Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File:                     HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier:          KABFqrraziNEzskOIzZDn1XeDFWCxTPpFXiMFgUkZHo=
Subject key identifier:   51:06:91:55:06:76:F2:7F:3D:B1:3D:0D:A3:D2:31:ED:4C:1A:6B:79
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       0198D583BAD72DA6A4C5E8AB9991F0C5A88F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number:          166F
Signing time:             Sat 23 Aug 2025 06:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:36 +0000
Files and hashes:         1: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=)
                          2: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=)
                          3: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=)
                          4: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=)
                          5: 7NecV3hk_50oLBFkJbK3vteD-qA.roa (hash: esVUDfxWLVtx2sOyGs4iIs+SNwohNxbWk7iaAi9T/1Y=)
                          6: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: p50J3wW43ZomQsvAuehU9CVUlJnIoVNRnyc1RQmJncc=)
                          7: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=)
                          8: JwHvefszPoEqXfXjN6aWL4Ax5QE.roa (hash: tOwo5EJOcFmy7q/ovWJ3+7adXLxoW/KeV3/pI4z5mKY=)
                          9: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=)
                          10: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=)
                          11: SEfj_2e1WkHSt8IztlPvuRP2HcA.roa (hash: alTNtLsUWwlBiGWYk6Ir/vCTwpBwsbSNpiqs5xpsAUQ=)
                          12: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=)
                          13: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=)
                          14: jhzB3ouu7eGFu6kVywcyzMtWs14.roa (hash: 7ZiZaqq6we6E8f2G4rGHZ2hDk0lAG3K7IdZ3KOrq/pc=)
                          15: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=)
                          16: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=)
                          17: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=)
                          18: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ba:d7:2d:a6:a4:c5:e8:ab:99:91:f0:c5:a8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Aug 23 06:00:36 2025 GMT
            Not After : Aug 24 06:00:36 2025 GMT
        Subject: CN=510691550676f27f3db13d0da3d231ed4c1a6b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:5f:d6:60:a6:66:f4:e0:dd:85:9f:30:4c:
                    37:aa:56:13:aa:e7:66:15:f5:8e:2f:8d:33:ef:c8:
                    66:a9:e5:ef:d2:b4:73:d0:28:42:b7:5f:f3:df:01:
                    e2:1c:56:df:9d:43:d8:dc:b7:21:82:9b:51:90:cc:
                    df:56:64:a3:37:39:39:c7:c0:f3:79:19:79:63:2c:
                    78:e2:94:28:f6:24:13:ca:ac:54:41:30:84:6c:02:
                    05:3e:1d:3d:92:7d:e5:7c:39:c9:84:4b:b6:6e:fd:
                    bb:d9:49:49:a0:3d:80:40:15:0c:48:de:87:1b:57:
                    2a:9f:e4:7c:a5:55:76:35:2c:fa:ee:d0:51:16:76:
                    c2:c7:2d:6c:77:f5:ee:56:6f:54:b7:ca:32:c9:e2:
                    7b:6a:0a:6a:f4:5b:26:e5:e1:06:38:49:10:a9:62:
                    e5:8c:f4:cd:6f:88:ae:df:2b:17:a8:86:be:c7:ed:
                    a1:71:3d:8b:79:cb:c4:bd:41:d9:3e:6c:de:82:2d:
                    0b:6b:16:80:d5:1f:fc:04:44:4e:85:81:86:d7:33:
                    7a:b1:28:43:9f:76:e8:a0:ef:dc:93:41:90:8a:e3:
                    50:22:83:99:f3:67:6d:9d:9a:d8:c3:6a:8b:41:94:
                    64:b3:2c:44:8f:cc:8e:22:a9:98:ae:73:a1:0c:c2:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:91:55:06:76:F2:7F:3D:B1:3D:0D:A3:D2:31:ED:4C:1A:6B:79
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:22:0b:bd:c7:f3:9b:e8:47:89:9c:21:ae:ff:ea:05:f0:07:
         7a:60:b2:01:ed:08:1e:9c:9f:3a:73:1f:76:b9:7a:7a:78:cc:
         46:39:9a:01:6b:03:1d:a3:4d:0b:14:1c:89:f5:db:8f:92:bb:
         5c:08:9c:42:50:b5:44:0f:ae:25:b7:ed:c6:1c:22:f5:ba:fb:
         fd:d4:38:46:5d:6b:6f:be:5f:49:24:85:02:ff:85:3b:f1:fa:
         b0:32:6a:46:6e:e2:4a:bc:3d:bc:b4:1c:a8:b6:55:ed:af:b6:
         97:f8:c9:24:85:d1:4d:74:98:42:fd:f3:07:96:4e:fc:3b:c8:
         71:12:b2:54:d7:e9:0a:1e:6f:70:3e:5a:6f:ab:ee:22:19:c3:
         e5:f8:b4:8f:f6:9e:fc:b0:b8:fe:49:b0:8c:7f:7c:cc:35:08:
         13:06:56:60:d3:ce:23:4a:17:9f:ab:1f:99:29:66:65:f7:e0:
         88:41:35:38:53:6f:88:cc:6e:62:bb:2b:9b:f1:fe:51:77:24:
         d6:46:46:b8:89:1a:4a:f9:b7:f2:5d:3e:ee:03:18:5e:d3:1e:
         ae:74:00:8e:fa:64:60:ee:d6:05:31:2a:32:73:7a:fc:0c:91:
         60:74:79:36:b9:ea:38:90:74:11:08:b6:b0:19:b1:b7:62:3f:
         c8:c8:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:51 2025 by rpki-client