Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File:                     hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier:          /ICaLcveZfMscGrLDDLpHZOMSJK3HVtipRBk5QVPazM=
Subject key identifier:   7E:A6:FA:CE:AE:78:0A:FE:7D:79:DF:F4:F3:C6:EE:BC:67:C9:FC:29
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer:       /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial:       019844ACCF36AB00ED923D71BC3610936E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 03:00:32 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:32 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:32 +0000
Files and hashes:         1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
                          2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
                          3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: fw4wtFDVeb4fFMgJ4QlZe8wdwO48E04nrRoHBTwsjXM=)
                          4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:cf:36:ab:00:ed:92:3d:71:bc:36:10:93:6e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
        Validity
            Not Before: Jul 26 03:00:32 2025 GMT
            Not After : Jul 27 03:00:32 2025 GMT
        Subject: CN=7ea6faceae780afe7d79dff4f3c6eebc67c9fc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:be:94:cc:e1:09:55:1d:73:d7:38:ae:18:
                    46:87:fd:04:25:66:db:f9:27:ff:02:2e:18:39:21:
                    d9:ed:58:1f:39:8c:65:11:0c:36:54:12:bd:bb:ec:
                    a6:16:61:9a:69:2d:8f:bc:9b:9f:06:94:99:99:1c:
                    6b:b3:4a:24:39:e6:e0:d0:83:3c:6d:82:5f:a2:62:
                    01:4c:30:58:c2:58:3a:fa:a3:d6:8d:33:71:53:41:
                    97:1e:1f:5f:b3:4f:e5:56:09:f4:8d:de:e0:73:9e:
                    c6:6c:b5:0f:ae:b6:b3:e3:fb:7e:33:d3:21:5f:0d:
                    36:d2:d3:84:f8:d5:40:1e:18:ff:4f:c1:ea:41:a9:
                    ef:e3:c9:23:90:b9:9a:08:d2:ec:95:42:d7:6a:e3:
                    c8:1e:5b:0b:07:41:b8:59:8c:c9:e0:09:94:78:58:
                    e9:e8:5f:c1:86:bc:ae:a3:5d:f5:0a:6a:03:38:fb:
                    b2:8a:52:55:54:35:d7:17:bf:f6:72:53:8a:d5:4a:
                    a5:14:25:bf:b6:b7:3a:7f:c6:e1:c3:6f:59:64:e6:
                    62:e5:a1:cf:59:8b:92:69:37:c3:7d:a7:85:93:55:
                    bd:d4:14:91:47:a1:79:39:4d:48:db:00:09:84:ed:
                    18:6c:67:20:76:e5:a6:04:02:03:8a:4b:53:7a:e1:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:FA:CE:AE:78:0A:FE:7D:79:DF:F4:F3:C6:EE:BC:67:C9:FC:29
            X509v3 Authority Key Identifier:
                keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:9a:9b:10:0f:80:2f:85:cf:e0:3a:de:82:c2:18:62:37:
         1c:0a:cc:83:20:79:58:ad:4c:3b:94:b8:a2:8a:ec:30:7a:2d:
         1d:af:a6:8c:75:a9:4c:ef:f6:20:97:a7:42:ad:27:e2:47:05:
         72:6b:e7:59:67:d3:46:da:17:ff:18:75:1c:ed:0b:64:90:ff:
         d8:a2:c2:19:bb:00:b9:66:40:0c:ef:ce:42:48:5f:d1:df:05:
         9d:e3:45:2b:34:54:f3:21:33:d0:18:e2:61:2f:59:cb:aa:b4:
         f6:21:2f:e2:ce:de:47:db:15:71:f2:c4:23:4b:78:94:75:ee:
         db:25:02:e6:84:c7:46:23:c2:0e:46:1e:e1:ce:45:81:19:b3:
         db:59:47:fd:a1:e2:5f:d8:bc:72:c5:4c:0e:8d:2e:e1:e0:ad:
         a4:27:21:ff:e1:14:d9:b5:a5:f5:9f:5d:64:71:ee:76:65:80:
         fe:45:22:8d:78:ee:c0:5d:51:f2:d2:7a:41:9b:92:39:46:74:
         eb:97:76:f0:54:f5:e9:cb:62:32:f2:86:de:69:cf:fa:e4:96:
         11:74:27:56:00:aa:e1:93:d6:89:3c:67:8e:37:82:99:b7:4f:
         dd:21:3b:c0:85:eb:7d:91:eb:8e:14:03:81:54:2d:d6:80:11:
         00:4a:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:49 2025 by rpki-client