Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File:                     Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier:          liJasZ2/Kj7PtXxFCS33OlOS4LaRO+cKBYqfV87qC4A=
Subject key identifier:   87:B3:F8:F2:FC:3B:57:8D:96:5B:CE:0D:A4:EC:8B:4D:CB:87:3F:39
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer:       /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial:       0199C268E567052E20E48FD76B2C36740073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number:          02BA
Signing time:             Wed 08 Oct 2025 06:01:18 +0000
Manifest this update:     Wed 08 Oct 2025 06:01:18 +0000
Manifest next update:     Thu 09 Oct 2025 06:01:18 +0000
Files and hashes:         1: 3412M_EtpZn6LWYcU4f3oIK6xWg.roa (hash: 0CHNt2RVOJ0fr7rsHxwpKCupnQAvdSeftNGlZDlJ/Ag=)
                          2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: 2vi1NjMbJOZC+EBljC8q0zKO3mEouyCzjOGGeA2DRjw=)
                          3: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
                          4: g6q7q2HLmrL68PDSTTyRIYBNcJY.roa (hash: eTY6Q+eiIrBv9YE0+f1h1CVgS/oOAfzZcA42kSmU6+0=)
                          5: tVe9NnJO2Z95ZTZ1L61RChKUAa0.roa (hash: f4jqfRGm53uIrMSNBpcr7YiVL+9kyYDEvd948D1JBYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c2:68:e5:67:05:2e:20:e4:8f:d7:6b:2c:36:74:00:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
        Validity
            Not Before: Oct  8 06:01:18 2025 GMT
            Not After : Oct  9 06:01:18 2025 GMT
        Subject: CN=87b3f8f2fc3b578d965bce0da4ec8b4dcb873f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:1a:57:6b:0a:43:1c:41:b3:bd:7b:89:a3:
                    07:fb:71:b6:d8:59:d5:06:c9:1e:79:91:ca:b3:a3:
                    46:f1:f4:0b:d5:83:71:c9:ee:b0:c7:c8:a6:9b:cd:
                    d3:90:ef:40:8e:59:bf:ce:06:e7:39:d2:d4:07:04:
                    2b:2b:b8:58:e0:8b:3f:bf:ac:45:28:1e:7a:5c:f1:
                    b9:23:18:96:aa:1c:27:43:ea:ba:04:c2:71:71:0a:
                    fb:33:ea:00:62:ad:f0:1d:fe:98:d2:15:7e:c9:ef:
                    a0:07:7c:dc:3c:b7:4d:88:d7:41:d1:06:80:0d:c2:
                    1a:41:25:5c:06:39:a1:17:12:b9:0d:26:ff:47:9e:
                    c4:db:a6:f1:27:47:05:ea:65:92:e2:e0:de:e4:c2:
                    20:26:7e:92:c7:a2:75:8e:2f:31:ce:a1:51:5b:56:
                    dc:2e:74:40:51:13:c6:3f:9a:d0:4d:26:29:62:2c:
                    34:58:38:24:da:22:e3:ca:3a:72:3b:15:f4:48:c7:
                    e2:51:00:0e:1b:2b:2e:21:a8:5f:7d:b7:3f:e5:39:
                    75:ae:02:de:92:c9:b6:e3:e3:14:8d:5f:19:7e:66:
                    71:98:bf:87:b6:53:d9:de:d1:18:72:e0:3f:44:6e:
                    18:cb:27:a7:ba:4b:87:a6:fe:89:6d:56:07:b7:51:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:F8:F2:FC:3B:57:8D:96:5B:CE:0D:A4:EC:8B:4D:CB:87:3F:39
            X509v3 Authority Key Identifier:
                keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f2:d4:a9:f4:12:63:11:7b:88:fd:e3:66:58:b3:dc:d6:40:
         70:49:0b:60:be:7b:e7:7d:6f:ac:59:28:1e:6d:dc:30:19:ff:
         cb:ea:13:9a:21:d0:c1:58:5e:17:3f:02:51:e7:3f:fc:95:5f:
         b5:bf:26:36:be:c5:85:9f:60:f6:c3:cf:79:e2:33:81:ef:c2:
         93:db:9f:ed:18:de:e1:ac:ca:61:37:31:78:6f:cd:25:76:29:
         cb:e7:0e:87:ec:64:89:40:52:d3:b0:dc:f0:80:20:06:51:68:
         91:d1:4d:9f:e0:2d:3f:3f:94:b0:69:83:eb:c3:da:54:7a:d9:
         61:28:1f:a2:02:2f:a2:8f:e7:eb:49:5b:c6:27:b4:18:e5:f4:
         7a:8d:c4:f6:5c:be:d2:0c:a0:8b:5b:bb:14:fd:bc:6b:27:a8:
         30:2e:6d:60:1b:f8:1d:32:f9:fa:85:64:37:05:89:a7:84:3c:
         26:7e:cb:ba:eb:56:59:f7:a2:d9:c7:20:09:79:2f:74:88:e6:
         e0:28:89:61:71:32:de:e0:8a:27:4f:73:38:cc:4e:0d:b3:e9:
         af:65:99:4a:ba:a1:e5:88:1f:be:77:3a:72:5c:14:69:25:63:
         e4:e9:39:95:4e:64:58:e2:e7:76:26:22:5e:c9:09:9f:f3:18:
         49:0c:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:40:07 2025 by rpki-client