Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          P7XelC/B4fh8LpR21g7B9D0yzrVj2maL3ZWEs3r0d4E=
Subject key identifier:   B5:B4:88:3B:46:01:D0:A7:93:7B:17:CA:23:A3:58:8C:CE:AC:C6:11
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       0198D54EAAA214ABC45D2EEC1C66D40E56BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0BF4
Signing time:             Sat 23 Aug 2025 05:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:39 +0000
Files and hashes:         1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
                          2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: kylV4dZmW/brf2hqVyVYEFrRVfoauXdm3DE+GNP0lJk=)
                          3: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
                          4: fTWM1zKEU10CvPHR7x8xLqGMmBk.roa (hash: SLdOjrmdsiTj6gBhRX9Fmq3urmuPys2J1yZIBUXb9kE=)
                          5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
                          6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
                          7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:aa:a2:14:ab:c4:5d:2e:ec:1c:66:d4:0e:56:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Aug 23 05:02:39 2025 GMT
            Not After : Aug 24 05:02:39 2025 GMT
        Subject: CN=b5b4883b4601d0a7937b17ca23a3588cceacc611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:e5:2d:39:33:1c:5b:ba:ca:05:00:37:56:
                    d6:3e:54:35:81:71:27:be:14:c0:cb:6e:c8:0a:86:
                    b1:e3:d4:52:23:54:5c:6f:e0:2d:f5:05:12:35:b5:
                    5d:1b:90:99:0a:56:62:2f:eb:b3:ac:c6:c2:f4:4c:
                    1f:76:ee:9f:45:04:29:b3:6c:34:23:0c:3b:36:a3:
                    9a:fa:cd:7d:1a:aa:bd:0f:0c:96:1d:dc:b4:69:4c:
                    ae:e3:32:85:0a:3a:9c:a0:b2:fa:4d:e6:26:dd:8b:
                    37:8e:3c:00:07:77:bf:21:b3:b3:b1:41:94:63:4a:
                    70:38:3d:b6:7e:0c:94:d4:c0:85:88:b3:98:3f:2b:
                    34:f4:97:10:59:f7:a0:af:06:b4:2f:3b:21:1b:83:
                    4a:ed:72:db:a3:42:5c:2c:cb:75:13:0d:e3:52:1d:
                    31:87:06:78:20:d3:7f:fa:0b:d3:68:94:bb:21:93:
                    4f:5b:b1:ea:7f:0a:b6:0b:f7:e0:c5:fe:35:96:64:
                    eb:62:aa:6b:83:6c:a6:ea:6a:8a:fa:27:c5:b9:5f:
                    85:a6:3a:ef:b0:b3:29:33:0d:72:da:43:46:ee:2c:
                    68:97:1f:fe:b5:70:89:70:b6:f3:63:73:64:b4:fc:
                    45:84:f3:76:28:ec:18:5f:58:24:45:b1:41:62:72:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B4:88:3B:46:01:D0:A7:93:7B:17:CA:23:A3:58:8C:CE:AC:C6:11
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e4:83:ef:78:82:20:88:59:ea:79:9a:3b:0e:8c:85:35:b0:
         b1:77:e5:4e:e0:bb:08:26:fd:56:ce:a1:b4:4f:82:b3:f6:fa:
         ff:4f:0e:b1:91:f3:2e:d4:d1:8c:94:0c:0d:9a:c9:65:44:c3:
         ee:9e:e6:df:71:9d:aa:0e:da:b5:84:d1:44:6d:bc:27:8d:b7:
         97:8a:de:b8:83:f5:29:6c:8c:8e:1c:fa:d2:6c:63:b9:49:49:
         14:09:04:a2:6f:15:ae:84:6f:b3:a4:48:f2:46:2b:3b:7c:ed:
         8c:99:51:57:b7:b7:aa:67:b7:5c:8e:4a:07:4b:66:46:48:3c:
         b2:ee:0d:47:05:cf:f6:c5:38:db:1e:14:1b:42:ad:db:58:c0:
         a1:e5:0a:7c:0b:00:d4:33:71:f3:bb:5b:95:34:ce:fd:96:bc:
         74:d1:2a:dc:46:2e:2e:cb:87:71:00:3d:5b:d2:e8:9a:c1:3a:
         07:ec:e3:dd:35:83:d3:95:80:1b:99:06:3c:d6:0b:58:1c:8b:
         a6:82:e3:80:0b:6a:51:fa:0e:9c:c7:82:37:1f:fb:eb:93:f9:
         8a:ec:9e:0e:89:18:99:c5:07:0b:6a:43:26:30:cc:9d:a3:0f:
         54:74:b0:43:74:26:4e:8b:02:fb:05:1b:1b:15:7e:f8:65:89:
         e4:33:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:15 2025 by rpki-client