Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          hyvO6X76dzGFrmW9QsjegMAqu2M9LGxTi6U7WUandKU=
Subject key identifier:   14:54:FE:C0:84:8C:66:23:2C:8A:12:65:55:76:83:F3:3F:5A:B8:24
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       01984BF887C23B7E86E77B773D73DE461628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          1456
Signing time:             Sun 27 Jul 2025 13:00:35 +0000
Manifest this update:     Sun 27 Jul 2025 13:00:35 +0000
Manifest next update:     Mon 28 Jul 2025 13:00:35 +0000
Files and hashes:         1: LES-4NZ2gVtnFASVcYj5bV4jo4M.roa (hash: 2G3ShlRTsn405STqDwUmkyh047FRwXPBWPG0OI/1t/0=)
                          2: S6pEjPdKiDCWT5YS10t21bo7p-Q.roa (hash: pTlwMPVuX2tODYiLJ6YhmWJdp6Y8iDisqjt0seyZtRU=)
                          3: SKBCllM8zLJEbYHJd_EV3itY7MY.roa (hash: Zfen1G7f+hqJM+l1P8PiztKtQe2yRYBq/nE3Qk55hCM=)
                          4: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: h+FKHNMfU/vcPTYZffQ1rIJw/4z50+Z3T2gFlBw16BQ=)
                          5: s8MofJ3kjxOEIcJCRG7XRBu9KS8.roa (hash: Pq2tE0OOs+hTFPNcOAxmOBUj8Uu1ECYXKDV5TZ3hyck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:f8:87:c2:3b:7e:86:e7:7b:77:3d:73:de:46:16:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Jul 27 13:00:35 2025 GMT
            Not After : Jul 28 13:00:35 2025 GMT
        Subject: CN=1454fec0848c66232c8a1265557683f33f5ab824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:b8:bd:14:0b:a5:eb:5d:09:5e:31:e7:3d:
                    dd:bb:c3:af:4c:cc:1c:96:7e:0a:14:ad:07:6b:c9:
                    26:aa:b0:07:6d:b2:61:9b:0b:eb:23:c6:b9:18:04:
                    ca:0f:6a:ad:33:71:f9:67:29:f7:9c:3c:63:09:d4:
                    ed:ec:e3:d0:f9:7a:61:6e:ef:3a:f9:17:02:fe:af:
                    e6:d6:9a:33:e4:46:ef:2f:da:d4:dc:c2:59:4f:43:
                    1f:e4:49:e9:4c:10:7e:34:eb:a5:6f:30:71:ed:7d:
                    51:95:df:55:11:ef:47:e2:c2:13:e1:0c:44:ce:dc:
                    23:2c:ff:aa:aa:ee:1c:80:4b:87:d0:78:d4:67:6a:
                    c4:86:49:1a:65:bc:a1:2e:11:6d:1e:0f:68:5c:8c:
                    ce:79:65:a9:e3:21:5d:47:c5:5b:14:7f:ec:94:36:
                    ae:60:60:3a:8f:6e:5a:d7:0e:fd:a1:86:f6:54:ae:
                    c2:e4:c5:4f:a7:c2:a3:67:2b:88:29:6d:22:fd:c1:
                    88:7b:34:68:81:13:f9:d3:e7:cf:28:e3:98:58:4d:
                    8d:57:66:a8:97:23:66:85:88:da:5c:b3:12:b5:a4:
                    8b:e7:5c:75:7d:1c:1a:05:82:ac:f3:6c:0b:57:f2:
                    1e:fc:18:8a:b8:eb:35:68:d3:26:2d:9d:cf:56:74:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:54:FE:C0:84:8C:66:23:2C:8A:12:65:55:76:83:F3:3F:5A:B8:24
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:86:4c:39:5f:91:25:dc:c9:5f:ba:26:d8:3f:26:ce:4b:77:
         95:1c:f5:5d:15:91:ed:10:a3:13:5b:2a:41:f5:96:af:ca:9b:
         85:20:82:e9:4e:c2:6d:34:02:be:1f:d5:02:b0:58:0c:6d:24:
         8e:a5:57:92:f0:f6:3f:84:0f:ae:00:f2:1a:4e:83:07:f9:6d:
         fd:af:89:cc:c6:46:42:13:56:b8:86:bf:f7:a4:4c:69:8f:5f:
         43:49:54:82:c9:43:e6:9d:f9:2b:71:68:39:43:9b:58:81:2d:
         42:66:7e:dc:55:da:fc:b8:fd:6a:1b:de:4c:18:97:66:8b:fd:
         55:81:eb:28:ce:5a:9a:4d:ad:e7:cc:46:be:90:7c:f8:b7:49:
         a7:74:74:98:a5:3a:7b:69:5c:ae:d5:f5:b5:62:18:02:dc:f1:
         28:1d:6e:cd:38:c8:4e:d8:0b:34:0f:7b:1d:7c:6d:13:50:a9:
         38:f9:a3:b9:1a:16:33:d9:01:ab:67:f4:b9:66:ef:27:4c:54:
         c4:44:25:e6:27:4d:ff:91:45:d6:ea:ec:7f:00:f7:49:b5:74:
         48:c1:f7:af:df:7b:c9:b5:4c:c2:1f:7d:26:8c:ee:31:54:12:
         4c:48:8d:bf:be:37:f7:93:9c:22:0b:35:44:09:3a:ad:65:e0:
         cb:e9:55:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhL+IfCO36G53t3PXPeRhYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2
ZTg5OTYwHhcNMjUwNzI3MTMwMDM1WhcNMjUwNzI4MTMwMDM1WjAzMTEwLwYDVQQD
EygxNDU0ZmVjMDg0OGM2NjIzMmM4YTEyNjU1NTc2ODNmMzNmNWFiODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYe4vRQLpetdCV4x5z3du8OvTMwc
ln4KFK0Ha8kmqrAHbbJhmwvrI8a5GATKD2qtM3H5Zyn3nDxjCdTt7OPQ+Xphbu86
+RcC/q/m1poz5EbvL9rU3MJZT0Mf5EnpTBB+NOulbzBx7X1Rld9VEe9H4sIT4QxE
ztwjLP+qqu4cgEuH0HjUZ2rEhkkaZbyhLhFtHg9oXIzOeWWp4yFdR8VbFH/slDau
YGA6j25a1w79oYb2VK7C5MVPp8KjZyuIKW0i/cGIezRogRP50+fPKOOYWE2NV2ao
lyNmhYjaXLMStaSL51x1fRwaBYKs82wLV/Ie/BiKuOs1aNMmLZ3PVnR1uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRU/sCEjGYjLIoSZVV2g/M/WrgkMB8GA1UdIwQY
MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt
ZjY2MzE3OTc3OTY4LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4
LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIZMOV+R
JdzJX7om2D8mzkt3lRz1XRWR7RCjE1sqQfWWr8qbhSCC6U7CbTQCvh/VArBYDG0k
jqVXkvD2P4QPrgDyGk6DB/lt/a+JzMZGQhNWuIa/96RMaY9fQ0lUgslD5p35K3Fo
OUObWIEtQmZ+3FXa/Lj9ahveTBiXZov9VYHrKM5amk2t58xGvpB8+LdJp3R0mKU6
e2lcrtX1tWIYAtzxKB1uzTjITtgLNA97HXxtE1CpOPmjuRoWM9kBq2f0uWbvJ0xU
xEQl5idN/5FF1ursfwD3SbV0SMH3r997ybVMwh99JozuMVQSTEiNv74395OcIgs1
RAk6rWXgy+lV+w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 19:59:17 2025 by rpki-client