Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          /R/NudJN/0XpwFkHfF68AROojoaognUVhN0lOSwMyOk=
Subject key identifier:   1F:F8:23:DD:AD:0A:9F:F2:04:89:50:26:71:67:27:78:A0:EF:95:0D
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       0198D5BC2CC91B3300D42A18F6DD633268A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:15 +0000
Files and hashes:         1: 0Ox66VfhpkksOxsQKvgplGDbF6A.roa (hash: 2hQepAwHuEvKh7LX4V/wopW78ujoteaNGMyduaqzBZo=)
                          2: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: Pwx49woI80NqKVPpvFcCv6WJJcWfgKxWhFyNKxDBWLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:2c:c9:1b:33:00:d4:2a:18:f6:dd:63:32:68:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Aug 23 07:02:15 2025 GMT
            Not After : Aug 24 07:02:15 2025 GMT
        Subject: CN=1ff823ddad0a9ff20489502671672778a0ef950d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:72:98:71:38:0f:d3:8a:9f:ac:08:bd:b9:
                    ae:78:91:ea:6d:2f:7d:eb:b9:b6:54:d9:9a:b8:61:
                    92:39:1e:5c:4b:0b:8c:42:81:09:71:5c:3b:13:f0:
                    d0:d0:49:9e:88:14:6b:09:f5:0c:87:62:44:2d:6c:
                    98:f3:3f:9f:37:98:a1:85:77:49:46:9c:2f:b5:79:
                    41:94:16:92:19:d3:8b:e2:8e:5a:bf:54:ca:60:30:
                    2c:84:c7:d5:36:8f:ee:85:31:26:9d:14:8e:96:e0:
                    c8:ae:5f:82:17:5c:ce:0f:29:ac:42:ce:82:0a:1f:
                    f8:b5:52:2f:eb:32:97:a9:e9:5c:10:56:64:bf:c4:
                    67:96:c5:89:ab:a8:d3:2c:ee:d7:2e:cd:61:f1:10:
                    9b:a8:32:77:7e:d2:38:56:fc:16:bf:96:5d:a4:ab:
                    8b:c0:01:b5:6f:32:21:1c:3c:a5:1c:57:4d:1c:fa:
                    4e:18:8f:52:5d:4d:4b:b0:06:f5:83:2f:0f:d5:a1:
                    8a:06:da:b3:8f:25:c3:0a:2e:ea:2c:c0:15:09:6f:
                    e8:21:87:4c:4c:5a:99:80:d0:96:e6:3b:bd:54:64:
                    2d:7c:ac:eb:d7:f5:06:f8:5a:ca:41:49:e3:7c:de:
                    ba:ca:d1:90:43:01:3a:44:d1:9a:c6:5f:9c:de:d6:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F8:23:DD:AD:0A:9F:F2:04:89:50:26:71:67:27:78:A0:EF:95:0D
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:48:c4:5d:40:52:ce:67:b8:40:f4:e2:ca:36:5b:64:95:
         df:db:2b:e4:c0:c0:48:a9:8e:72:52:a6:3c:da:06:11:c2:5d:
         14:7e:bb:da:19:69:51:07:b4:fd:17:db:76:a2:89:1c:80:92:
         c4:ce:f0:72:51:a5:de:32:a3:45:14:23:16:5a:06:db:57:0e:
         49:ca:3a:f2:70:21:d5:f0:60:9c:54:2e:3c:df:53:ba:13:39:
         e3:b7:c2:6c:89:e2:c6:30:f3:8b:2e:1d:81:14:a6:0a:d7:2a:
         f3:8f:c4:3f:82:8b:cb:97:33:65:f2:eb:dd:6c:cf:3c:30:ba:
         07:36:a8:16:d6:9e:66:fb:42:85:81:d2:1e:87:6b:50:82:67:
         8e:72:da:b8:51:33:eb:f1:5a:ce:23:f5:b6:4a:22:63:60:44:
         10:49:c3:04:7c:87:c0:ff:04:b0:c7:c3:e4:c0:df:f8:cb:be:
         59:43:ed:a2:67:35:a0:23:9c:47:08:63:4b:ba:cd:5d:d4:cd:
         89:e1:aa:e0:6a:4d:a6:a9:c2:3c:df:2a:d3:76:34:fe:f3:9b:
         2a:24:1a:9a:83:6e:5c:ce:f5:df:2d:ee:4f:38:a6:66:bf:7e:
         51:e9:bc:6d:58:b8:b7:90:e5:5f:11:ea:67:41:f4:5f:5f:aa:
         59:dd:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:22 2025 by rpki-client