1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
                          2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: xhXBzay1ub+mPPdBb6BCQqsI9BUY8pGqqxWUc1kiS6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:1d:62:a0:81:de:29:15:50:d1:f5:2a:79:97:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
        Validity
            Not Before: Jun 14 03:00:58 2025 GMT
            Not After : Jun 15 03:00:58 2025 GMT
        Subject: CN=8558d935c7c232ae5477f1c44b897e1edaaf1b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:c4:4a:a8:aa:15:76:ae:3e:6e:b8:4a:6a:
                    47:00:85:5b:02:f9:df:ae:6c:7b:c1:2a:88:09:ed:
                    d1:97:ef:12:49:7b:5d:00:d2:79:3c:a4:96:7f:e4:
                    41:5a:1a:1b:16:b8:ef:db:fc:eb:57:47:0c:a0:e5:
                    a9:c4:1f:53:0d:51:97:27:ce:bd:82:cd:9d:e2:88:
                    c8:15:b4:61:f7:44:c0:ae:cf:f5:35:b7:43:d4:a9:
                    5c:87:41:0f:70:c8:a1:d4:16:54:6c:fb:83:49:42:
                    87:2c:89:63:19:73:49:94:56:5d:97:4a:61:c7:7a:
                    a1:bf:62:76:7b:a0:2e:42:e6:eb:5e:90:d7:45:be:
                    94:73:36:0c:ff:60:68:e5:64:c2:5a:99:e4:25:98:
                    9d:70:f5:53:28:d3:8c:54:5f:8f:27:01:05:e2:ef:
                    67:c9:24:b5:71:cb:12:bb:3d:3a:95:e0:64:1d:85:
                    ff:a7:b9:b3:f9:cc:8e:60:a9:3e:c9:70:1d:8b:5c:
                    d2:cb:35:9e:0c:25:b6:c0:ec:53:d6:87:4c:1f:f6:
                    b8:53:22:6f:0c:12:ab:d8:cb:99:4a:7e:92:20:1b:
                    eb:0a:a2:b9:dd:f3:18:82:2b:44:09:f7:b3:b4:d1:
                    8d:e4:c1:0c:c8:ee:1f:84:5a:09:e4:4d:b4:5f:64:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:58:D9:35:C7:C2:32:AE:54:77:F1:C4:4B:89:7E:1E:DA:AF:1B:86
            X509v3 Authority Key Identifier:
                keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:c0:4f:2b:16:93:43:a5:42:72:5b:ce:3f:b6:10:a4:66:
         31:70:86:97:76:0b:57:4e:9b:23:0b:bb:10:dd:3b:ff:22:08:
         5b:36:5c:52:a4:db:00:f8:49:2d:0c:2d:ab:2f:48:5d:81:06:
         58:5d:56:90:f2:8d:32:7d:f1:5d:3f:06:8c:78:37:fb:04:71:
         67:f8:bd:17:d9:74:db:2e:3a:19:c9:62:2f:16:e8:18:a5:42:
         2f:c4:ce:9a:28:3a:18:91:dc:fe:c7:41:66:43:cc:69:0a:f2:
         f7:86:34:b1:78:10:00:00:3f:ae:86:5a:b9:67:f9:bb:c7:2b:
         37:5a:46:ea:77:af:2c:74:2e:73:70:b8:34:5b:a0:19:3c:15:
         00:e0:73:2e:49:6f:65:3d:5f:3c:95:0c:94:5b:fe:7e:52:87:
         c9:06:51:31:0c:f4:2e:87:5c:34:53:c4:9b:5d:7e:5b:e9:73:
         3d:03:b4:af:4b:51:1b:53:37:e3:05:9d:db:b1:cf:56:af:ff:
         73:bc:45:e2:df:a3:21:c2:43:5e:78:ef:b6:8b:1e:ab:a9:73:
         91:b3:62:9e:eb:9f:38:01:ff:da:2d:7c:d2:09:c2:56:99:c9:
         94:aa:d1:cc:ac:c7:55:e8:58:3e:3c:f4:5d:d4:bb:9a:f8:8e:
         24:21:7e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:52:49 2025 by rpki-client