Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File:                     hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier:          Th3IKULdFcrZvLVLF2nXRUv/U1xEuiIGLshXMQlqbdg=
Subject key identifier:   05:28:A0:2E:15:F0:F3:68:62:1B:86:95:4C:17:0D:75:BA:4A:C6:3F
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer:       /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial:       0197B8C5A1EDAA250FD5A6728CA360A71A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number:          08FA
Signing time:             Sat 28 Jun 2025 23:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:49 +0000
Files and hashes:         1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=)
                          2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=)
                          3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=)
                          4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: 8mPfhUcoJHuM9fZfgg8WWXo7sdW7auL8zNmwmyYr4KY=)
                          5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:a1:ed:aa:25:0f:d5:a6:72:8c:a3:60:a7:1a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
        Validity
            Not Before: Jun 28 23:00:49 2025 GMT
            Not After : Jun 29 23:00:49 2025 GMT
        Subject: CN=0528a02e15f0f368621b86954c170d75ba4ac63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:ef:69:29:4a:22:fe:3a:83:f2:00:a9:75:
                    42:09:9b:2c:b1:6e:6b:c9:80:f6:a7:56:cc:84:5a:
                    20:65:a7:99:6d:07:9a:3f:16:a5:3a:6f:37:a4:4b:
                    78:80:b6:a4:31:de:92:38:8c:08:8b:d4:c6:48:cc:
                    bb:03:53:47:2d:16:12:aa:97:8c:74:8d:bf:70:9a:
                    4b:0d:32:c4:82:d8:a2:eb:e1:e9:95:f3:97:6a:23:
                    b3:a4:ee:fd:d7:b1:0d:cc:da:13:dd:c1:a7:77:c0:
                    e2:d0:f2:ac:42:2e:a4:4e:38:00:08:de:93:9a:a5:
                    e4:60:8a:4d:f2:23:cf:b0:b1:be:5a:50:57:c0:49:
                    dc:80:ef:f1:89:61:56:62:0a:1b:af:a4:60:99:60:
                    f8:fe:f8:02:39:11:b4:1f:1a:38:cd:06:aa:d0:c0:
                    d0:3a:be:18:ea:0a:74:1b:16:3f:7b:73:ab:94:d1:
                    e1:1b:84:6c:c4:5d:20:23:70:c7:c1:5b:79:57:6b:
                    d2:31:14:8e:65:05:a1:14:39:c9:69:3c:90:6b:3f:
                    66:41:0f:3d:81:bc:b5:e0:ee:20:1b:06:83:68:0a:
                    49:14:e2:61:e6:8f:a3:68:54:26:cb:f6:34:63:d5:
                    02:cc:ed:a1:9a:45:96:8f:92:a4:5d:91:89:60:50:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:A0:2E:15:F0:F3:68:62:1B:86:95:4C:17:0D:75:BA:4A:C6:3F
            X509v3 Authority Key Identifier:
                keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b4:2e:3a:7c:c8:07:43:53:29:80:c4:f0:87:91:02:ee:23:
         27:d2:ca:f9:35:7e:7d:12:ce:97:16:61:32:c7:d8:92:83:42:
         79:df:d2:73:dc:e2:3b:a9:4b:c7:1c:7c:48:b4:4d:2c:1d:99:
         f4:3e:22:08:b5:e4:64:0e:c5:95:ab:cb:5e:2a:a7:fa:8e:51:
         fb:65:60:6a:50:96:3e:a8:1e:4d:9f:64:af:bf:fc:d6:c6:be:
         77:03:5a:c7:81:3f:66:47:f1:29:bf:e7:11:7f:19:c9:71:31:
         d5:93:51:86:93:54:ac:89:49:65:9b:34:6b:bc:fc:e3:04:23:
         4d:a2:b7:f4:05:69:86:07:42:3c:3f:72:2e:90:b5:36:99:f6:
         2e:2b:62:33:69:28:ba:6a:f5:5a:4b:39:97:15:05:10:99:65:
         82:23:61:35:6f:a2:a8:d5:e4:1b:4e:80:ab:e5:2c:be:60:fb:
         cb:c8:e3:2b:a9:fb:f2:79:c8:06:46:29:0c:28:d1:1b:fd:1b:
         85:7d:fe:df:06:a1:0d:4f:0b:ff:75:23:76:d3:ad:92:d4:c2:
         40:bf:73:01:a2:11:10:b9:6f:8b:14:4b:5c:9a:c8:fa:1f:45:
         a3:ab:17:a6:aa:ce:b8:6b:46:3c:82:eb:fa:74:53:ff:0b:9d:
         e1:f7:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:27 2025 by rpki-client