Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File:                     HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier:          ZcdEw6jT8AExg+I/x8qpZqM72zMnBRAQzJ5YukYiJvo=
Subject key identifier:   60:0C:0B:1B:02:23:50:7C:10:C3:BB:B2:81:0B:32:99:FE:2D:34:0C
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer:       /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial:       019A00A2F7A598A3BB4783AD7DDF950539A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number:          15FE
Signing time:             Mon 20 Oct 2025 08:01:11 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:11 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:11 +0000
Files and hashes:         1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
                          2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
                          3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: jhTZJdX/uZ4+UYKGpLLqdNH6OGFV9+kCqq7BHF0xJKg=)
                          4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a2:f7:a5:98:a3:bb:47:83:ad:7d:df:95:05:39:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
        Validity
            Not Before: Oct 20 08:01:11 2025 GMT
            Not After : Oct 21 08:01:11 2025 GMT
        Subject: CN=600c0b1b0223507c10c3bbb2810b3299fe2d340c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:09:4d:0b:52:7f:6a:53:c6:a2:c4:21:67:
                    1a:bc:ea:c6:e4:c5:01:0b:dc:5e:92:00:75:83:2b:
                    af:85:a0:64:7d:e3:f9:76:70:20:26:59:95:d6:34:
                    e0:9c:af:91:e6:61:d9:1a:de:91:37:88:1d:8a:3c:
                    f1:43:37:dc:0c:fa:f9:19:3b:7c:b3:e7:b1:6e:1c:
                    bf:95:17:42:a4:81:dd:17:42:c4:84:e1:e8:f9:75:
                    c8:11:a9:09:ba:44:72:44:ab:e9:ea:9a:ae:8e:3c:
                    4e:f9:da:f7:11:da:2a:ca:39:69:36:5b:1d:ca:30:
                    59:7a:ef:96:59:d9:2f:2f:5d:1c:1d:bc:39:0a:71:
                    7e:bd:c6:59:f4:53:ee:a0:dc:77:9b:e5:ca:c6:b3:
                    43:ce:97:b4:7a:30:ce:9e:cd:18:51:8d:dc:66:c8:
                    48:cf:c3:ac:11:ae:a8:ac:4f:09:93:70:69:5d:20:
                    b1:1f:14:2e:a3:9a:70:d9:1d:77:2d:7f:8d:e0:86:
                    ee:94:23:4e:1f:0e:6e:65:f7:67:ba:51:45:74:8f:
                    29:b9:b4:cb:85:07:61:1b:7e:62:5f:40:51:e9:c3:
                    f2:52:5d:5a:0e:f3:ca:14:bf:40:bc:de:3f:51:db:
                    f3:68:98:7f:3a:25:af:e1:ca:64:43:73:93:c4:13:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:0B:1B:02:23:50:7C:10:C3:BB:B2:81:0B:32:99:FE:2D:34:0C
            X509v3 Authority Key Identifier:
                keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:55:2a:18:09:51:6f:dc:40:73:01:d3:23:e3:6b:3a:a9:
         73:b0:fb:ba:5a:a6:7b:4d:b9:69:36:40:73:23:a6:e6:a2:15:
         12:a4:67:78:ef:75:05:7b:8a:ed:f8:6b:5e:e5:c5:0d:04:97:
         8c:cd:a9:cc:4d:a6:09:23:dd:ea:7c:d7:97:37:c0:c0:91:78:
         86:d0:19:45:74:5c:2c:73:ab:e2:b9:3b:4c:82:3b:d2:53:a9:
         b4:cb:df:0f:66:07:a7:79:52:4a:ee:c7:9f:c5:85:85:70:9e:
         f6:d7:2c:5b:03:83:a8:48:b9:1b:18:08:45:f0:ff:60:8e:39:
         1f:b0:8e:14:1b:d1:e3:cb:e1:55:f0:af:a6:42:c0:26:09:bf:
         3c:66:04:0b:aa:99:90:e0:a2:61:3e:ca:86:4a:41:92:d7:b5:
         46:0d:c3:95:b9:5e:5b:a2:23:ff:59:12:32:17:48:05:7e:e3:
         55:b6:1e:9b:77:28:c2:51:32:77:81:2a:fd:58:31:aa:6a:b3:
         b5:70:bf:19:2f:bc:24:55:c1:c1:e6:b3:a6:06:63:66:a4:d3:
         d3:0a:de:f5:7f:2f:f0:18:17:39:77:53:3c:ba:14:41:8f:9e:
         20:b2:53:86:48:37:bb:36:d9:a1:b1:8f:e5:5a:7a:eb:c0:ed:
         44:28:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:46 2025 by rpki-client