Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          Zg2O5M1A9iNnZz2R8e6oP5Fy8nQCB3ADedXAymHCJ2s=
Subject key identifier:   A8:D8:BC:38:7B:1A:C0:DF:4F:49:FC:93:5B:2D:61:88:89:32:AC:33
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       019849D3AF267320A77225E86871451D1B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 03:01:06 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:06 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:06 +0000
Files and hashes:         1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=)
                          2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=)
                          3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=)
                          4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=)
                          5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: O/8znB7iBpJJ9AEKWhfuHY/QugKI05iOyhnUFRHBioI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:af:26:73:20:a7:72:25:e8:68:71:45:1d:1b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: Jul 27 03:01:06 2025 GMT
            Not After : Jul 28 03:01:06 2025 GMT
        Subject: CN=a8d8bc387b1ac0df4f49fc935b2d61888932ac33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:56:52:ba:13:3f:8a:b8:5a:89:fa:c8:c9:
                    d5:0c:f5:66:68:59:6d:0e:29:28:89:fd:84:7b:34:
                    df:6c:f0:f6:5f:c8:44:56:00:23:36:43:e2:6c:6f:
                    8c:e6:52:62:fe:1c:25:53:a1:cf:57:b2:69:b9:e4:
                    6f:81:36:0d:20:55:b5:52:6c:7c:27:d1:0a:1d:90:
                    a0:60:e4:9c:2e:7e:39:f1:58:f6:72:a9:f8:ea:3a:
                    b3:fb:6d:d9:de:38:a2:c4:88:67:22:d0:1c:4b:e4:
                    4e:8d:98:18:75:6f:12:2a:db:76:78:7d:6d:d3:9f:
                    74:e6:c6:8a:54:51:6d:6d:f6:76:28:e4:54:f9:2a:
                    c9:b2:a2:34:4d:91:94:09:1e:2c:ed:34:53:0e:66:
                    9e:71:47:d4:95:63:de:74:62:d3:0c:6d:c8:93:98:
                    61:92:d9:f0:15:e4:2b:c3:f1:6a:83:74:80:48:22:
                    55:96:db:b7:10:9e:73:71:0d:58:72:5a:70:97:95:
                    eb:a1:57:99:6f:8d:78:92:9f:e3:d4:fe:51:f5:66:
                    d5:18:a7:95:dd:72:92:0b:97:3d:a7:d2:6d:5e:fd:
                    29:30:29:cf:bd:42:d9:71:b4:07:81:36:18:7d:48:
                    c8:a9:18:a6:7d:14:ec:15:49:5c:3e:60:f0:07:33:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:BC:38:7B:1A:C0:DF:4F:49:FC:93:5B:2D:61:88:89:32:AC:33
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:22:f1:e6:28:5a:24:14:c2:21:9e:ff:c6:8a:37:56:6e:50:
         19:c2:b8:d6:5f:69:8b:4e:66:39:0a:c5:eb:31:26:be:98:60:
         d0:c7:54:94:8b:e5:3b:4f:d6:34:e1:fe:e2:df:78:4b:f6:b7:
         26:aa:dd:05:6c:cd:e6:cb:95:78:4f:8c:80:ef:d6:f4:8f:2b:
         89:26:ea:70:71:dc:fe:4d:2b:3f:d0:0a:c5:85:e6:a7:43:62:
         18:e5:d8:ba:35:fd:8c:cd:53:bb:1b:23:01:ac:d0:1c:42:29:
         ff:68:55:36:92:5f:8a:7f:16:fd:07:85:2e:51:3b:71:74:01:
         e0:b8:c1:02:f7:93:8f:86:92:4b:60:5f:17:b3:b6:51:2f:ff:
         02:ca:6c:d0:fe:c3:56:58:a8:f9:a8:04:00:9c:5a:a2:d6:d4:
         ea:bb:f3:79:22:38:c1:36:11:19:58:c4:78:82:1a:62:77:91:
         88:7f:ff:86:b9:6e:29:2a:0e:28:08:d8:86:92:e9:8c:d3:6d:
         87:80:64:6e:19:3e:b6:7e:25:45:ba:55:44:59:7f:8e:23:12:
         56:e7:26:5e:42:56:fd:bf:57:2c:35:99:4d:b5:25:23:01:c3:
         3a:96:41:ab:b1:b5:04:24:ff:81:08:83:2b:52:73:98:1c:47:
         b0:5d:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:11 2025 by rpki-client