Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File:                     5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier:          x8u/AIDbHrO5p3wdni44oiybL+iWtmn4I6JJPwusPgs=
Subject key identifier:   EB:C4:B2:E6:E5:BF:42:91:6E:1A:8A:24:04:3A:CD:B3:A0:26:20:A5
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer:       /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial:       019845889B003F5512904CDCD4A0B00E41B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 07:00:37 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:37 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:37 +0000
Files and hashes:         1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: iMZZKgCBqQlhurIA2O35WE5P2RbmbA81YbIdwlr/BwQ=)
                          2: PsjhieTymPBMhbBeD2G4Eb2tiXM.roa (hash: bN6R2jhfh/x3ks5vaycX08tQPelsEHr78ADbPw3Z954=)
                          3: b_wZ8vjY3m-nqcgia8Q1-09feRc.roa (hash: tIRWyoM1DUPvrXEJ2hmu6whNi1gGh3fnMsdJLxUNaQ4=)
                          4: db-V4RFiWk-DRMRx23Yi5GGB828.roa (hash: nklnqznrcypY4CcHnGmzs30m8K1faHbW1Og3XBCrp1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:9b:00:3f:55:12:90:4c:dc:d4:a0:b0:0e:41:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
        Validity
            Not Before: Jul 26 07:00:37 2025 GMT
            Not After : Jul 27 07:00:37 2025 GMT
        Subject: CN=ebc4b2e6e5bf42916e1a8a24043acdb3a02620a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:a1:47:fd:53:50:98:a7:0a:79:2d:f0:77:
                    60:ab:42:91:0f:22:c3:bf:f7:53:97:81:58:03:ba:
                    bf:45:01:27:fc:2b:ef:48:09:20:ce:8c:77:45:c7:
                    81:4f:f5:dc:13:9e:8c:b3:07:d6:d4:af:46:3f:08:
                    82:18:6a:17:b7:e7:1f:89:cd:eb:dd:91:d4:cb:fa:
                    25:31:4e:41:8a:23:f1:33:1a:8f:69:94:a4:b8:4c:
                    e1:18:88:4d:48:6c:ba:e3:69:01:a0:d2:28:af:c9:
                    c7:3c:5a:ed:f9:fd:bf:d4:6c:72:d9:50:15:44:1c:
                    a8:7f:29:5e:14:4e:33:8b:3a:5e:6b:cf:a6:b5:f3:
                    f9:ca:47:2c:bf:cb:24:71:87:70:2c:57:80:24:a7:
                    a4:39:d5:93:de:8e:dc:50:f7:39:c7:7b:98:7f:ae:
                    71:b8:78:8f:13:21:a6:7f:cc:83:de:5e:3c:d4:92:
                    78:75:80:e6:ed:03:f8:61:02:ad:83:2d:18:5c:fb:
                    9b:9c:a1:a3:bc:1c:f4:2d:9a:32:dd:d7:a4:e6:5c:
                    d7:00:62:10:d1:ab:2a:54:ff:b6:99:4b:7c:8f:5e:
                    b2:78:be:ba:56:9d:b1:01:bf:c8:7b:97:9a:57:28:
                    03:ff:33:8a:7b:86:c9:9d:25:2c:64:71:e3:2d:bb:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C4:B2:E6:E5:BF:42:91:6E:1A:8A:24:04:3A:CD:B3:A0:26:20:A5
            X509v3 Authority Key Identifier:
                keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:27:76:b7:87:36:28:b0:b6:b7:fc:ef:15:13:45:31:5a:39:
         2a:a7:3e:5d:b1:e8:4a:59:bb:66:40:6a:f9:ae:c6:c8:3d:ec:
         2a:ee:1d:03:44:6c:06:72:70:da:9e:63:01:1c:94:50:eb:34:
         59:ef:10:55:16:00:1b:3f:a8:42:13:c2:f1:3c:ce:74:28:ab:
         59:6c:48:be:bc:88:13:1a:df:f7:5f:d3:a6:e0:da:d5:1a:11:
         3e:c2:0b:b4:3d:75:e6:42:bd:49:10:66:35:6f:9e:3e:9f:09:
         10:08:60:d8:b6:90:ae:ea:33:9f:64:06:9f:f8:14:77:fe:19:
         6b:bb:57:4b:0b:62:7b:77:4b:eb:51:8a:44:9a:14:11:20:ce:
         c3:97:42:73:1f:ab:a7:ed:26:bd:5e:66:41:cb:1a:33:d0:ef:
         69:b8:74:cd:c6:f4:7d:f2:55:10:35:b4:d5:c2:1e:07:27:2b:
         b4:e1:75:f0:54:e9:c5:b5:06:fa:cc:55:e5:78:2b:ae:a8:19:
         ed:24:e8:49:ab:5f:5c:7b:d5:66:ec:eb:6e:64:41:54:29:9d:
         84:47:9a:95:a0:a4:e4:a6:1e:9d:e8:54:b2:2d:ce:2f:2a:7d:
         ba:64:80:21:6d:a1:ce:59:79:49:c4:2b:c4:2c:23:44:06:51:
         f4:cd:7b:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiJsAP1USkEzc1KCwDkG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzlhZjE3MTZkYzQ2MWU1YmIzZjg3NjIxNWJjYjk0ZTg4
MDhiYTAwHhcNMjUwNzI2MDcwMDM3WhcNMjUwNzI3MDcwMDM3WjAzMTEwLwYDVQQD
EyhlYmM0YjJlNmU1YmY0MjkxNmUxYThhMjQwNDNhY2RiM2EwMjYyMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsChR/1TUJinCnkt8Hdgq0KRDyLD
v/dTl4FYA7q/RQEn/CvvSAkgzox3RceBT/XcE56MswfW1K9GPwiCGGoXt+cfic3r
3ZHUy/olMU5BiiPxMxqPaZSkuEzhGIhNSGy642kBoNIor8nHPFrt+f2/1Gxy2VAV
RByofyleFE4zizpea8+mtfP5ykcsv8skcYdwLFeAJKekOdWT3o7cUPc5x3uYf65x
uHiPEyGmf8yD3l481JJ4dYDm7QP4YQKtgy0YXPubnKGjvBz0LZoy3dek5lzXAGIQ
0asqVP+2mUt8j16yeL66Vp2xAb/Ie5eaVygD/zOKe4bJnSUsZHHjLbtDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvEsublv0KRbhqKJAQ6zbOgJiClMB8GA1UdIwQY
MBaAFOR5rxcW3EYeW7P4diFby5TogIugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTIt
MjQxZWFiNjE0ODNmLzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTItMjQxZWFiNjE0ODNm
LzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSd2t4c2
KLC2t/zvFRNFMVo5Kqc+XbHoSlm7ZkBq+a7GyD3sKu4dA0RsBnJw2p5jARyUUOs0
We8QVRYAGz+oQhPC8TzOdCirWWxIvryIExrf91/TpuDa1RoRPsILtD115kK9SRBm
NW+ePp8JEAhg2LaQruozn2QGn/gUd/4Za7tXSwtie3dL61GKRJoUESDOw5dCcx+r
p+0mvV5mQcsaM9Dvabh0zcb0ffJVEDW01cIeBycrtOF18FTpxbUG+sxV5XgrrqgZ
7SToSatfXHvVZuzrbmRBVCmdhEealaCk5KYenehUsi3OLyp9umSAIW2hzll5ScQr
xCwjRAZR9M178A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:57:49 2025 by rpki-client