Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File:                     hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier:          dlgrzXv+GYxQkH9627VoApBdO3osAherdsD7oENPcVM=
Subject key identifier:   74:66:B1:D8:D5:12:CA:B2:91:FA:94:80:56:3F:86:DD:EC:10:02:67
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer:       /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial:       01984664AD5353068934F7E8B7E34DAF77AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 11:00:59 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:59 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:59 +0000
Files and hashes:         1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=)
                          2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: jKC6Bdl4Rb6Nu4yLA65SLJy7v6nFO4FzQOQuiyoAfmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:ad:53:53:06:89:34:f7:e8:b7:e3:4d:af:77:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
        Validity
            Not Before: Jul 26 11:00:59 2025 GMT
            Not After : Jul 27 11:00:59 2025 GMT
        Subject: CN=7466b1d8d512cab291fa9480563f86ddec100267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:1a:66:bc:10:e7:b4:5f:c3:f2:1c:db:4a:
                    fc:50:17:1a:c2:29:89:d4:8a:04:a9:8b:5d:d8:19:
                    50:d3:db:54:cc:c5:92:3b:10:bc:11:de:21:96:6b:
                    30:b1:5e:d2:89:50:13:d0:27:ad:da:62:de:9a:a8:
                    3e:e6:88:07:96:59:28:d7:e1:12:3b:31:f4:5d:19:
                    06:1e:b2:21:36:70:86:8d:df:a2:c4:42:41:26:f6:
                    7e:2c:69:28:1a:36:ff:ea:b3:cc:13:d7:a9:c4:dc:
                    2f:18:f5:ea:b5:69:8f:2c:ac:51:69:e8:f6:e4:57:
                    b6:5d:94:a1:93:e3:51:5f:77:68:05:0a:64:31:63:
                    0b:97:cc:f2:69:32:f1:99:b7:7b:e1:16:82:c5:5b:
                    36:8d:a1:71:98:7a:d6:3a:2e:b2:71:6a:09:89:cb:
                    98:ca:06:52:58:d8:3f:4e:44:f0:4e:49:c6:a0:fa:
                    a8:c0:60:8e:bf:2f:c3:ba:96:41:1c:d4:e8:d2:71:
                    08:74:48:5d:3d:25:e7:ab:e0:8c:29:c5:f6:a2:c3:
                    b0:35:f9:87:d7:c1:a9:e0:6b:9f:17:79:90:3a:56:
                    fa:c2:d6:cf:85:d4:3d:70:4d:f4:4f:54:e7:12:84:
                    92:3b:75:c2:ca:20:ca:4e:68:75:6e:a2:d2:ce:ef:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:66:B1:D8:D5:12:CA:B2:91:FA:94:80:56:3F:86:DD:EC:10:02:67
            X509v3 Authority Key Identifier:
                keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:77:2d:81:07:ee:b2:bf:3a:9d:fc:8c:5c:51:4e:be:1f:
         33:1c:27:90:47:8d:34:14:e7:5f:27:09:58:9e:70:9f:1f:84:
         05:b3:07:c1:7e:78:33:dd:5b:f6:50:8d:d6:5c:7d:18:31:ae:
         bd:ed:0b:5b:d9:9f:32:54:81:46:46:63:a6:fe:ef:4a:55:21:
         a3:f4:2b:aa:42:d9:2f:02:f7:e6:62:4e:ab:b6:f0:ad:6f:78:
         82:46:1a:7b:de:ca:45:a9:7b:da:46:84:7e:27:e9:fa:0e:9b:
         82:ab:1e:85:3b:b1:b5:ff:84:fc:51:27:11:78:3b:05:5d:3b:
         d3:d6:47:13:89:f8:1f:ba:11:e1:c0:1c:a4:20:af:c2:01:ae:
         49:46:94:67:0d:1e:14:98:9f:fe:cc:52:22:0b:3d:09:78:2d:
         a8:45:92:ab:87:b1:19:3d:15:47:c6:9d:24:c1:21:29:04:83:
         af:0d:b6:d2:a0:ec:14:e0:3f:2d:85:26:05:19:87:91:56:34:
         c8:65:8c:0a:60:b9:b3:55:c0:c7:5e:60:a2:bf:4a:9e:8b:4c:
         8d:72:22:ff:a1:c3:84:73:db:a2:22:51:af:48:a8:6d:fb:97:
         cb:44:91:36:b2:07:4c:d8:ec:92:04:f3:0f:fc:aa:29:04:6e:
         86:c7:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:44 2025 by rpki-client