Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File:                     HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier:          yED1OHWDAMzNnjI/1q3WUlTPYcrr49scvrKxCm8NOrY=
Subject key identifier:   A6:30:97:28:28:5F:1D:26:4F:92:72:23:8D:36:C2:5A:93:1D:21:CC
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer:       /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial:       0198D65F60DD9090051EBE4875A4F06217F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 10:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:31 +0000
Files and hashes:         1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
                          2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: IIV/mGSCxrwqDD8FQuKp3c+Ox9flTGYuSfm5gxewOFM=)
                          3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
                          4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:60:dd:90:90:05:1e:be:48:75:a4:f0:62:17:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
        Validity
            Not Before: Aug 23 10:00:31 2025 GMT
            Not After : Aug 24 10:00:31 2025 GMT
        Subject: CN=a6309728285f1d264f9272238d36c25a931d21cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:7c:08:75:e2:90:64:3a:02:82:2b:79:60:
                    8e:63:4d:c2:3d:8d:2c:6b:0a:bb:0c:fd:d9:ca:b4:
                    40:45:5f:26:57:4e:e2:2a:d1:bb:39:3e:89:ab:a4:
                    7b:16:ea:17:34:be:ab:ac:83:26:e2:58:b3:74:26:
                    99:ce:d3:39:da:16:f3:77:1f:c4:04:3b:0f:ce:a6:
                    da:48:1f:09:64:2e:96:7b:e5:61:81:f4:f5:40:20:
                    e7:ef:16:a9:17:1b:c6:17:71:71:84:f7:ee:8d:d9:
                    c5:78:4a:bf:19:46:14:25:1d:3d:05:78:5f:ff:8b:
                    7c:03:e9:8a:38:89:e6:2c:a5:ed:c9:d8:4e:2a:b4:
                    2e:14:93:c7:98:82:8e:2d:00:bc:92:ae:d1:79:0f:
                    26:ee:56:02:d3:94:e5:fd:03:05:bd:88:74:9c:b9:
                    06:40:96:8e:b5:17:d9:0d:49:1d:bd:c3:4a:53:c6:
                    e5:7c:5e:c7:3f:d8:ca:1e:4d:5a:4c:db:de:74:ee:
                    b9:d1:4a:57:13:b4:da:b2:6e:09:b3:38:8a:96:00:
                    ba:1f:1c:6c:8a:03:70:d6:db:8f:d9:70:68:33:01:
                    f5:5b:0f:ac:d3:5a:2e:88:35:3e:ff:37:ae:8d:fd:
                    44:65:de:2a:bb:21:25:a8:74:a6:f4:8a:0c:4c:9b:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:97:28:28:5F:1D:26:4F:92:72:23:8D:36:C2:5A:93:1D:21:CC
            X509v3 Authority Key Identifier:
                keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:09:65:30:0b:ae:55:eb:b5:14:d1:6b:70:a3:e7:84:0a:f0:
         cc:76:8e:85:d6:a4:10:d8:a7:e6:ee:90:20:d6:94:84:22:95:
         49:ce:fd:74:de:dc:f0:53:7e:1c:c2:f2:24:d7:b2:31:5b:2b:
         5e:93:b6:95:ee:d6:83:3e:d2:da:0f:16:35:d7:46:ba:03:f6:
         32:49:d0:6b:6d:30:7e:8b:c5:92:de:a1:87:a3:68:48:89:82:
         e0:4b:ad:9a:c7:25:f1:80:a8:5a:91:b4:1b:bf:a7:99:4d:9a:
         a1:58:88:1b:2b:c1:69:56:8e:78:98:e7:0b:66:72:56:a3:75:
         ab:c9:f6:02:22:c4:70:a7:17:a2:64:e3:aa:7a:46:4a:f1:90:
         ed:64:b7:42:ee:76:50:81:cb:c1:d9:57:e3:08:9c:68:75:f6:
         11:a6:9b:d0:58:cb:4c:59:6c:1c:7e:ee:1b:ab:3b:36:b9:4a:
         7f:12:a0:03:5b:30:b8:eb:35:9a:36:fe:d0:34:9a:a0:16:25:
         27:11:02:b1:95:16:1c:86:f5:53:99:70:0f:33:c0:a5:1c:37:
         51:60:96:43:b3:34:82:da:fa:71:d3:d4:d0:c6:41:d9:3b:97:
         6a:19:81:a3:7a:f6:3b:bd:d8:7a:83:73:03:7b:09:8a:83:44:
         47:48:cb:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX2DdkJAFHr5IdaTwYhf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTU3ODI0YzYzOGM3MThhMDdiNTM1ZTBkODI0Y2IyNGFm
YzA3MGMwHhcNMjUwODIzMTAwMDMxWhcNMjUwODI0MTAwMDMxWjAzMTEwLwYDVQQD
EyhhNjMwOTcyODI4NWYxZDI2NGY5MjcyMjM4ZDM2YzI1YTkzMWQyMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ut8CHXikGQ6AoIreWCOY03CPY0s
awq7DP3ZyrRARV8mV07iKtG7OT6Jq6R7FuoXNL6rrIMm4lizdCaZztM52hbzdx/E
BDsPzqbaSB8JZC6We+VhgfT1QCDn7xapFxvGF3FxhPfujdnFeEq/GUYUJR09BXhf
/4t8A+mKOInmLKXtydhOKrQuFJPHmIKOLQC8kq7ReQ8m7lYC05Tl/QMFvYh0nLkG
QJaOtRfZDUkdvcNKU8blfF7HP9jKHk1aTNvedO650UpXE7Tasm4JsziKlgC6Hxxs
igNw1tuP2XBoMwH1Ww+s01ouiDU+/zeujf1EZd4quyElqHSm9IoMTJtZIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYwlygoXx0mT5JyI402wlqTHSHMMB8GA1UdIwQY
MBaAFB0VeCTGOMcYoHtTXg2CTLJK/AcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTct
ZTU3NDQwMjYwYmUwLzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTctZTU3NDQwMjYwYmUw
LzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAllMAuu
Veu1FNFrcKPnhArwzHaOhdakENin5u6QINaUhCKVSc79dN7c8FN+HMLyJNeyMVsr
XpO2le7Wgz7S2g8WNddGugP2MknQa20wfovFkt6hh6NoSImC4Eutmscl8YCoWpG0
G7+nmU2aoViIGyvBaVaOeJjnC2ZyVqN1q8n2AiLEcKcXomTjqnpGSvGQ7WS3Qu52
UIHLwdlX4wicaHX2Eaab0FjLTFlsHH7uG6s7NrlKfxKgA1swuOs1mjb+0DSaoBYl
JxECsZUWHIb1U5lwDzPApRw3UWCWQ7M0gtr6cdPU0MZB2TuXahmBo3r2O73YeoNz
A3sJioNER0jL7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:14 2025 by rpki-client