Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File:                     HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier:          MbxwbRLFY9zc+sKI5AnDiyaHU4bnWibpVQwQMNvQHHI=
Subject key identifier:   F8:76:4E:E5:FE:E3:42:C2:DA:D6:91:26:06:B5:08:04:53:6D:8C:E5
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer:       /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial:       0198439A1ADC50E5F113D96F296355F280CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number:          11F9
Signing time:             Fri 25 Jul 2025 22:00:29 +0000
Manifest this update:     Fri 25 Jul 2025 22:00:29 +0000
Manifest next update:     Sat 26 Jul 2025 22:00:29 +0000
Files and hashes:         1: 1ffKjQocjrQNsazj1CAi9JjVS5M.roa (hash: LGq8PY1XybDfBXT9FGzMq8PfJwuGWsOSqjxZ40jc9hQ=)
                          2: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=)
                          3: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: 9Xg/sqAmcM8ogN9kXBUwJ3FpC8mbd4bMYMhwui3con0=)
                          4: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=)
                          5: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=)
                          6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:9a:1a:dc:50:e5:f1:13:d9:6f:29:63:55:f2:80:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
        Validity
            Not Before: Jul 25 22:00:29 2025 GMT
            Not After : Jul 26 22:00:29 2025 GMT
        Subject: CN=f8764ee5fee342c2dad6912606b50804536d8ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:5a:a0:88:38:5c:b5:2a:28:2a:f2:66:a6:
                    d1:b5:08:7e:52:be:99:47:15:10:af:f9:39:1a:cd:
                    eb:b3:19:ea:5c:bb:ea:ee:34:0d:3c:fc:60:6f:87:
                    ad:1d:91:d8:8a:e7:a5:dc:47:59:51:86:46:17:c7:
                    de:38:45:8c:23:46:a8:2d:48:3d:8c:3b:1a:53:4f:
                    a2:0e:2a:67:87:ad:c7:62:54:da:73:cd:30:b6:1b:
                    94:4b:72:04:d3:07:6c:29:93:a1:b8:0c:13:db:e4:
                    8d:d7:ef:3c:1e:20:8f:5a:bc:b8:57:14:e6:40:86:
                    93:1d:f3:75:b7:69:d0:ea:ed:3d:bf:27:18:65:e9:
                    4c:5f:0f:1f:a0:9f:6c:ba:06:b4:ef:c1:12:c6:eb:
                    86:b9:d5:4e:21:f1:da:99:56:a6:9a:2b:30:a9:55:
                    9d:35:b6:f3:ec:1b:3f:ce:19:74:50:e7:78:f0:2f:
                    88:e0:c1:2c:3b:fe:ac:ac:c8:bc:28:3d:ca:1d:89:
                    49:64:4b:6f:f5:f0:e4:76:82:39:4b:90:37:59:54:
                    37:ac:20:f1:50:e8:00:91:a6:f6:37:b2:89:7c:29:
                    07:6a:bf:c4:68:0e:d8:5b:99:47:42:9f:5f:cf:7b:
                    23:1a:aa:dd:d7:3d:b8:52:c0:f8:7f:1a:34:ff:e5:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:4E:E5:FE:E3:42:C2:DA:D6:91:26:06:B5:08:04:53:6D:8C:E5
            X509v3 Authority Key Identifier:
                keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:45:f7:49:f0:bf:b2:ab:2b:50:b9:b3:36:2b:02:3d:1a:86:
         4f:78:14:f7:44:70:6a:4b:73:75:0a:8d:67:5d:46:8d:25:75:
         b5:f3:cc:21:9f:42:fe:be:4e:e0:d1:fb:79:21:9e:0d:27:7f:
         85:37:92:d3:19:09:cf:c2:5f:70:39:a8:1f:b7:fb:09:f6:71:
         1c:12:0c:59:3e:43:15:67:4b:fc:10:ab:8d:b3:80:c9:ed:84:
         8a:da:06:6e:60:76:a8:56:9c:83:2c:8c:97:02:4c:ac:85:b5:
         41:9d:f1:80:fd:6d:f5:1e:3b:a8:7d:4f:94:45:b9:08:81:c8:
         fe:fb:47:72:32:35:aa:8c:e1:f7:d5:78:ee:ab:1f:82:1b:25:
         49:f9:e2:57:92:2f:ba:7f:b3:b8:4c:11:dc:b1:60:97:4a:c5:
         3a:ff:19:c0:d9:47:72:2f:c5:fe:fe:9b:ea:32:2c:ff:c7:60:
         d6:a6:2e:4c:d9:7c:f7:35:39:0b:4f:69:a3:25:17:54:aa:fd:
         2b:85:4e:2e:41:a8:f1:6e:6b:1e:df:51:95:83:ec:81:fc:c1:
         95:2c:60:93:0d:8e:85:9a:b0:7c:52:41:2d:de:27:40:81:6b:
         eb:9d:d8:6d:c8:f8:c7:77:c0:d8:3b:37:ca:a1:a4:a1:53:a1:
         36:d0:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:35:57 2025 by rpki-client