Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File:                     hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier:          PG2A7JhS6pZ9F5FfwT62/rcwozO2fhiedCoFhf9FfUc=
Subject key identifier:   50:A7:40:61:94:49:A7:BF:4F:62:4D:29:69:81:C1:FC:DE:06:32:5B
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer:       /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial:       0198D4A84A1F9FCD5C3B87EDA27D292E71C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number:          07D2
Signing time:             Sat 23 Aug 2025 02:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:55 +0000
Files and hashes:         1: 9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa (hash: e3MsAliQl7R+w6WCs9Je3nF/3YOrMW2JU+QDq2FQ+FM=)
                          2: JqCwXNSsIA5GmOAqVij5xtyCNdo.roa (hash: QdmrseC1ST0f5saIZ/JDQWioFap1TFhdMiZ17k2Nqbw=)
                          3: Yz1nqnWdktBLCf-4upLjmxtc2c4.roa (hash: J/e8pwliu2ZJzstQArsqHThwEBlwW9xmmljRrojzK28=)
                          4: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: TC+dYu8BVTpcBDAKU/9oT0DANhoT87l8N0clj5MvOlg=)
                          5: l6j2aX0QSLWVCzZDpMtGz8W4wjo.roa (hash: AigJG7f6f5V64toLqhPhGUD+Okr3C21xM3JcJXAk2jE=)
                          6: o5MQ_aMK7jefmZE6oPWihY-kiig.roa (hash: GwxLFOZ2rnFVptkhZAQW3B9urbn7oWI6excYOIPPHzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:4a:1f:9f:cd:5c:3b:87:ed:a2:7d:29:2e:71:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
        Validity
            Not Before: Aug 23 02:00:55 2025 GMT
            Not After : Aug 24 02:00:55 2025 GMT
        Subject: CN=50a740619449a7bf4f624d296981c1fcde06325b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:5c:89:35:6d:11:3c:8e:1a:3f:c8:e0:fc:
                    d6:4e:a4:26:e4:d9:df:f3:d0:60:a6:f9:f9:3e:27:
                    57:4b:e3:5a:82:13:ef:94:13:ee:af:2c:c8:77:55:
                    98:67:fe:43:61:8b:82:6c:cd:b4:62:37:84:89:f5:
                    45:14:1c:95:34:41:9b:ca:86:78:7d:bb:13:d9:be:
                    a5:81:2d:9f:cc:c9:82:6d:12:08:d9:38:35:a7:06:
                    b4:1a:97:dd:43:63:7d:73:0f:ea:4d:46:2b:df:dc:
                    62:7d:b5:d1:ee:8c:96:57:cb:6f:33:3d:7e:23:34:
                    80:bb:76:03:fc:c1:6d:c7:c5:f6:7e:c0:af:55:a6:
                    b0:3f:11:94:a2:35:5d:eb:e0:be:3e:dc:13:a1:42:
                    ba:05:aa:8f:e1:76:05:38:0a:7a:05:74:ba:da:f3:
                    70:64:63:f1:a8:49:83:80:32:c6:86:a9:6a:6b:b8:
                    a1:b1:02:d1:a5:66:23:32:7c:a2:42:77:c1:88:be:
                    8a:71:8a:d3:b5:16:c1:31:c9:91:51:43:44:f0:9f:
                    fa:21:95:24:f6:f1:2a:19:6a:8d:a5:41:fc:9b:f5:
                    2a:c2:9f:2d:3e:94:3c:79:0d:eb:bf:16:9d:99:74:
                    9b:7c:71:e3:36:a1:cc:7f:fd:0c:ab:a1:3d:f3:8f:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A7:40:61:94:49:A7:BF:4F:62:4D:29:69:81:C1:FC:DE:06:32:5B
            X509v3 Authority Key Identifier:
                keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cd:9c:dd:de:ac:47:6c:8c:1a:45:2a:4a:39:03:d6:a9:e0:
         df:ae:a9:61:38:98:a3:42:77:be:3b:fd:48:ff:8a:aa:b3:01:
         cb:72:14:4c:58:20:44:f6:ea:c5:24:a9:c7:1f:1b:d1:a2:ff:
         8a:e8:11:ee:48:f6:33:c6:6e:0b:4b:64:7a:8f:9f:07:e8:9c:
         80:4c:ad:5a:cf:fb:34:90:30:3a:0e:1b:e6:94:c2:19:0e:c3:
         aa:f2:fe:29:74:96:99:a2:34:fd:2f:d9:f2:78:dd:9a:e2:9f:
         45:dc:20:ec:bc:d2:d1:ed:c9:f5:0f:ac:7b:53:cc:ba:23:d8:
         68:19:60:74:79:3c:f7:ca:01:bf:75:fe:15:15:a5:38:ca:7a:
         77:bf:e9:96:fb:ef:c6:dc:89:dd:6f:37:5a:79:95:66:9e:70:
         da:1e:3c:a5:66:49:62:bb:d6:24:65:bb:ac:3c:23:9d:47:3c:
         e3:6e:3f:1c:8c:2e:af:f9:8a:a2:b9:4b:2a:e5:0d:c9:a7:7d:
         b3:b2:b3:4e:3c:45:d6:f0:d4:ca:93:bb:1f:40:1c:6d:ea:5f:
         28:66:de:78:85:ce:41:08:9d:cd:49:84:f4:d0:63:e6:98:65:
         d3:e4:63:51:4b:c3:93:f9:6d:fd:74:18:66:69:d4:f6:09:d0:
         4f:26:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:52 2025 by rpki-client