Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File:                     MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier:          9oGImOLt9N25f4U0G6aPY4JKFRvJDqxIbTfIFq5cYf8=
Subject key identifier:   A3:AB:D3:26:19:72:40:16:29:61:DF:90:6F:A8:42:5E:21:18:0B:B5
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer:       /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial:       01969116323AC142464B455E0721747D2A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number:          11C5
Signing time:             Fri 02 May 2025 13:01:13 +0000
Manifest this update:     Fri 02 May 2025 13:01:13 +0000
Manifest next update:     Sat 03 May 2025 13:01:13 +0000
Files and hashes:         1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: tvyKifI+NfqPLlf60ulT7K4c9PoSYdo+KWxsii3KWa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:16:32:3a:c1:42:46:4b:45:5e:07:21:74:7d:2a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
        Validity
            Not Before: May  2 13:01:13 2025 GMT
            Not After : May  3 13:01:13 2025 GMT
        Subject: CN=a3abd326197240162961df906fa8425e21180bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:7e:85:4a:82:3b:f9:67:8a:54:5f:d1:4e:
                    b8:1e:54:bc:8d:75:04:e3:9a:89:7c:ab:ad:21:b5:
                    06:25:11:b7:bd:00:20:c2:ce:0e:52:88:90:6f:0a:
                    85:81:f6:47:1b:48:86:dd:0d:9a:86:ae:8b:5f:aa:
                    ec:0f:d3:75:71:e0:19:80:44:f2:46:a6:b6:f0:68:
                    1f:1e:68:5e:30:49:be:67:b3:da:b8:f3:a5:88:7f:
                    17:58:99:2f:e3:3c:0f:96:b8:33:5c:9d:5b:6c:97:
                    ff:a3:54:d4:da:10:76:45:ba:4f:80:7a:fd:8c:55:
                    e1:f1:c5:f5:ac:ea:3a:6c:88:ee:d3:bb:53:c4:4c:
                    96:4b:18:7a:b0:9b:6b:f1:d4:26:6e:9c:ea:19:29:
                    a6:64:1d:85:dd:11:fd:26:c2:1f:e5:d0:cb:1f:9b:
                    ec:5e:40:d8:94:98:53:16:bd:9b:ff:73:63:f7:0a:
                    4a:a1:2b:91:a6:40:de:fe:6f:8c:00:31:19:e8:c0:
                    45:4a:30:d4:92:cc:a0:c4:f6:03:6f:e4:85:b9:61:
                    0b:1c:42:4a:6f:82:82:b9:56:81:ae:f3:f4:af:51:
                    ce:fc:89:07:ed:39:b7:eb:e9:10:b9:21:1e:60:28:
                    ff:c6:a6:35:dc:15:d3:67:e1:1a:e4:86:f1:ee:91:
                    16:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AB:D3:26:19:72:40:16:29:61:DF:90:6F:A8:42:5E:21:18:0B:B5
            X509v3 Authority Key Identifier:
                keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:ae:e2:ae:14:cc:07:d6:2f:ba:d7:ec:66:87:9c:e6:eb:
         69:fe:91:8b:54:11:b5:89:61:b4:f0:10:50:7f:cc:06:31:ed:
         8e:17:a2:67:fa:b4:f0:79:38:08:c8:76:cf:3e:76:88:74:22:
         e1:cb:48:7f:68:c2:b8:0f:4c:22:33:f9:c8:60:a5:72:33:60:
         5f:2d:2d:c5:87:7f:62:4d:ab:63:e0:f1:9c:86:e1:e8:5a:e5:
         cb:12:9e:10:13:72:87:01:de:ba:15:53:d5:d5:48:a9:4f:9f:
         bb:2d:23:6f:9b:08:ed:96:45:09:8d:33:e8:3b:d0:78:7e:51:
         ba:eb:26:b2:5c:e1:4f:e5:98:28:f0:66:92:15:51:f6:be:54:
         d5:5c:ca:dc:3b:3b:f0:01:20:73:88:0f:ad:5d:1f:60:de:c5:
         ba:26:e7:49:76:84:21:09:85:7a:b9:bc:21:4b:66:f1:2d:b6:
         2c:95:12:d7:b4:ad:d4:75:4f:ef:ad:29:b1:4b:bb:10:af:6b:
         b1:4c:ec:01:d4:4a:0b:f3:e2:cb:d8:29:16:55:43:8f:39:d5:
         91:1c:ab:d0:56:38:9c:44:84:cc:40:ca:01:d7:6f:56:3a:bf:
         8d:6c:fb:87:67:09:03:d1:1f:d9:af:03:94:64:6e:18:53:bf:
         0c:f5:2c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:25:39 2025 by rpki-client