Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File:                     HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier:          TxSe3T178/fcYkXCetF0RInGxQmgyZFUDA4xmz0WDWo=
Subject key identifier:   2E:CD:6E:A8:26:3B:B3:15:43:42:83:EF:28:82:CB:A4:41:69:6D:81
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer:       /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial:       019696E0F21242DC39CC39637E64C87C11A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number:          151F
Signing time:             Sat 03 May 2025 16:00:46 +0000
Manifest this update:     Sat 03 May 2025 16:00:46 +0000
Manifest next update:     Sun 04 May 2025 16:00:46 +0000
Files and hashes:         1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: UX4TMjc64msL5QokZVEIUxNTRWIBWZtZXCt3FwzHhA4=)
                          2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:96:e0:f2:12:42:dc:39:cc:39:63:7e:64:c8:7c:11:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
        Validity
            Not Before: May  3 16:00:46 2025 GMT
            Not After : May  4 16:00:46 2025 GMT
        Subject: CN=2ecd6ea8263bb315434283ef2882cba441696d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:5b:10:3d:26:da:09:9e:1b:b7:17:ce:57:
                    ac:a3:8a:d3:1c:69:85:b2:d7:98:39:22:32:59:3f:
                    4d:b7:5f:70:ef:86:50:96:59:08:db:bf:17:43:99:
                    2d:a7:ac:b3:76:db:81:54:2b:dd:06:f6:01:fb:89:
                    da:47:c3:20:cb:e0:22:28:c5:04:86:73:be:d3:63:
                    52:54:d4:8a:af:2c:db:69:08:ff:0b:7a:21:d7:68:
                    24:7f:b6:36:36:d2:3f:1f:0a:31:fc:79:9b:47:08:
                    43:a4:2b:74:92:02:27:2a:29:96:6a:be:f0:76:41:
                    a4:3d:63:b7:a3:71:65:79:fa:b6:2a:0e:a0:c0:0d:
                    8e:e3:29:6d:09:2e:15:f0:82:08:14:3f:6f:fe:61:
                    f1:44:66:0f:22:fa:0a:ca:48:0a:32:06:31:17:6c:
                    a2:d5:b2:a0:68:c3:06:f3:e2:d6:25:51:f8:88:87:
                    53:13:ab:53:25:3f:40:ae:b4:0d:6f:9d:ec:ec:b9:
                    29:5b:b5:5b:e5:87:0e:7e:9d:c8:ee:ba:7c:37:a6:
                    53:20:38:6e:cc:0c:f0:0b:80:2e:84:39:4f:50:e1:
                    f0:9d:eb:e6:82:38:81:52:de:dc:4a:da:6a:7d:77:
                    60:27:da:ab:68:7f:da:46:d6:f8:0a:b9:83:a8:6d:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CD:6E:A8:26:3B:B3:15:43:42:83:EF:28:82:CB:A4:41:69:6D:81
            X509v3 Authority Key Identifier:
                keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:61:ef:0e:b6:50:46:f5:5e:33:59:50:41:ff:04:9c:f0:37:
         b9:68:40:e1:fe:22:b2:58:3d:29:a5:a7:f2:0b:b7:b7:ed:1a:
         8a:a0:8b:07:0a:dd:f6:10:a4:5f:15:1f:d6:f7:57:e6:e8:7b:
         6e:5b:40:73:7b:87:d5:8d:3e:fb:b2:4f:7b:76:3c:63:54:56:
         9a:34:84:6a:ba:e5:6c:71:34:61:0b:a3:41:60:ef:9b:a4:48:
         b7:0e:5e:53:58:af:89:f9:c1:77:6c:17:d5:71:d2:aa:54:bf:
         3d:e9:4f:da:ac:a1:8d:75:f6:06:1c:f0:28:eb:b1:e1:c0:90:
         31:27:7d:c7:01:ff:e4:78:80:9f:86:ce:0d:19:83:73:e6:cb:
         a4:27:5d:69:9e:c8:0c:5f:09:2b:fe:4d:0e:ee:ec:85:8d:25:
         2a:0d:30:e2:5e:ae:06:97:d0:ba:07:e1:6a:9c:db:18:88:8b:
         f9:7a:f3:12:c3:de:7f:ea:61:72:b3:cc:10:20:ae:85:90:54:
         a7:d4:b4:a2:27:3b:05:ea:19:4b:f1:af:5a:92:a0:9a:f7:84:
         44:bb:89:d7:79:5f:07:f3:eb:20:cb:00:c3:4b:33:55:da:11:
         2a:9e:1f:4b:7c:8b:a2:f8:8c:b6:83:2b:82:65:dc:0a:fb:f0:
         94:c1:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:44:50 2025 by rpki-client