Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File:                     hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier:          +qAoxQ74Bi3lbZyYNueLlDyYaWXGrcM2+LgvMcPXuMg=
Subject key identifier:   B7:41:B3:A1:0B:7C:85:7B:D1:C3:35:ED:30:A1:D3:FD:DD:EF:FA:C0
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer:       /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial:       019786C61BDCD2555DE0E546BFCB1227EE48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number:          1599
Signing time:             Thu 19 Jun 2025 06:00:19 +0000
Manifest this update:     Thu 19 Jun 2025 06:00:19 +0000
Manifest next update:     Fri 20 Jun 2025 06:00:19 +0000
Files and hashes:         1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: 8TBeTRYPbmmXRnALVHE7uTU+rtlQWAYYEVq/RZ82Ua4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:c6:1b:dc:d2:55:5d:e0:e5:46:bf:cb:12:27:ee:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
        Validity
            Not Before: Jun 19 06:00:19 2025 GMT
            Not After : Jun 20 06:00:19 2025 GMT
        Subject: CN=b741b3a10b7c857bd1c335ed30a1d3fdddeffac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:17:27:e2:3c:19:9d:65:de:0e:4a:da:8d:
                    d9:af:f9:1e:0e:ff:76:e0:66:67:09:93:33:e2:7b:
                    36:1d:34:69:a4:22:f1:78:60:13:83:71:d2:bb:66:
                    90:af:d6:00:b3:c8:16:4a:49:e1:98:ed:3e:3f:78:
                    59:5a:64:1e:05:b7:6f:de:4e:50:42:c2:ce:0f:d1:
                    10:cc:c1:44:17:6e:c9:37:26:8f:de:21:87:01:55:
                    05:fd:7a:7b:68:ef:ba:09:e1:b2:9f:c8:6f:31:83:
                    84:d5:bc:6a:4f:8a:7f:37:cc:0a:97:9e:29:66:ee:
                    9c:8a:f4:53:5e:d3:52:16:1b:15:ff:56:20:43:c3:
                    f0:3a:68:88:1f:f0:36:dc:a2:df:8d:1f:8d:ed:a3:
                    ad:10:0e:03:41:f7:5e:13:fa:f6:69:ea:ca:e8:ba:
                    6b:19:0b:5f:9a:e5:39:6b:dd:90:54:5c:20:47:2f:
                    46:20:d3:93:9b:07:ec:f4:a4:da:f9:dd:22:04:2a:
                    7f:14:5d:b5:41:4b:1b:70:8a:6d:28:f9:cd:e8:76:
                    6b:38:05:f1:ab:b9:02:36:38:b0:62:1c:d9:92:8b:
                    2c:df:6b:c1:55:89:c3:10:5f:d7:a1:67:a2:64:7d:
                    80:62:a4:62:40:f1:78:7e:3a:e6:a0:f3:4e:81:8a:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:41:B3:A1:0B:7C:85:7B:D1:C3:35:ED:30:A1:D3:FD:DD:EF:FA:C0
            X509v3 Authority Key Identifier:
                keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:fc:71:06:28:75:9b:fc:8b:ce:f9:e2:20:14:38:c2:10:
         4a:93:b0:b6:a2:3f:ff:46:a9:83:8a:3b:fc:8f:a9:8f:d4:a5:
         96:a4:14:f8:76:42:94:48:01:72:f9:de:3c:53:3b:fe:14:02:
         1b:51:30:9f:da:25:a5:9e:d9:53:a5:d6:a2:92:cd:4d:e4:9f:
         99:5b:7f:00:34:6f:63:d9:18:7f:47:f1:5e:f9:29:09:81:06:
         03:b0:cd:43:7c:78:ee:4f:b6:b9:51:fb:f4:f0:4c:4b:90:1d:
         bb:e4:cb:47:d4:9e:42:cc:be:b5:fc:97:40:c8:4f:07:ca:63:
         b7:c8:f3:c5:0b:3d:16:32:9a:49:8d:4e:34:83:d6:7d:da:2f:
         2f:f6:8d:3d:61:b2:9f:df:77:8d:f8:1a:51:e8:db:0d:bb:4d:
         1d:a0:42:05:23:99:52:66:8a:2d:2b:8a:62:73:c8:14:1c:ba:
         ef:85:3b:40:3d:ed:06:38:10:c9:9e:29:78:c9:fb:82:49:7f:
         54:c7:aa:fa:6b:85:8d:b1:92:b7:4d:7c:84:dd:86:ed:c3:c1:
         e2:2f:bf:bb:59:7f:7b:16:5d:35:32:38:58:7f:9b:58:72:12:
         c8:b1:12:77:40:22:12:58:26:87:14:9b:2b:9f:c6:17:9b:03:
         88:43:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:23:18 2025 by rpki-client