Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
File:                     HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json)
Hash identifier:          lwYC4CF4xWqEAiWNlCoB6mGUFLebYl5ZFUkupLzJYG0=
Subject key identifier:   66:AF:45:56:53:68:A9:B3:C1:2E:B0:40:C1:41:E9:1C:97:07:02:12
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Certificate issuer:       /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial:       0198D4E08C1849F3C45A4CEDCE4467AE60DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
Manifest number:          0FA2
Signing time:             Sat 23 Aug 2025 03:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:22 +0000
Files and hashes:         1: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: LZlUP2dxkvZXtIeFOkfiYDcEviJvlsxt2SPvvcRvgJk=)
                          2: V9AZTNgU1d002QfKUotGNDSDtvk.roa (hash: x3l+fuQjKQuMTqxTAI/mH6BtVLnUzYs7euSSf0MTbRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:8c:18:49:f3:c4:5a:4c:ed:ce:44:67:ae:60:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
        Validity
            Not Before: Aug 23 03:02:22 2025 GMT
            Not After : Aug 24 03:02:22 2025 GMT
        Subject: CN=66af45565368a9b3c12eb040c141e91c97070212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:76:8d:9e:d0:1e:76:87:98:98:5e:a3:03:
                    da:65:f6:41:b2:89:55:5d:cf:45:e1:4d:99:24:8b:
                    9a:ef:13:1a:ed:e6:ff:af:3b:ec:61:86:50:e7:b3:
                    de:a0:2d:c3:98:73:82:c3:2b:75:63:73:b4:1b:13:
                    90:f1:3c:1e:b3:9b:47:98:98:a1:8c:b6:b0:41:9d:
                    66:36:47:8c:67:87:f8:6a:cb:27:42:72:e0:58:4a:
                    91:8e:dd:7a:d6:fe:11:0a:1e:5b:31:25:c7:3a:5c:
                    28:4c:cb:af:b9:f8:33:6f:32:2e:9e:c7:99:e6:35:
                    a3:9b:bd:13:31:90:b3:fc:be:d8:eb:5c:94:7d:79:
                    b6:e0:66:c2:2c:33:4e:62:6c:95:5d:db:7f:67:97:
                    0e:d5:fa:33:24:bf:98:0f:95:ba:24:46:89:7d:d2:
                    54:81:02:a5:b4:4e:8a:5f:f3:02:7d:c7:7d:23:3b:
                    db:af:9a:55:6b:af:ee:3a:95:59:97:36:6b:a9:4c:
                    df:99:90:0c:5f:fa:2b:aa:35:59:1d:f2:b9:89:76:
                    7d:c9:bb:ab:34:60:0c:7c:36:9e:cb:31:f4:bc:22:
                    ce:cc:e2:29:05:c0:2d:88:63:6f:1d:bb:30:7c:c7:
                    cc:ac:5f:9c:4a:29:d3:61:df:3b:21:dc:6f:36:c0:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:45:56:53:68:A9:B3:C1:2E:B0:40:C1:41:E9:1C:97:07:02:12
            X509v3 Authority Key Identifier:
                keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:86:4b:af:b1:46:08:07:ad:4d:21:63:fd:3e:00:c8:a1:1a:
         0a:4f:c2:9f:1a:9e:72:5d:f9:6b:a3:1b:f7:37:2a:bc:45:7d:
         c2:87:3d:54:0b:a8:8a:5c:92:fe:d6:2d:a2:bd:62:2b:d7:26:
         03:74:5c:e2:db:f5:e7:e4:a5:ab:ca:2c:c1:dc:65:56:6e:7d:
         5d:16:21:5c:ee:1c:ad:51:57:37:29:4f:bf:23:b1:bb:a7:d4:
         54:89:76:dd:3d:12:d2:2c:a6:28:ed:22:ad:d0:c9:83:6d:78:
         2a:3e:71:4a:e1:32:ac:60:0c:a2:5f:17:d8:22:b5:88:2a:d5:
         ca:99:bc:15:12:88:31:90:41:65:e0:f7:d2:c8:46:48:4f:1c:
         3a:51:ca:4b:69:28:55:0c:d1:cd:c7:98:8c:f5:fa:df:d5:4b:
         29:9c:00:0b:0c:ee:72:a9:5e:34:6b:3f:d4:b1:26:7e:3a:a1:
         2f:b1:dc:00:32:f5:81:a8:f8:26:75:07:c9:46:bb:77:ef:cc:
         12:80:41:05:5f:f6:c1:39:55:15:09:23:12:70:36:4f:d0:82:
         3b:d9:6f:64:64:55:09:92:bb:46:79:2a:21:15:fc:3f:5d:ea:
         50:ef:b1:83:84:38:fa:c8:f4:1b:0d:9a:87:8f:4f:a9:1e:db:
         f7:44:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:42 2025 by rpki-client