Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          Gt1XJKjBl59zrX0ZbTapoD5QspuPgg6xKefPvIg40bU=
Subject key identifier:   07:66:59:BD:01:3C:54:80:04:6D:FE:88:5D:B1:AD:F8:B2:1F:C0:53
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       0199FBEC01EE62398C75336ECC17EC08BEB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          0127
Signing time:             Sun 19 Oct 2025 10:02:52 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:52 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:52 +0000
Files and hashes:         1: PW2sWVJ9FFBsjfGLnP2cm8afOE8.roa (hash: 6jybPU5tVXkCjx5dz+V7ya485HszpB6dPF9HmYkhSqM=)
                          2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: wHKl3j9B8fCGc0SuVEqh3Gj+CYLlqX/o5zrIB8IERrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:01:ee:62:39:8c:75:33:6e:cc:17:ec:08:be:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Oct 19 10:02:52 2025 GMT
            Not After : Oct 20 10:02:52 2025 GMT
        Subject: CN=076659bd013c5480046dfe885db1adf8b21fc053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:5e:b8:e3:5b:9d:54:6d:94:67:81:96:50:
                    db:af:ee:9f:80:29:09:2b:85:7e:07:a0:96:d1:be:
                    7b:74:de:e2:dd:c7:6a:5f:af:f7:59:5f:4c:f3:d2:
                    10:c4:45:58:25:be:db:ce:38:74:39:5d:1f:0b:3e:
                    05:78:85:a0:d5:46:8f:75:0d:37:ed:de:d9:da:41:
                    db:ef:ca:88:92:93:15:3c:48:03:fc:7b:7c:d2:e3:
                    c2:1f:75:7a:62:6c:8d:73:9f:c2:d0:8e:03:74:1f:
                    4a:43:d0:73:b7:c6:e8:4f:b9:e7:45:f9:45:32:bb:
                    1f:e3:52:a8:ad:15:fb:2b:f4:d6:02:a1:46:54:c3:
                    8b:a0:82:12:19:bc:e6:54:8c:ad:96:02:52:d0:8b:
                    fa:85:85:40:8b:e1:5d:ee:de:9d:87:81:7a:0e:b1:
                    ad:f5:70:31:08:b8:7e:56:d0:d0:f3:1f:c8:78:65:
                    a9:d2:e9:98:0f:4d:e7:4b:04:4f:37:d7:8e:74:3c:
                    82:09:86:73:5e:4a:fc:27:12:89:76:61:dc:a8:29:
                    48:1c:d2:71:a8:51:fd:f8:9a:6e:79:1d:74:a6:8a:
                    62:71:39:56:58:36:fe:a7:ca:0b:3a:2c:5a:b3:96:
                    39:84:e7:e4:ee:57:85:e7:26:ce:bc:ea:26:75:ab:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:66:59:BD:01:3C:54:80:04:6D:FE:88:5D:B1:AD:F8:B2:1F:C0:53
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:ab:2e:74:2f:81:3b:81:27:65:7d:75:bc:30:a7:81:1a:
         04:d9:b2:ac:88:66:5c:33:5f:c2:33:f1:a3:e0:0d:61:6f:77:
         40:f1:be:c5:3e:c4:87:fe:fb:fb:f9:f3:2d:09:40:e4:c8:91:
         01:ff:8e:51:56:4f:24:2f:17:90:ea:79:ef:17:5d:85:66:9f:
         a5:1c:e3:98:95:1b:d8:53:10:cd:72:c7:2b:e7:69:f8:9f:6e:
         ea:bc:d7:70:28:aa:ba:85:0d:6c:68:96:ad:db:da:24:a0:72:
         81:d7:f5:37:7c:7d:fb:53:45:4e:ae:1a:cf:1f:5d:74:2b:36:
         df:31:2a:95:b8:49:ab:7d:64:37:7e:55:e4:39:9d:d2:7b:37:
         20:a7:d0:3e:f4:90:4b:48:33:e5:bb:cd:96:ae:5f:8a:fd:43:
         14:0f:78:c8:fb:4a:8b:4e:3d:94:cb:4f:33:d1:9f:95:82:bf:
         a4:05:cc:39:53:9d:ca:f9:26:15:c5:e0:5d:88:c4:d5:2c:7a:
         fa:df:3f:4a:e0:a1:e4:13:0a:60:63:9a:c2:33:a6:05:a6:0a:
         90:b7:52:f7:d0:25:8e:f6:93:c5:20:1f:ac:4c:50:71:80:9c:
         eb:39:8f:a6:d5:5e:8a:a4:c2:60:2e:e9:14:c3:ea:e5:2e:ad:
         e5:5e:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:27 2025 by rpki-client