Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File:                     HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier:          JurBGqGhpZQ/vjwsz0as+hokSJAx5cA3WfcBQ6krMzc=
Subject key identifier:   9D:D3:A8:5C:31:9C:39:51:13:25:BC:FE:76:49:5F:97:AC:F6:D9:A0
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       01976BF49180D9F25F6DF0B46CC506C6A745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number:          15B1
Signing time:             Sat 14 Jun 2025 01:01:19 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:19 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:19 +0000
Files and hashes:         1: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=)
                          2: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=)
                          3: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=)
                          4: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=)
                          5: 5KpVCQ3CyEztQ9cIEvVYbZRbiYQ.roa (hash: wEh76twlgMaB5r7NetVkn53k9vIu3IdtKnUUcrVB2Dg=)
                          6: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: kbgMUABTGnylDqm1DSVdFrr8PDCmbbyyifU06jqJnXA=)
                          7: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=)
                          8: IppBZHr6rtDZFlGkYGSC_b4iLf8.roa (hash: JW9Kh503AbeAiJw1huy2tMda6a91+tj0zAGKx3bgPiI=)
                          9: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=)
                          10: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=)
                          11: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=)
                          12: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=)
                          13: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=)
                          14: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=)
                          15: vYpftoIYl0802LMSZotEkwGtO1k.roa (hash: AuWrLadvB2ERH3IjebmtnUJ/nP6gZejuogzS6BRYY2s=)
                          16: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=)
                          17: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:91:80:d9:f2:5f:6d:f0:b4:6c:c5:06:c6:a7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Jun 14 01:01:19 2025 GMT
            Not After : Jun 15 01:01:19 2025 GMT
        Subject: CN=9dd3a85c319c39511325bcfe76495f97acf6d9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:95:bb:d4:38:7b:ce:af:13:62:e1:10:c1:
                    84:64:93:bc:42:83:03:63:d3:6e:bd:cd:1d:d4:96:
                    d0:4e:f5:a5:52:1d:29:c9:88:30:4c:87:f6:40:d8:
                    24:1b:b7:20:ff:80:6d:92:9b:ca:5e:2a:04:d3:20:
                    c2:12:1c:86:cd:02:08:05:a7:7f:28:1a:1c:e3:92:
                    de:3d:0a:6f:68:53:16:bf:07:9c:ec:f6:79:43:09:
                    4e:0c:26:a0:54:c4:be:bf:28:f2:71:b0:55:8c:8a:
                    06:cc:c2:d4:e0:34:47:44:b2:87:b9:61:6a:28:f6:
                    98:27:8b:31:17:d5:aa:07:56:96:f3:31:4a:95:35:
                    7b:e6:7b:33:8f:e5:a4:20:0b:7e:ff:81:28:ff:5a:
                    ac:75:e6:8a:b4:03:8d:0b:3b:cd:0e:5b:be:31:dd:
                    07:40:0e:86:b7:1a:10:de:b3:c9:8a:f2:66:cb:55:
                    22:67:34:4e:7b:a8:77:d7:2a:77:3a:52:bb:82:25:
                    c6:43:10:f2:db:c2:73:19:8e:ef:9a:df:49:af:f0:
                    4f:70:6e:38:46:86:48:4a:3f:ef:b4:7e:23:81:b2:
                    ff:2b:e9:0b:d0:0d:58:2f:eb:c9:b3:79:73:05:47:
                    9c:67:c2:74:02:84:ee:ab:d8:41:d8:eb:7d:5c:d4:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D3:A8:5C:31:9C:39:51:13:25:BC:FE:76:49:5F:97:AC:F6:D9:A0
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:56:f0:bf:8c:a9:16:48:77:06:8a:e1:ac:ef:d5:15:07:
         f9:4e:05:ba:0e:da:fc:7a:ef:6a:66:99:a1:88:6d:49:19:0c:
         a7:fe:53:18:fe:71:69:04:66:af:a6:90:0f:e4:9c:33:6c:b1:
         6a:f1:23:ec:8d:a3:30:eb:14:ef:f6:82:1c:cc:05:14:09:52:
         1f:d7:c5:df:82:95:d4:b2:06:41:f0:ee:99:ca:47:a5:33:cb:
         f3:24:39:e5:9b:6d:6a:f7:13:cf:d2:06:f0:a4:cb:c2:62:b6:
         3f:36:77:3b:03:9a:10:b4:b9:a4:50:51:38:00:fc:f1:98:df:
         7a:8f:f9:36:9e:c0:79:e0:95:fc:c2:4f:97:55:c3:3f:c8:12:
         3f:f3:d0:10:1c:b7:13:43:e3:ec:5d:21:7b:28:6f:60:80:a5:
         dd:c4:e4:ca:72:54:e2:d6:a0:12:c1:97:45:44:d6:91:a3:e3:
         d2:55:01:00:f1:35:e4:02:e8:c4:93:99:cb:42:55:13:f8:cf:
         05:04:25:11:20:0e:e8:f9:c0:f5:c7:59:f2:ad:9f:b2:f9:8c:
         4c:22:97:57:fa:0c:90:86:77:67:fe:20:50:03:e0:2c:a8:95:
         db:00:81:2b:27:6c:df:88:da:f7:a2:a9:fa:09:24:0d:66:85:
         f6:fb:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:42 2025 by rpki-client