Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
File:                     qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json)
Hash identifier:          HTBv3NWl/VqOFPI7zI7wVVG9vZqGosbVWFp8m9nvhOA=
Subject key identifier:   DA:05:D5:CC:BC:96:29:12:8D:93:B9:CE:4A:54:9F:92:D4:80:B9:02
Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
Certificate issuer:       /CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Certificate serial:       0198D5F14640E6178F088ECDDFFFE29B9184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
Manifest number:          07DD
Signing time:             Sat 23 Aug 2025 08:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:15 +0000
Files and hashes:         1: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: iWggV8GDc/uQ3jKZekgX38rYDNi7Lq+BlBGOshGzX4U=)
                          2: yHgH_lMUm4oFa_GnCsmAbIU1COM.roa (hash: MjR/P2+PrAk5Bu0tg2NHyXtBDLvOpshbkzdWh1K2WRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:46:40:e6:17:8f:08:8e:cd:df:ff:e2:9b:91:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5
        Validity
            Not Before: Aug 23 08:00:15 2025 GMT
            Not After : Aug 24 08:00:15 2025 GMT
        Subject: CN=da05d5ccbc9629128d93b9ce4a549f92d480b902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:ec:f6:9c:99:8f:7a:18:dd:fd:9a:53:d7:
                    7f:12:66:3e:ea:4c:6f:c8:37:a3:47:cf:10:1c:3c:
                    55:53:86:4a:15:17:4d:a8:8d:f5:3e:95:2b:26:3f:
                    f0:b5:b0:03:89:45:2e:b1:8c:8a:91:c7:fd:9c:d1:
                    78:e8:8e:85:92:86:c4:2f:09:79:c2:f2:27:9f:bd:
                    7e:ef:ba:67:db:32:93:38:f0:65:7a:5f:c4:00:05:
                    c5:81:18:6a:9e:8c:b2:32:40:23:bd:45:06:11:61:
                    fa:de:df:99:48:24:a4:23:80:d2:9c:58:ad:44:22:
                    34:b8:e0:6e:cf:ca:8c:1c:5d:d0:07:ff:77:df:63:
                    e6:e2:2a:97:b4:0d:73:e5:91:7c:6d:64:dd:5e:52:
                    6d:44:ca:53:6d:38:0f:9d:69:03:b2:a5:39:c9:07:
                    3b:1c:2a:ca:d4:7c:5c:1d:22:f3:e8:86:f6:a5:2e:
                    8c:04:1d:fe:af:fe:c6:19:98:05:d8:c3:fb:3f:e8:
                    dc:03:6d:85:3d:17:e6:bc:67:0e:85:7c:1e:a1:65:
                    7e:19:78:7a:2f:85:41:24:5b:8f:0c:a0:de:73:06:
                    01:6f:6e:30:69:30:f1:fe:c9:0a:37:27:45:c3:88:
                    3b:4a:7b:f9:bc:75:e6:1b:be:7a:03:aa:f4:c5:c4:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:05:D5:CC:BC:96:29:12:8D:93:B9:CE:4A:54:9F:92:D4:80:B9:02
            X509v3 Authority Key Identifier:
                keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:02:11:f5:30:a3:ba:77:7e:8b:7c:35:52:bf:db:d4:29:
         a8:6a:2e:5a:0c:d3:da:2e:2d:9f:01:8a:6d:09:7f:cd:88:d7:
         42:14:1f:4c:3a:79:19:1a:66:85:10:a6:49:6d:de:0e:dd:05:
         d8:2b:5e:21:e4:88:e5:d3:07:6f:77:03:a1:62:9e:85:36:5a:
         44:ff:14:dd:07:f9:45:5d:8f:39:d0:cd:f6:12:e8:20:91:b8:
         ee:b0:1c:a4:5f:e3:f0:fd:27:34:69:de:9d:ac:ce:21:09:da:
         7e:ed:8e:30:13:a4:5f:f1:dc:5f:93:65:41:40:60:ed:27:14:
         46:29:84:86:2f:19:95:1c:db:95:95:74:2f:1c:a9:19:d8:b7:
         3b:de:4f:48:45:8d:a6:5d:9c:82:62:5a:71:e2:36:5c:ce:6f:
         5e:e1:cd:7a:7a:be:57:a3:f0:62:a8:4f:bd:a3:76:fa:57:ff:
         6e:25:76:03:dd:ff:dc:d8:7b:68:2c:88:9e:b5:1e:6d:32:b5:
         76:e6:bb:e3:7e:1b:cb:95:fc:2d:c6:a3:8f:1b:10:75:ba:81:
         ab:11:d2:00:05:d6:4d:9c:f1:ca:aa:0d:51:0b:07:91:31:22:
         15:50:12:ed:5f:dd:6f:03:9c:eb:6d:2a:30:66:13:8a:92:db:
         c2:22:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:06 2025 by rpki-client