Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File:                     hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier:          1dspPqzaBwavGTHm5t0kWqz9mRAmwR7a79Ka9LO0hTA=
Subject key identifier:   46:58:61:4C:91:01:02:B5:5A:46:0A:E3:60:A5:96:D3:73:7E:3E:35
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer:       /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial:       019786606A792B5896FC6EACA7675E885956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number:          0661
Signing time:             Thu 19 Jun 2025 04:09:14 +0000
Manifest this update:     Thu 19 Jun 2025 04:09:14 +0000
Manifest next update:     Fri 20 Jun 2025 04:09:14 +0000
Files and hashes:         1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=)
                          2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: ue+0kjAX/QPGoRb2Of/DA3GNdhcKxGnFZYae5EQnxy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 04:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:60:6a:79:2b:58:96:fc:6e:ac:a7:67:5e:88:59:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
        Validity
            Not Before: Jun 19 04:09:14 2025 GMT
            Not After : Jun 20 04:09:14 2025 GMT
        Subject: CN=4658614c910102b55a460ae360a596d3737e3e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:06:80:2d:8d:17:17:a8:ec:e7:88:4a:fd:
                    be:74:5b:45:b9:9f:f7:74:eb:d2:19:51:72:bd:6f:
                    93:1c:f4:90:52:1f:f9:69:56:05:fb:5d:47:78:40:
                    af:59:3b:14:48:e2:f6:5a:52:a9:fc:9d:f6:8f:07:
                    cb:24:f6:90:d9:75:4c:27:8d:88:6c:02:99:12:e0:
                    8c:a3:ff:4c:76:fe:6f:c2:56:8d:8e:bc:3d:eb:c1:
                    b6:b7:05:28:59:92:97:17:18:c0:c5:e7:c3:ae:c4:
                    aa:b9:24:55:d1:12:9a:03:6c:c9:d4:9f:e7:c1:69:
                    b0:42:1d:16:45:4d:32:47:e2:3f:6a:52:4f:0d:10:
                    b1:0f:f6:50:4e:e6:cb:92:ce:4b:83:47:fa:b2:f7:
                    48:7e:0e:04:8b:35:05:93:9a:50:13:13:92:f2:9b:
                    83:e8:51:70:66:0c:75:6a:6e:53:54:8c:1e:e2:26:
                    6b:b2:1b:6e:20:79:3a:b0:fb:22:25:d0:ae:2c:e9:
                    92:1f:d8:c0:b4:67:22:9b:71:58:25:72:0e:12:73:
                    c3:51:7a:02:1f:21:ac:42:78:07:59:a0:54:b0:b3:
                    66:77:3d:97:f5:99:33:78:c3:3c:76:65:f3:d3:f2:
                    3e:20:b2:af:6e:85:31:2b:d7:ee:c0:31:b1:5a:36:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:58:61:4C:91:01:02:B5:5A:46:0A:E3:60:A5:96:D3:73:7E:3E:35
            X509v3 Authority Key Identifier:
                keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:d3:1f:c5:38:84:fa:28:d5:27:67:87:16:88:b2:94:a3:
         1b:ce:7f:d4:13:9a:7a:1f:6a:b2:56:af:a5:97:de:d0:a2:3e:
         55:52:77:75:9b:89:c3:08:d7:2e:c0:2b:ac:bb:b5:d4:eb:67:
         1a:e8:50:04:10:57:92:07:b4:e4:61:a1:cf:19:ef:0e:42:80:
         9f:ea:b0:d8:5d:40:38:20:d2:42:1a:bb:81:b5:a4:9f:c9:06:
         ae:c6:18:5f:85:f5:b3:9e:06:e1:e4:9f:44:f3:68:68:13:6d:
         63:e7:18:be:73:6a:d3:16:00:78:39:c5:97:e9:7b:ef:a1:e7:
         12:b0:84:dd:f5:57:8c:7a:a2:99:f0:a3:e6:f6:33:31:67:2c:
         18:36:37:59:36:07:ff:93:dc:eb:33:92:2a:bb:6f:57:f9:34:
         44:02:04:42:ae:82:90:6b:1b:ac:cb:46:f3:ca:67:e9:81:bf:
         40:5e:ed:da:09:73:aa:53:8a:3a:f3:9d:a9:a9:af:c9:b8:01:
         02:49:d4:ce:35:78:b3:21:de:27:af:7e:95:60:47:08:a9:4d:
         7e:6d:9a:7d:33:a5:cc:91:93:03:a5:0b:80:64:cd:94:db:dc:
         c9:67:b0:b7:dd:84:46:94:d3:24:8f:f6:19:07:00:b4:77:0e:
         36:50:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:36:32 2025 by rpki-client