Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          JcL+d5v4RLL6TnCZ49R+zt7NhKrCk9kAZW6d6oldoIw=
Subject key identifier:   41:00:DE:25:F4:13:FD:1F:8B:4D:B5:16:33:6E:69:72:27:23:F3:9A
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       01985BDA105F6DD59F0AF8F0F223DE621C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          0541
Signing time:             Wed 30 Jul 2025 15:01:14 +0000
Manifest this update:     Wed 30 Jul 2025 15:01:14 +0000
Manifest next update:     Thu 31 Jul 2025 15:01:14 +0000
Files and hashes:         1: 0tTqxzM13bt2v1m4PYXXMoQ5LXU.roa (hash: IIfKmkqir49Glk7zmei/2auCaiHojz2YnRsKfNazlQI=)
                          2: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: 1gyWwMMzgFMxM8EVLMydPN2M+ZCRqlSDUiBvDT/c/8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 15:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5b:da:10:5f:6d:d5:9f:0a:f8:f0:f2:23:de:62:1c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Jul 30 15:01:14 2025 GMT
            Not After : Jul 31 15:01:14 2025 GMT
        Subject: CN=4100de25f413fd1f8b4db516336e69722723f39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:8c:55:41:39:4c:e9:72:6c:04:c7:10:cf:
                    c8:83:77:81:5d:9f:40:da:fe:07:73:ad:89:19:f5:
                    6e:c0:e6:08:a7:6c:e3:a7:db:76:00:9a:8b:67:52:
                    46:a3:65:40:b8:05:f9:75:0c:1d:52:9a:7d:1a:f3:
                    b7:6c:a3:0b:e7:5d:0c:70:5e:85:68:c8:92:ab:e8:
                    90:1c:bc:97:ec:e1:ea:7c:9d:d7:89:93:5e:38:51:
                    51:bf:74:f7:76:52:e1:38:d6:f1:14:e5:0b:19:f5:
                    31:08:02:83:5c:2e:ae:2d:7f:88:e0:73:ba:e3:4a:
                    ec:d3:6d:31:4a:b7:54:98:01:0f:eb:77:a8:e9:ca:
                    26:f5:3a:f0:b7:77:da:69:e1:dd:75:20:eb:1d:84:
                    90:ed:46:fa:01:39:45:c8:52:e9:81:05:8e:b0:10:
                    fc:02:bc:5a:77:e7:f0:05:f0:de:85:c3:e2:88:d0:
                    9b:91:d1:8a:55:20:47:74:ba:68:ab:27:e8:1b:1f:
                    57:95:27:c7:55:e1:7b:b8:62:83:39:1a:c1:7d:42:
                    46:06:21:75:70:51:1f:49:48:99:f1:88:c6:48:ac:
                    32:59:53:71:9b:3c:03:79:5c:8b:c9:fc:4b:09:d0:
                    f7:c1:ae:0c:8e:22:19:1c:5e:c2:af:aa:a6:79:cd:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:00:DE:25:F4:13:FD:1F:8B:4D:B5:16:33:6E:69:72:27:23:F3:9A
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:df:e2:80:7a:39:84:15:f6:aa:ba:15:a5:54:07:4e:31:
         f7:38:87:42:de:32:fc:0b:3c:0a:90:11:97:4f:9d:62:4a:fb:
         16:99:e2:85:1d:cd:4b:2d:77:fe:68:1b:30:b1:f4:6c:bb:21:
         b2:db:45:a9:2e:8f:b5:e4:11:37:c8:38:fa:b4:3e:18:88:1e:
         e4:ee:f7:84:b2:a3:7c:59:f2:b1:28:19:27:8a:ec:04:1e:6c:
         1c:d8:7f:75:df:e1:ff:89:69:3b:31:c7:9d:92:48:5a:88:26:
         3a:e9:79:61:84:09:ab:a0:7e:1c:de:23:f9:ce:53:96:eb:2c:
         25:de:8a:d4:7f:13:98:7f:79:e7:95:50:56:7c:1a:23:97:63:
         b0:46:0f:16:80:b7:1d:04:49:3c:4c:57:f6:e8:4c:6f:2c:d9:
         97:19:1f:83:27:40:c2:23:f0:82:d0:be:a5:6f:c2:a4:64:22:
         42:54:65:90:f2:8a:56:b4:10:ef:fd:1e:88:1c:16:6b:34:4d:
         9c:8d:9e:bb:a4:5c:50:ba:69:6e:b4:74:2e:55:69:9e:7d:9f:
         3d:83:3d:3c:7e:0c:74:e5:f5:da:bb:c6:46:ff:ea:52:29:59:
         16:cc:9e:9e:1e:90:0e:8c:6a:76:3c:93:f7:e8:37:14:43:15:
         65:65:4b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhb2hBfbdWfCvjw8iPeYhx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDM0NTM5NTU4NDY3NzNiNTI1NmU0Mjc5YTAzZDVhM2Iy
YjU5NjMwHhcNMjUwNzMwMTUwMTE0WhcNMjUwNzMxMTUwMTE0WjAzMTEwLwYDVQQD
Eyg0MTAwZGUyNWY0MTNmZDFmOGI0ZGI1MTYzMzZlNjk3MjI3MjNmMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzKMVUE5TOlybATHEM/Ig3eBXZ9A
2v4Hc62JGfVuwOYIp2zjp9t2AJqLZ1JGo2VAuAX5dQwdUpp9GvO3bKML510McF6F
aMiSq+iQHLyX7OHqfJ3XiZNeOFFRv3T3dlLhONbxFOULGfUxCAKDXC6uLX+I4HO6
40rs020xSrdUmAEP63eo6com9Trwt3faaeHddSDrHYSQ7Ub6ATlFyFLpgQWOsBD8
Arxad+fwBfDehcPiiNCbkdGKVSBHdLpoqyfoGx9XlSfHVeF7uGKDORrBfUJGBiF1
cFEfSUiZ8YjGSKwyWVNxmzwDeVyLyfxLCdD3wa4MjiIZHF7Cr6qmec0ENQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEA3iX0E/0fi021FjNuaXInI/OaMB8GA1UdIwQY
MBaAFB1DRTlVhGdztSVuQnmgPVo7K1ljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81OTE0YWYtM2FiOC00MTgyLWE4YWIt
YzJjOThkMmI2YTY1LzEvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81OTE0YWYtM2FiOC00MTgyLWE4YWItYzJjOThkMmI2YTY1
LzEvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9Lf4oB6
OYQV9qq6FaVUB04x9ziHQt4y/As8CpARl0+dYkr7FpnihR3NSy13/mgbMLH0bLsh
sttFqS6PteQRN8g4+rQ+GIge5O73hLKjfFnysSgZJ4rsBB5sHNh/dd/h/4lpOzHH
nZJIWogmOul5YYQJq6B+HN4j+c5TlussJd6K1H8TmH9555VQVnwaI5djsEYPFoC3
HQRJPExX9uhMbyzZlxkfgydAwiPwgtC+pW/CpGQiQlRlkPKKVrQQ7/0eiBwWazRN
nI2eu6RcULppbrR0LlVpnn2fPYM9PH4MdOX12rvGRv/qUilZFsyenh6QDoxqdjyT
9+g3FEMVZWVLrw==
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:09:07 2025 by rpki-client