Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File:                     hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier:          sHLE0DjInuGqLB5vEudNdtF+ue/SNGKQ2FHhzNynMf8=
Subject key identifier:   D6:BC:76:4F:FE:C7:2E:8A:71:85:12:B4:F8:1E:3E:18:6E:71:F7:A4
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer:       /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial:       019848525FCBF3740B28347A4C002BF1B64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number:          0D26
Signing time:             Sat 26 Jul 2025 20:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:14 +0000
Files and hashes:         1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=)
                          2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: DAB+3Hzcfomesp25BrbLv8msUnN218rr/3WTuDliqt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:5f:cb:f3:74:0b:28:34:7a:4c:00:2b:f1:b6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
        Validity
            Not Before: Jul 26 20:00:14 2025 GMT
            Not After : Jul 27 20:00:14 2025 GMT
        Subject: CN=d6bc764ffec72e8a718512b4f81e3e186e71f7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:20:ea:5d:ba:83:0a:f8:0e:47:28:a8:a8:
                    9c:99:99:72:9a:6f:f7:ea:aa:30:ee:0c:d7:c3:48:
                    32:dc:0b:67:f3:9f:b7:ac:6e:54:9e:f2:b5:e3:a7:
                    cf:ac:99:34:cf:80:3b:d7:53:52:0a:3c:9f:cd:41:
                    2a:14:8e:0b:f7:42:f8:92:d7:04:ff:0d:9c:cd:b9:
                    e8:5d:e8:c3:4f:6f:fa:3c:25:e5:4e:9c:0a:de:6f:
                    02:6c:a5:ed:e4:29:c9:4b:de:0d:b2:4f:cf:c5:88:
                    1d:2a:68:91:71:e5:a1:65:6e:78:6d:53:57:79:eb:
                    86:1d:59:ba:bc:7d:57:2e:94:7f:3a:d1:0d:d3:38:
                    99:40:1f:48:40:c3:5a:a2:a6:66:df:49:ca:01:f1:
                    bc:76:76:32:74:f5:9f:09:14:3c:25:f8:4c:d0:39:
                    ee:ff:1d:13:e7:9d:e4:d4:c8:3c:16:37:bb:a8:f1:
                    33:c5:a1:ab:08:69:a1:21:52:73:3f:63:f5:b4:3c:
                    52:8e:e0:5c:02:44:ea:10:29:d8:52:b8:4c:09:f4:
                    02:4c:28:a9:67:db:65:3b:21:02:59:8f:20:82:59:
                    c6:6a:26:d6:d4:29:e2:8c:d5:51:79:5c:34:21:40:
                    4f:76:3e:b5:c8:95:5f:22:46:9f:3a:79:be:75:ff:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BC:76:4F:FE:C7:2E:8A:71:85:12:B4:F8:1E:3E:18:6E:71:F7:A4
            X509v3 Authority Key Identifier:
                keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:72:ba:aa:c0:0c:9d:50:e8:69:a8:83:59:10:0a:02:9d:6b:
         c2:df:ae:ab:03:fc:c4:ef:3a:de:ae:b1:79:cb:38:f6:30:ae:
         24:c0:f3:c6:0a:24:2f:be:4a:82:88:71:5b:d3:ba:3f:d6:44:
         38:1d:cf:b0:60:37:3c:a6:3b:d7:d6:d0:78:27:89:0d:ee:9b:
         9f:06:a6:ed:6e:f0:de:b7:fd:bf:b3:5e:68:70:e4:2d:34:a8:
         e9:70:d4:21:4f:43:43:de:01:08:90:0f:9b:ec:59:ab:d8:dd:
         e2:58:62:19:a2:4b:fc:d5:66:22:12:f7:22:88:03:98:1d:32:
         b1:94:3c:1f:2e:bc:09:34:72:38:ae:f8:e5:7b:65:ad:c3:ed:
         a6:ce:c8:7a:7c:8b:c9:5f:9d:c0:89:fe:d1:ef:8c:98:94:b3:
         eb:3a:f0:b8:1b:20:6c:73:82:a2:a1:01:29:c7:35:8c:9a:4c:
         87:fa:7d:19:b9:38:06:1b:07:d4:ff:c7:91:d9:ad:11:e2:59:
         af:89:d7:15:42:ba:c9:1d:d2:f4:70:b3:e2:b0:35:81:32:28:
         70:8d:5d:fa:9f:a0:4c:db:74:4d:69:42:1e:1b:73:46:e1:12:
         c5:48:0b:f3:90:79:a1:f9:ed:41:db:d1:7c:78:40:4b:6a:50:
         98:89:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:16:50 2025 by rpki-client