Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
File:                     hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json)
Hash identifier:          CGl5oJRXFVEKYQKAudB1BDJpMyA9wortD2NWHoCMJFM=
Subject key identifier:   53:73:F7:0B:50:B4:83:1B:60:C2:2D:0D:7D:41:D1:01:84:CF:95:60
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Certificate issuer:       /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial:       01983A60141DE8533B54B1FF19B72CC7FCBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
Manifest number:          1219
Signing time:             Thu 24 Jul 2025 03:00:31 +0000
Manifest this update:     Thu 24 Jul 2025 03:00:31 +0000
Manifest next update:     Fri 25 Jul 2025 03:00:31 +0000
Files and hashes:         1: 2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa (hash: qZ2AvjwfuN5RofSpAulT+zvOokvk9hdo9R5gBG6wVV8=)
                          2: EqxVNlycylxq6ufI9ng2ltdK1KM.roa (hash: b+kpuQsONfGhMD7qgwxZkbzW/4IKkzNE5v/myC4W0qY=)
                          3: MceCU4XPd0t7fhZxTxvxReumv1Q.roa (hash: 5TdX80iYVUkF2JY7Z9ZEOYjAnRhS8f4vWckTIPnEXdo=)
                          4: QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa (hash: GAa3KktDwm+TlBojUO7F6LnOQMJ0zxC/VLgeFCn23pI=)
                          5: V1rb0y6iu1TTOsIZQYPUPITNZdc.roa (hash: 4TLj9uQX2T55ymBodPD3FK/tTeE67Ngmw9g4awglSqU=)
                          6: Yjrt4HsK8wh6pJI81KOUWlnSEwg.roa (hash: XmuwPChIn1UvgMab/4oMWsQTN7bkJ51y5zUd1xVolH0=)
                          7: aaic0TQ08KDxqNotu0QjynGFp8k.roa (hash: y+rn4gyMmixGkyVVHgb8Zj+xOMFFm7BJm3FAMYf/M4M=)
                          8: cO2-NOuH2RV4sPciOdoA32su67Q.roa (hash: 9jc3V+7f0q1/c2NMI1faaA1MEEx9FCl4Vp7wxvOlyNU=)
                          9: euovkC8FzqkWizkBlJiIPuOidbU.roa (hash: NVQ3tcOFWDZctMMGjmKl2U9mGUa0NK9LjFLKrJC2iHM=)
                          10: gdNItxWNsM4KiGU05OylhksApCc.roa (hash: WiPvUqderzx9CicZMrqZIDKRBrczrFFx57GnwN1V0lI=)
                          11: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: +5KkunOE0rSpYeDoQKAhIi2kgbtT2BdGNi/AIW/8tzU=)
                          12: oMpZucICfk-8ZesIjg26RzH9z8Q.roa (hash: avfjdtl0mm9+afn2EBtC58m5oIaLp8/rBFhWdaYQq6o=)
                          13: zYeF4EOXDH9wga2Hl1a9xt43c_E.roa (hash: qprf7Kh7V9oLipnyoiqapOwT3fD2c8ij+cCs23g5KeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:60:14:1d:e8:53:3b:54:b1:ff:19:b7:2c:c7:fc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
        Validity
            Not Before: Jul 24 03:00:31 2025 GMT
            Not After : Jul 25 03:00:31 2025 GMT
        Subject: CN=5373f70b50b4831b60c22d0d7d41d10184cf9560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:25:fc:2e:8e:e0:4b:d6:0b:11:13:29:eb:
                    03:e0:ff:83:95:17:13:d0:32:2a:fa:42:3c:3c:31:
                    fc:3f:e5:15:bf:87:1a:65:51:6e:c6:16:08:7b:a3:
                    aa:9a:18:4d:d3:4b:86:4b:9d:5d:38:55:2c:9b:01:
                    51:ca:a2:bc:46:2a:46:63:0a:ca:86:5f:6e:4e:c2:
                    d9:d7:4e:df:6c:81:82:35:8a:8b:34:ed:12:55:85:
                    d0:97:3c:a2:14:60:dd:42:c2:31:23:38:25:10:22:
                    b3:a9:51:51:a9:d2:c0:ba:2e:a7:f3:e1:9b:36:13:
                    51:a1:00:52:6e:b8:1a:64:40:ff:33:1b:22:71:2f:
                    04:37:24:78:df:4c:38:9f:96:f8:07:70:95:58:7d:
                    ae:f9:a3:ef:9e:0c:4a:ef:81:8e:73:08:92:84:f9:
                    6a:be:72:32:f6:30:58:4e:61:45:cd:8d:59:74:1f:
                    9f:d5:b2:3d:29:7c:35:02:7a:e0:5b:85:15:fd:17:
                    02:4e:9e:c0:5b:ec:0f:18:7c:0e:89:d8:f3:80:7a:
                    b7:8e:0c:1a:c1:23:16:20:f3:ee:e4:e3:b8:9a:5e:
                    bb:ba:8f:c4:14:42:c7:6b:52:aa:f8:2b:2e:30:8a:
                    27:89:45:14:ab:f8:c8:6b:07:7f:12:77:0e:66:c7:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:73:F7:0B:50:B4:83:1B:60:C2:2D:0D:7D:41:D1:01:84:CF:95:60
            X509v3 Authority Key Identifier:
                keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:79:1e:1e:23:33:a4:2b:94:1c:3b:42:2d:e7:34:1e:ee:31:
         32:c8:16:87:84:46:12:dd:11:21:e7:e9:39:49:0f:4a:b2:39:
         ff:b7:d1:f6:45:b5:2d:ac:5a:ce:91:d3:91:ec:57:f4:c9:4d:
         0b:0f:0c:75:e4:13:a2:55:05:9b:cf:93:13:69:09:ae:47:c7:
         ca:77:5d:4b:9b:db:43:c5:44:7d:ae:4c:a4:75:bc:e1:e0:5e:
         5a:c6:90:70:c5:55:63:08:71:a9:86:b7:8f:c3:03:ed:9b:88:
         fc:d6:99:37:16:b9:cb:d6:42:da:51:b5:ab:b3:5a:99:0d:8d:
         5e:bb:2d:ab:32:36:9c:e2:00:52:3f:d7:5b:81:d4:7e:0d:54:
         2c:af:fd:a3:06:91:1b:78:3e:22:bf:28:bc:df:6c:c3:6b:59:
         40:21:0d:39:73:e3:44:32:34:31:20:a8:3d:af:41:38:71:86:
         69:4d:da:9d:14:7b:a1:c3:75:d6:6a:11:a0:cb:13:66:6f:94:
         af:38:d5:29:00:ad:ff:b6:fe:d2:65:2f:07:66:8a:c7:0e:d1:
         66:aa:41:c8:73:da:18:dc:6c:e7:0b:e3:fd:81:92:20:5f:1d:
         d5:5e:33:c0:3f:cd:ec:3a:aa:00:67:e2:2c:37:bc:34:e5:c9:
         3a:ed:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:15:10 2025 by rpki-client