Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
File:                     H0n8ab9uujufoFF9AGKSchDk6Mo.mft (raw, json)
Hash identifier:          kSqxdh6b+rNoQ4mHFnCgX5jrgt82InILJWf5g0nlB6w=
Subject key identifier:   CD:99:75:E3:5E:53:FD:E0:16:F9:C0:56:48:BA:6D:6E:00:3A:60:BA
Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
Certificate issuer:       /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Certificate serial:       01976EF4DB1B2F4C8A020F5E6A719BD2DE13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
Manifest number:          045B
Signing time:             Sat 14 Jun 2025 15:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:29 +0000
Files and hashes:         1: H0n8ab9uujufoFF9AGKSchDk6Mo.crl (hash: Tdl3dE8S3Iji4fewvcLvbPOJKO1+BeRLHHfuOkm6goI=)
                          2: Uer55Veb_ut1JsDk-7JNWBypePA.roa (hash: mFvrHyTdVgwfq1zEyZ5X8BtK4+uJoolM6yDZ19bRhfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:db:1b:2f:4c:8a:02:0f:5e:6a:71:9b:d2:de:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
        Validity
            Not Before: Jun 14 15:00:29 2025 GMT
            Not After : Jun 15 15:00:29 2025 GMT
        Subject: CN=cd9975e35e53fde016f9c05648ba6d6e003a60ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:50:4a:c6:6b:cd:2d:82:e4:7a:82:52:99:
                    46:2a:37:8b:44:d7:4a:33:c0:09:d2:35:c5:e8:e2:
                    b7:1e:32:eb:8a:d6:ca:77:06:45:e3:2d:1d:5b:ea:
                    80:23:8a:7a:3d:f0:fa:5d:a7:0a:93:b2:96:66:69:
                    31:ff:de:b6:0b:1e:3b:93:09:39:60:cf:a5:6a:62:
                    5f:c9:27:7d:49:42:07:b6:c6:cb:b6:af:46:7d:94:
                    d0:13:fe:24:fd:25:0c:87:bf:bf:87:57:58:69:aa:
                    88:6c:97:de:ed:05:cb:d7:f1:24:18:f0:ed:34:db:
                    09:94:49:27:85:c6:bb:17:dd:51:21:0a:f4:f1:df:
                    d4:e9:e5:8a:9d:22:e3:7d:2b:fc:49:47:2c:bd:58:
                    ae:89:e6:b3:1a:ef:3e:66:92:43:af:81:53:78:0c:
                    ec:1d:b6:51:f0:03:f3:c6:93:67:a2:b7:ab:e6:25:
                    06:0f:f1:21:5b:7b:2d:dd:f4:99:ce:51:4e:b8:ee:
                    71:c5:48:19:07:16:86:92:0e:9b:d8:f1:14:04:da:
                    2c:0c:45:61:45:e6:58:f7:4a:ef:bd:61:16:e7:b6:
                    d7:13:d0:0f:f5:49:97:f7:75:e7:af:fa:04:da:db:
                    2f:fd:0e:e3:c3:66:87:dc:0a:fd:86:96:3f:32:e0:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:99:75:E3:5E:53:FD:E0:16:F9:C0:56:48:BA:6D:6E:00:3A:60:BA
            X509v3 Authority Key Identifier:
                keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:95:80:1f:37:b5:f8:06:cf:12:44:04:43:12:09:2c:06:
         32:da:ce:8c:ad:1d:ee:9f:c3:a3:40:d8:e9:7b:f5:88:91:d0:
         28:34:20:79:03:a5:ea:64:45:e3:46:1d:aa:cb:83:59:fa:12:
         0b:32:cd:92:90:64:42:f7:45:44:a0:1f:bc:fd:5a:e5:b8:23:
         a2:fb:59:48:98:91:5c:87:a0:82:5a:cc:2c:5f:6d:6b:3a:4e:
         ce:95:5a:cf:51:5b:ba:a9:24:d4:2b:5c:8f:61:01:4c:08:0b:
         d8:2f:80:8b:f3:29:6f:fb:5d:19:25:d9:0a:1e:49:f2:ff:ea:
         1e:48:88:a0:8d:c2:d7:28:17:21:5a:64:d5:35:0a:4a:0b:de:
         b7:08:0b:08:f5:a0:bd:60:f7:0f:10:32:4c:21:fd:4b:22:9b:
         21:5a:0b:df:22:68:ef:27:d4:b2:4e:05:f0:b3:82:16:cf:bd:
         a1:eb:46:7a:e5:69:6f:50:a0:20:32:1e:c8:35:69:f1:5b:42:
         8e:fa:7d:92:56:09:67:e0:ab:b5:c9:ae:b2:dd:d6:85:97:85:
         3e:f0:9c:b7:8b:67:67:31:c4:f0:1e:92:22:56:af:7c:46:a5:
         98:64:b8:78:be:e3:6e:5f:8d:07:f3:cb:58:85:a4:28:14:d5:
         09:a3:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:39:43 2025 by rpki-client