Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File:                     haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier:          G9A0eYnOkPoi6MNtM+ltsUrnOoJXfQPHT1jiPb2+6wE=
Subject key identifier:   FF:10:3B:D3:87:F9:EE:BE:90:24:38:5B:3A:33:E5:78:DE:DE:36:8E
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer:       /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial:       0198D515C2A0B678EA62A0EE0A04ADC56F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number:          05CC
Signing time:             Sat 23 Aug 2025 04:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:29 +0000
Files and hashes:         1: GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa (hash: CFopZ6dmtVSvrmIdzz/ovM49rlPrGJS+jY6gLGQSqVo=)
                          2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: cRynB6phH0CXKtQbvoErjvP5ASTS4g0Eu8xLmVRp4AI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:c2:a0:b6:78:ea:62:a0:ee:0a:04:ad:c5:6f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
        Validity
            Not Before: Aug 23 04:00:29 2025 GMT
            Not After : Aug 24 04:00:29 2025 GMT
        Subject: CN=ff103bd387f9eebe9024385b3a33e578dede368e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:35:6f:36:fa:ea:9d:54:dc:1c:3a:65:eb:
                    fa:2b:ad:6d:7a:53:dc:d6:d9:06:d7:d7:51:4c:c4:
                    ea:df:f9:36:a0:17:57:e9:54:0f:05:6b:47:4a:2a:
                    10:b0:24:db:03:b8:56:cf:f8:ff:77:9b:50:79:ea:
                    fb:0a:b3:48:e1:e8:31:d7:cc:4a:b9:4b:43:9e:99:
                    41:20:bf:a0:8e:7d:c4:de:e1:0a:51:e7:b2:8d:e0:
                    6c:f5:16:7c:ce:ea:3f:af:d6:20:11:69:95:1c:b9:
                    d3:47:da:fd:30:4d:78:5b:26:33:07:bc:cc:6c:ed:
                    87:2f:ec:36:f3:5e:38:66:ae:6a:39:46:d1:88:7f:
                    2d:f0:db:75:e4:87:25:4e:19:df:c7:d9:ef:1c:16:
                    a1:09:d2:f6:71:a4:10:ef:bd:72:c1:49:4b:e0:34:
                    e9:ed:f1:5f:b7:5c:c5:80:00:4c:a5:d6:d8:d4:34:
                    a9:c4:45:65:4e:24:5b:10:97:db:8b:fb:07:e9:a4:
                    f4:2d:01:b2:44:ea:97:94:c5:6d:4f:24:41:71:32:
                    0a:c9:be:7c:7f:e0:c3:e0:d4:c2:f5:48:4e:c0:ae:
                    f5:5a:e5:1f:85:ea:92:93:0b:34:07:46:25:2d:b1:
                    c6:6d:2c:b8:7f:8d:80:24:4d:53:75:61:8b:a4:5e:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:3B:D3:87:F9:EE:BE:90:24:38:5B:3A:33:E5:78:DE:DE:36:8E
            X509v3 Authority Key Identifier:
                keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:79:31:b2:02:ad:62:46:90:01:05:62:9f:17:3b:6b:bd:
         01:d6:87:80:48:cb:47:d4:6b:0c:a2:e0:83:0c:06:2f:83:e6:
         b7:21:b1:69:94:2b:df:57:4a:2e:4a:86:23:96:0d:74:f1:04:
         6b:0e:1c:5d:73:da:83:c3:39:a5:35:30:12:ca:9f:74:1b:c8:
         75:23:32:9e:9b:dc:dc:d0:5d:05:db:ca:0c:c4:0b:39:e1:a1:
         6a:da:d9:64:63:02:a7:f3:13:1c:2f:f6:81:0c:11:27:b0:a8:
         b0:0a:5b:a0:85:38:5a:2d:f3:d9:22:0e:dd:b1:e1:c5:08:9d:
         bb:3d:63:98:82:c2:ff:09:de:61:c4:65:7d:ac:d0:b7:c8:45:
         bb:60:7f:bb:c4:0f:03:eb:6b:ea:dd:df:09:9b:d3:13:40:46:
         05:c2:0f:47:28:81:92:19:57:b7:6b:1f:2b:88:fd:8a:b7:14:
         0c:45:d3:98:95:f9:e9:a1:cb:d3:51:7c:89:cc:e3:67:bb:2a:
         42:b9:55:5d:eb:5a:f0:cf:6d:44:06:61:73:4e:78:ab:eb:39:
         19:9a:48:51:4e:24:8e:5d:d9:c9:2c:05:f4:d1:c6:ba:e0:76:
         93:43:a4:30:81:96:0a:b4:6d:d6:ae:b2:80:57:69:1d:74:92:
         43:86:2a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:04 2025 by rpki-client