Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File:                     hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier:          3wiB+N+kSBqaqz2zW+XUtt24bqXbUykOwcvjpXpGHYw=
Subject key identifier:   63:2C:4D:AF:8C:E5:EC:C0:8E:F1:BB:97:5E:01:9C:24:C1:62:27:0A
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer:       /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial:       01983E05E6074CD37CBC6B8D1E19BE63D36D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number:          093F
Signing time:             Thu 24 Jul 2025 20:00:30 +0000
Manifest this update:     Thu 24 Jul 2025 20:00:30 +0000
Manifest next update:     Fri 25 Jul 2025 20:00:30 +0000
Files and hashes:         1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=)
                          2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=)
                          3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=)
                          4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: E/CLy7LMP9wC74w0KXeb7cPkPNlg+tjZXTpKuuyqOm8=)
                          5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 20:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:05:e6:07:4c:d3:7c:bc:6b:8d:1e:19:be:63:d3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
        Validity
            Not Before: Jul 24 20:00:30 2025 GMT
            Not After : Jul 25 20:00:30 2025 GMT
        Subject: CN=632c4daf8ce5ecc08ef1bb975e019c24c162270a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:e1:a2:3f:9d:50:fa:bf:9e:1b:c4:ea:4c:
                    d5:72:0a:f7:e9:ba:93:e0:4e:a2:7d:38:b0:23:ab:
                    73:a2:ea:32:2e:a8:0a:cd:9c:78:b4:b0:f4:f1:af:
                    b6:e8:66:ec:fb:55:90:6d:b4:d1:7f:31:38:f4:9d:
                    f3:69:b5:b2:bf:eb:52:4e:f9:75:99:a6:56:73:9b:
                    c0:76:bf:e8:96:7d:99:b5:48:4a:35:69:9e:b2:53:
                    80:23:7b:08:e4:5a:dd:1b:ec:4a:c9:e4:b7:e1:0b:
                    fa:e0:47:2f:cf:59:4a:b8:69:d3:26:44:6e:a0:c7:
                    c8:f8:f3:9c:f2:68:63:20:91:2a:db:10:85:5b:b1:
                    ca:7e:c0:23:5b:6d:3c:b9:2f:0d:34:b6:63:03:10:
                    7d:12:20:b5:f8:47:38:42:69:ea:85:ce:7e:72:d5:
                    d0:c3:b0:24:35:9c:23:52:db:db:5d:a7:0d:70:d3:
                    9e:d5:37:8e:15:e0:b5:b1:a1:de:f8:55:5a:94:fc:
                    35:8c:16:a8:31:2e:60:4b:36:71:f0:99:47:e4:63:
                    28:72:d8:ec:64:8f:41:92:40:81:81:71:87:f5:16:
                    71:74:70:8e:7a:7f:95:9c:dc:b6:81:c0:4c:21:ec:
                    02:0c:4c:f0:9c:96:ee:8a:37:1a:0b:a0:cb:e4:50:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2C:4D:AF:8C:E5:EC:C0:8E:F1:BB:97:5E:01:9C:24:C1:62:27:0A
            X509v3 Authority Key Identifier:
                keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1e:d8:b1:0b:20:4c:d5:70:98:18:74:af:f2:7d:59:a8:ff:
         80:ba:90:89:fd:12:30:21:d2:f0:63:07:86:ec:59:dd:26:b8:
         0f:b5:d3:7a:4e:d7:f3:1a:3c:b0:42:2d:b4:f3:b4:00:47:0a:
         09:da:bb:16:25:e2:19:00:84:b9:08:32:5f:9d:58:36:e3:f1:
         e8:89:83:9b:17:2f:48:81:3c:d3:d0:05:4c:82:4e:42:1d:b4:
         0f:5f:e2:0a:cc:1b:35:6f:e7:a5:37:a2:23:eb:7d:98:4d:d8:
         3d:8f:4b:ef:53:ab:6e:30:03:6b:56:48:f2:d7:b9:90:e8:1c:
         cd:eb:68:11:38:48:03:2c:a8:19:d0:d5:0b:e9:c1:41:20:fd:
         e6:23:f7:15:c5:8d:29:00:d6:49:a6:40:34:21:af:df:dd:70:
         e5:e8:3c:ab:c2:69:32:04:4f:46:69:8b:6f:81:6a:6b:86:f1:
         31:a3:ea:47:ac:b9:21:37:62:e1:84:24:b6:8b:c7:f6:4a:c9:
         e3:b1:ed:ab:d3:7f:ce:f5:03:99:b9:f3:a6:fc:2a:30:9e:f5:
         38:40:df:00:e1:52:8f:99:dc:05:20:83:13:00:b9:f1:ef:7d:
         d9:1a:ab:e9:76:5c:39:19:2f:aa:f2:75:11:dd:42:35:59:24:
         e4:12:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:37 2025 by rpki-client