Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File:                     Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier:          dgoC0W7kAzKAMsrAexr2ppumXMWPBndnifvJDjThoNk=
Subject key identifier:   EA:FA:97:D5:D2:66:13:24:A7:46:95:09:60:16:7C:96:4B:20:AC:F9
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer:       /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial:       0199FD342D3901259F74A80DFB558DE85C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number:          055F
Signing time:             Sun 19 Oct 2025 16:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:19 +0000
Files and hashes:         1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
                          2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
                          3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: LdDqXl+Y0l7rh8/SCzskXRuCEDozC2E4JreHQIb9qdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:2d:39:01:25:9f:74:a8:0d:fb:55:8d:e8:5c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
        Validity
            Not Before: Oct 19 16:01:19 2025 GMT
            Not After : Oct 20 16:01:19 2025 GMT
        Subject: CN=eafa97d5d2661324a746950960167c964b20acf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:56:59:5c:85:e7:85:57:d2:c9:fc:b7:0d:a0:
                    b1:65:c1:7f:ff:5e:ea:94:a2:38:10:c7:48:5a:11:
                    48:a5:ae:4e:2b:85:65:ed:bc:20:70:83:f0:b3:11:
                    0a:4b:0f:9c:b3:c3:2a:b5:29:6f:1b:2b:79:af:6d:
                    c3:f6:45:72:f9:95:f3:46:1e:57:69:71:d3:f8:5a:
                    ea:2e:d9:2e:03:09:98:a1:6d:df:2b:66:5d:5f:3d:
                    dd:fe:ab:91:e3:b8:d0:e5:84:8f:f3:43:64:db:9f:
                    33:ab:1d:15:c6:5f:16:74:15:ac:d1:6c:45:2d:34:
                    c9:25:f9:bd:d3:c4:ee:a0:20:3b:d9:15:34:ac:26:
                    99:76:76:07:3c:9a:ac:34:90:4f:3f:8e:77:92:b7:
                    40:10:79:dd:98:55:39:83:b1:6d:b3:9a:1a:d8:f1:
                    8c:da:d1:66:4f:db:ce:80:a9:75:d8:1e:20:14:ab:
                    52:1f:4c:47:76:1a:32:35:e9:09:5b:11:ca:e2:8f:
                    ce:2d:f0:40:74:bb:eb:7a:5a:20:1b:38:d6:c7:41:
                    5f:9a:dd:67:3c:f5:ce:1f:95:3e:b2:27:5a:c8:90:
                    18:c3:9c:95:fa:c3:35:f8:ca:b1:be:1c:9d:38:87:
                    42:1b:2e:24:07:2d:4b:b7:dc:20:92:6e:b6:35:54:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FA:97:D5:D2:66:13:24:A7:46:95:09:60:16:7C:96:4B:20:AC:F9
            X509v3 Authority Key Identifier:
                keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:79:b6:7e:fb:ce:8c:3a:20:ae:f3:c9:29:70:dd:29:6b:
         29:7f:bb:7a:25:e4:97:66:8e:c0:6d:9c:df:fe:49:bd:9e:f7:
         3b:67:67:40:7b:86:a2:3c:f5:a1:32:a0:fd:aa:0d:87:13:e4:
         8b:f8:41:25:b0:c7:0d:0e:a1:96:40:41:ea:31:2d:52:a0:9c:
         28:86:52:66:16:ad:fa:20:61:64:fd:22:f5:87:12:9e:fe:36:
         96:73:53:07:4b:b5:b8:98:9c:58:f3:f3:2d:21:3f:dc:5a:58:
         f2:10:5f:2a:11:a7:a4:f7:15:28:1c:ca:e0:a3:dd:98:0e:2a:
         56:c9:15:ae:a6:fc:7a:96:e4:b5:14:fb:82:03:7e:f5:ba:ba:
         0e:d9:f7:3b:af:b7:95:f3:74:20:07:06:fc:db:71:08:83:5f:
         98:bc:6f:39:66:e5:86:86:8b:2f:7d:36:fe:d8:18:ed:b7:48:
         9d:27:7f:e1:70:d9:50:25:75:d1:e3:24:22:00:4b:0e:71:f4:
         5a:0f:4e:88:0d:9a:62:36:f7:56:f2:6f:85:a9:fe:66:38:78:
         7e:51:01:b4:44:a4:c8:3f:f5:5e:60:23:b6:04:28:f2:54:c1:
         ca:ec:a9:6f:34:f5:99:a0:77:71:07:47:62:38:7b:18:0b:ff:
         59:59:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:12 2025 by rpki-client