Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
File:                     MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json)
Hash identifier:          WeIgHmOxS87CoOepRq10BegZOCCPAnUl/Rb34prvAN4=
Subject key identifier:   85:4A:A0:B1:0F:A9:CF:C7:62:3E:C6:E8:D8:76:9C:AC:2A:D4:55:A9
Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
Certificate issuer:       /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Certificate serial:       019768F2CA2CF658AACD2D5D98BC99D55B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 11:00:31 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:31 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:31 +0000
Files and hashes:         1: 1-eAJE_ZPw_LJuNlElXg0BRaL11g.roa (hash: YakZb3LMYAiCfML5t2kxegtBvI+8ocrvx+dTJt+Il2M=)
                          2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: qgp9f7ntCfj5GhsT+PdRo/4Mw+QIIaL8RXYuDcRaXNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:ca:2c:f6:58:aa:cd:2d:5d:98:bc:99:d5:5b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
        Validity
            Not Before: Jun 13 11:00:31 2025 GMT
            Not After : Jun 14 11:00:31 2025 GMT
        Subject: CN=854aa0b10fa9cfc7623ec6e8d8769cac2ad455a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:77:b7:5f:db:cc:1e:e5:d1:52:33:09:8d:
                    50:e5:61:bd:8b:14:76:40:3d:4d:8b:f5:f4:ad:9d:
                    1e:70:24:c0:85:22:cb:dd:e2:54:2d:9c:ba:0e:f8:
                    06:bb:72:8a:66:c7:c4:43:47:2a:07:ae:b4:c8:96:
                    ff:0f:2e:3e:c6:1d:7f:72:35:53:2b:79:7f:fb:1b:
                    c7:46:30:26:46:f3:4b:db:45:35:5c:b4:b9:12:50:
                    a7:12:22:d3:75:c9:b9:f7:ba:35:20:4d:6e:bc:70:
                    62:06:23:ae:32:bc:25:2e:c7:ed:49:0e:a3:1c:48:
                    85:3e:0c:0e:4e:4b:0c:37:3a:43:05:d3:79:0d:e7:
                    52:7b:70:43:48:83:78:1d:ad:42:be:a9:df:f3:c5:
                    22:7a:cf:7f:5f:56:ae:48:25:5f:8a:fd:6b:63:c4:
                    24:d9:b2:f6:39:29:fc:e9:70:49:10:85:9f:d1:c0:
                    c0:ef:d0:15:8b:0b:0f:85:fa:34:ac:a4:0d:0e:63:
                    38:24:c8:fb:93:55:16:30:d2:9f:09:02:7e:11:ba:
                    4f:99:d3:06:8a:d2:ca:b0:ae:59:fa:99:1b:d6:d1:
                    26:8d:e6:93:ce:e9:42:0e:d1:1f:b7:cf:e8:e0:e3:
                    36:92:29:1b:99:13:80:4a:61:e2:80:2b:d0:40:0f:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4A:A0:B1:0F:A9:CF:C7:62:3E:C6:E8:D8:76:9C:AC:2A:D4:55:A9
            X509v3 Authority Key Identifier:
                keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:57:fa:ca:4f:13:c2:cc:ed:bd:6a:75:0e:dd:ed:c5:e1:73:
         8b:55:3b:00:ae:fd:c8:b3:59:ae:f1:dc:6e:7e:73:59:a1:4c:
         74:c8:cb:47:98:ba:f4:e0:66:c6:66:d5:28:38:f0:e1:34:09:
         89:c5:26:d3:98:d3:2a:ea:3e:9b:3c:e0:e1:81:bf:4a:84:59:
         81:a2:dc:d5:0d:4d:77:be:74:65:22:e4:12:da:c8:d9:0a:ac:
         41:bb:7a:8d:fe:80:4e:16:37:58:67:cc:05:7d:4f:13:e1:33:
         ab:b4:70:b4:35:66:cb:34:6b:d8:9f:2f:90:6e:dd:ac:97:32:
         8a:a1:28:b0:ed:5c:1d:1e:16:95:c9:0e:9c:ea:f3:b3:3c:5b:
         01:ca:05:57:97:b3:be:c6:38:12:f6:3e:1a:d9:b4:f2:2c:5c:
         f2:b0:f2:79:57:ca:d6:8b:c9:4b:f9:6b:af:a0:8d:ee:2c:b3:
         51:69:de:d0:c9:f9:dd:42:a4:68:9c:15:f5:bc:f3:9d:b9:43:
         00:4c:f3:d3:0b:ff:ab:4e:fb:2f:96:f5:2d:fa:d7:39:b3:3e:
         ef:72:fd:71:94:e0:67:f6:fe:7e:a0:3f:16:17:04:b9:ac:9d:
         51:f3:4c:ee:0b:66:3c:28:de:2e:dc:3e:d0:91:16:61:f2:3d:
         48:fe:02:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:21 2025 by rpki-client