Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          toZZ9INr9P6zCgJ8s2b8W/GpSqEAMfw0MSNyxz6b71s=
Subject key identifier:   D7:48:8D:32:A6:0F:89:AE:05:1A:41:EB:1D:1F:54:90:16:75:4E:60
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       0198D7A975F7323B41AB5253606F4A3C4DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          149F
Signing time:             Sat 23 Aug 2025 16:01:03 +0000
Manifest this update:     Sat 23 Aug 2025 16:01:03 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:03 +0000
Files and hashes:         1: 04qRvXpisAlJju5q3bLKILC0LVE.roa (hash: SMJIcHhYL5Jlgz2ZLu2vhAU/XWZpT+AXSJE69y+L74Q=)
                          2: LES-4NZ2gVtnFASVcYj5bV4jo4M.roa (hash: 2G3ShlRTsn405STqDwUmkyh047FRwXPBWPG0OI/1t/0=)
                          3: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: Xc6WwidcHM9ZH7i/M4sIpvbg2TytX7wI9E3fyj+A3kM=)
                          4: iOBndMAtRYjdd4nI6OQWrWkGyaM.roa (hash: AELuuM2xWBmQmKZq9h3C0xBIjOiYeyVIInHWWjjNIic=)
                          5: s8MofJ3kjxOEIcJCRG7XRBu9KS8.roa (hash: Pq2tE0OOs+hTFPNcOAxmOBUj8Uu1ECYXKDV5TZ3hyck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:75:f7:32:3b:41:ab:52:53:60:6f:4a:3c:4d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Aug 23 16:01:03 2025 GMT
            Not After : Aug 24 16:01:03 2025 GMT
        Subject: CN=d7488d32a60f89ae051a41eb1d1f549016754e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:bb:5c:a6:8b:fa:54:18:d1:b3:4d:1d:fb:
                    80:3a:48:5c:69:9e:04:a0:4a:c5:ae:0b:24:4f:58:
                    65:9d:c5:95:cc:6a:6e:ab:78:75:af:ba:7e:98:9c:
                    ce:b7:46:1d:d4:f3:ee:f8:22:bb:53:5f:63:2b:84:
                    54:17:ea:95:b5:e2:ae:1d:54:bf:18:8f:42:25:9b:
                    8f:be:6d:34:2c:18:55:6b:92:1a:03:09:82:a5:9b:
                    f3:58:b9:08:7b:a5:8c:55:c5:69:fa:3d:81:5b:b1:
                    5a:97:c1:a6:84:74:fc:50:ce:a0:6f:e5:21:0d:93:
                    7c:4d:18:3b:43:e0:6b:a3:57:46:8f:d5:53:57:92:
                    f8:42:b5:11:2d:9d:a4:e9:5f:0a:f6:72:17:17:d4:
                    21:f5:9c:24:70:da:0e:13:47:7b:77:47:10:1f:72:
                    e9:ae:90:6b:de:82:56:39:55:56:6d:33:e7:8e:bb:
                    b6:b2:ec:34:3f:ec:f8:b1:0a:97:19:33:25:19:8c:
                    2c:37:35:11:2a:74:45:d9:62:03:0b:b2:ed:0c:f7:
                    89:5a:cc:b3:28:f8:e0:b5:22:5d:bd:70:56:14:53:
                    e7:3d:e9:07:b5:73:4d:44:0a:28:d1:82:95:1b:eb:
                    86:dc:3d:7d:1c:d9:ff:73:fe:c8:d1:d7:41:e2:fc:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:48:8D:32:A6:0F:89:AE:05:1A:41:EB:1D:1F:54:90:16:75:4E:60
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:07:38:a0:af:61:52:dd:cf:2f:58:20:e7:17:63:db:ef:
         1d:cc:29:3e:b1:7a:7e:be:ff:5b:e6:ae:0b:96:00:ef:72:ca:
         87:0f:5d:a6:ec:3c:8b:93:01:64:4b:33:43:6e:95:bb:14:f0:
         d6:c8:85:78:56:d9:45:fe:52:24:57:d3:48:7a:03:3b:af:1d:
         b6:e4:e2:91:78:dd:67:74:15:3c:a7:22:ef:26:76:98:aa:ee:
         05:8a:c1:b8:8c:1b:70:db:03:ef:8c:d5:90:d3:e1:f4:c4:a5:
         a8:bd:04:4c:47:b0:fb:0c:ba:87:cd:fc:9f:14:97:9a:0d:7e:
         5c:19:5d:d8:e6:18:1f:c2:a1:da:9b:99:b5:9d:2d:f2:f2:bd:
         fc:7a:fd:3a:c5:e6:f2:43:26:f5:e2:de:bd:fd:9b:d6:a5:a7:
         3c:3b:bb:f1:b3:30:00:fe:db:40:9a:e3:27:ab:93:60:25:bf:
         8c:58:e6:ac:1d:5e:58:af:2e:20:08:ac:c7:d8:4b:c6:a2:86:
         2a:97:a0:27:5e:f8:cc:0c:68:01:aa:99:85:7b:63:b0:84:16:
         90:83:b6:20:9e:0e:dd:a4:82:b7:d6:c0:3f:00:c9:71:ce:c4:
         21:a6:32:b8:4c:36:81:f3:1e:cb:a2:b8:01:d6:34:c7:aa:45:
         d6:4f:04:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:14:35 2025 by rpki-client