Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File:                     H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier:          D5yEcvT8jj2nPxlqRGzLHt9Oy992bHYllore2EXEJtg=
Subject key identifier:   AD:14:80:8E:F9:4E:E8:2D:FC:91:B3:3C:11:42:CE:95:35:EA:06:45
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer:       /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial:       01984852C5A94E40B5F397940E8DB665CA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number:          0849
Signing time:             Sat 26 Jul 2025 20:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:40 +0000
Files and hashes:         1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: 8rTaRSfK7jsm12hhUIFAKoUvqxpg6t4XiydnIdibVBk=)
                          2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:c5:a9:4e:40:b5:f3:97:94:0e:8d:b6:65:ca:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
        Validity
            Not Before: Jul 26 20:00:40 2025 GMT
            Not After : Jul 27 20:00:40 2025 GMT
        Subject: CN=ad14808ef94ee82dfc91b33c1142ce9535ea0645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:d6:22:99:7e:6b:e8:fa:28:c1:3b:ef:ae:
                    c1:f5:ec:48:ba:15:ef:a9:c6:39:6d:58:b4:d5:9d:
                    84:a0:08:7a:96:c8:79:27:5a:d2:30:8d:3d:8f:52:
                    c3:b7:5e:cd:72:08:5a:e1:a3:5a:2b:59:96:65:3b:
                    c8:23:38:5a:47:54:d4:d3:72:4b:c4:98:47:aa:95:
                    4a:d0:46:07:df:50:42:eb:45:94:47:47:22:ab:41:
                    0f:8d:3f:e4:43:85:5c:59:85:27:15:ec:30:26:a7:
                    27:c1:88:3b:d6:91:fd:99:f6:c1:8e:23:97:b1:da:
                    50:08:78:4a:da:b9:45:ba:4d:b9:db:74:fe:83:5f:
                    eb:07:df:b4:46:84:bc:ff:38:14:ff:c0:ef:dd:33:
                    38:4f:96:57:e2:af:fa:fd:a3:fb:05:53:f3:28:5b:
                    99:90:ba:e2:c9:14:31:fe:f2:d3:be:82:d2:a7:0d:
                    d4:fe:68:91:cb:7e:9c:64:6c:49:f6:54:95:8e:3c:
                    ca:d0:cb:aa:e3:b6:8b:8a:d7:27:19:07:3d:7b:b5:
                    1e:8d:05:3a:2e:51:f0:4c:0e:9d:52:f8:c9:02:71:
                    bb:9a:2d:4f:b4:87:84:ee:d6:54:a5:ea:7d:bf:e1:
                    92:46:03:0e:96:9b:63:e1:c7:69:5f:ae:15:ad:36:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:14:80:8E:F9:4E:E8:2D:FC:91:B3:3C:11:42:CE:95:35:EA:06:45
            X509v3 Authority Key Identifier:
                keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:af:f8:2d:60:17:33:ad:df:ef:2c:3b:4f:82:a0:e8:9a:
         73:2c:ef:03:15:f2:ed:59:5e:27:8a:d3:66:f8:ca:06:8f:83:
         14:f9:37:ab:d3:c2:c4:8c:48:e4:6c:ad:0d:4c:bf:1b:c1:75:
         42:70:07:12:f9:b6:a5:ad:7a:a3:0c:78:6e:04:a7:3d:a6:21:
         3f:fc:fe:22:cc:42:77:a6:0f:e3:1c:84:c0:2b:33:07:87:0d:
         12:5f:36:23:e6:e8:3c:05:cf:82:15:d4:04:9b:35:64:24:29:
         d4:b5:1c:29:7d:7e:19:88:09:87:bd:35:d0:0d:e6:e2:4d:fa:
         d6:67:37:ef:3d:60:4f:24:e9:a0:24:45:81:da:64:71:c5:df:
         93:2b:9e:54:45:9b:db:33:86:e4:c5:3c:b0:96:17:2f:86:3b:
         3c:50:72:21:c8:37:c1:bb:3e:03:ba:65:3f:cd:72:be:a4:30:
         4a:51:28:4a:41:48:69:2a:c9:d4:79:b3:67:9e:e5:00:b7:77:
         01:d8:bf:22:35:25:67:7d:49:5c:ac:76:89:6a:cd:fa:b7:d8:
         18:3c:8b:af:85:03:7c:05:da:07:2b:54:b7:e3:e4:9c:ee:e4:
         1a:83:dd:55:4e:db:d8:ef:cc:59:9b:69:a8:81:3d:8d:29:8a:
         8c:40:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:18:19 2025 by rpki-client