Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File:                     hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier:          0XTYJOoz7QGlFBKnCFrx1uSTlALLds3zJ9LMANHxh+Y=
Subject key identifier:   E0:6C:F7:54:4F:3B:A5:F3:B1:6C:6B:B3:A1:AC:C9:C8:63:DA:00:4B
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer:       /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial:       0198D473B3B555A8DB6D65FFB6CEB8BF398A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number:          1657
Signing time:             Sat 23 Aug 2025 01:03:29 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:29 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:29 +0000
Files and hashes:         1: BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa (hash: DzzXp7ohKMicQourdcNR0kS22RTAEFQSJ/9tBCQrWcc=)
                          2: GzDT8w0Ptt9b8FyYostNarXRHiw.roa (hash: A6DYaaXmihlLD1PftD3BewQ0V2peW0M1Cn7b21EMdZs=)
                          3: NClupgqAUdwnU34Sum2MaF9qVA0.roa (hash: aDGxKYq2Y8XMXNzlWk4ySV396lfiu4EB4r+x7lrq+P8=)
                          4: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: JyT34a8CXQ/m0aJnnp1Y1WTlKq+EcPf5ZeZmR4GIQV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:b3:b5:55:a8:db:6d:65:ff:b6:ce:b8:bf:39:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
        Validity
            Not Before: Aug 23 01:03:29 2025 GMT
            Not After : Aug 24 01:03:29 2025 GMT
        Subject: CN=e06cf7544f3ba5f3b16c6bb3a1acc9c863da004b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:17:6b:31:d2:e5:2d:fc:0b:4c:97:dc:19:
                    47:e8:a8:07:39:a0:3c:21:44:bb:4f:ea:50:6f:68:
                    17:40:3b:37:06:47:90:64:6f:e9:28:bf:e4:32:65:
                    69:8d:d4:07:cd:a3:ed:df:e0:48:b9:5e:d9:6d:2d:
                    61:1f:7f:ec:81:d2:db:8c:eb:c4:88:9b:67:95:ac:
                    7b:ab:71:2f:53:a1:3a:27:2f:c8:28:c6:6e:1c:23:
                    97:4f:9a:d5:d8:4a:4e:4a:25:a3:89:22:cd:f5:1a:
                    75:c7:6d:f1:35:64:75:86:b8:c7:71:b0:30:7a:88:
                    2b:45:00:68:b3:8b:da:4b:10:b9:14:20:a6:d5:48:
                    3a:9f:2b:a1:b9:f4:17:c5:5a:a4:56:ab:f4:74:f7:
                    53:e0:e5:56:1f:a3:1e:b6:7f:4d:0a:2e:24:71:ac:
                    27:c4:f9:b9:b8:7b:60:59:bd:f0:5e:3e:08:61:70:
                    0b:95:99:7c:89:e4:08:1a:8b:b0:7c:6e:da:17:d1:
                    2e:0e:4e:2f:40:72:30:a1:87:d8:47:ab:b0:2b:7c:
                    e3:4c:2a:21:43:fe:8f:b0:fb:4a:f2:f2:18:62:ed:
                    d7:55:03:11:38:0e:0f:f6:e2:93:16:d5:7a:f8:68:
                    fb:a4:75:2d:11:c4:d9:ac:1f:5d:6d:cc:50:70:d2:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6C:F7:54:4F:3B:A5:F3:B1:6C:6B:B3:A1:AC:C9:C8:63:DA:00:4B
            X509v3 Authority Key Identifier:
                keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7b:ff:8d:95:69:1e:67:ce:b0:33:99:a2:aa:b7:7d:cd:72:
         9c:bf:47:28:d8:c6:f6:1d:fe:d3:cf:1c:47:74:93:96:68:8a:
         d7:37:31:66:8a:b5:71:2e:92:b1:e5:22:80:14:7c:7d:07:93:
         e4:8b:5b:83:f3:13:1f:49:80:3f:47:9b:0b:eb:c8:00:c3:27:
         67:01:02:54:86:48:2c:ed:20:5d:92:73:d9:2d:c2:8c:fb:3e:
         de:cc:c6:e0:2b:fb:2d:e5:66:8c:9e:a7:93:c8:7f:89:33:30:
         67:11:91:b9:ea:b2:c8:2f:e6:08:df:8a:67:d4:ed:66:a2:90:
         7f:f8:ce:50:7b:34:67:ac:aa:0b:3d:08:ba:69:fd:9a:5f:b5:
         57:d3:98:24:40:8d:f6:ff:70:33:06:ff:e0:dc:5c:df:e1:f4:
         39:aa:bb:2d:e1:a9:eb:ab:34:4c:24:68:6f:99:a2:e5:6a:95:
         32:ef:07:f9:ec:fe:05:13:82:ba:c7:66:db:b7:35:0d:aa:6c:
         fc:45:7d:1a:b9:f4:3c:42:d4:30:f3:d1:bf:13:7d:b7:af:7f:
         14:d6:6d:e8:c5:1e:49:3c:9b:a1:83:d1:9f:96:6e:3e:7f:96:
         a3:2e:7c:8e:71:4f:83:48:8c:cf:0b:24:1c:f3:1b:6a:bf:4b:
         ab:e0:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:17 2025 by rpki-client