Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          66dCWpc8xzeYUeIoCZGSyw3Xe3ASx00LuTQa7fuYFN0=
Subject key identifier:   F9:CE:69:AE:BF:34:EE:8B:D2:A7:59:D7:8D:77:B6:E0:93:D6:8F:6E
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       019A27E6B298CCD83F422E5072BC4C89A8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          140D
Signing time:             Mon 27 Oct 2025 23:00:21 +0000
Manifest this update:     Mon 27 Oct 2025 23:00:21 +0000
Manifest next update:     Tue 28 Oct 2025 23:00:21 +0000
Files and hashes:         1: 88WU_lo-nSRGdQfY40VdogAMLxE.roa (hash: Hb+L5mbmqk3uGoKDZkv33m+okuLc3B+yQYtGc3eHLEs=)
                          2: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: GYurigDcm2ChU3ZNg/gcnFIlrHxHYb8wtlN+7i69YAs=)
                          3: qitb7VLMgvff1nrPh9k84ZNCZis.roa (hash: 5aKxoc3/ZFGyn8GlrxxZrkPDb3gc2rupmpy/hBVwGfg=)
                          4: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (hash: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=)
                          5: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (hash: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:e6:b2:98:cc:d8:3f:42:2e:50:72:bc:4c:89:a8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Oct 27 23:00:21 2025 GMT
            Not After : Oct 28 23:00:21 2025 GMT
        Subject: CN=f9ce69aebf34ee8bd2a759d78d77b6e093d68f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e0:b7:be:9b:e3:43:39:ea:49:94:2b:f6:e3:
                    88:d5:cf:c0:9d:77:fc:3a:6a:18:93:1e:c7:0c:38:
                    85:47:42:92:ba:ba:b2:13:51:77:64:8e:de:cc:18:
                    34:a6:4d:41:48:30:c8:e9:62:e7:8a:33:79:04:f2:
                    89:5b:98:ba:bd:82:8d:f1:91:ba:68:e2:ff:e9:25:
                    1f:53:4d:df:79:63:a7:ad:77:d0:33:b0:31:42:82:
                    5e:fa:7b:00:d4:87:b7:0e:bc:1f:20:3f:28:44:b9:
                    bc:52:b3:75:a4:fe:17:2c:63:79:84:f2:da:03:7d:
                    1e:37:d5:ab:89:e6:ce:fb:b2:f8:45:aa:93:d6:fa:
                    9e:47:a1:70:1f:f6:57:09:28:31:bd:f6:c3:d7:5b:
                    57:59:e6:67:9a:f1:73:ab:48:a5:8c:6f:86:78:57:
                    6d:59:b8:68:e0:06:84:35:e4:10:de:0e:25:30:09:
                    ea:41:8a:81:e9:9d:a5:64:46:be:12:7b:74:15:f9:
                    2b:f2:d3:48:73:04:f4:05:6f:34:18:49:60:7d:8e:
                    7f:da:ce:1e:ec:09:f9:a6:0c:3d:f5:ae:2c:f4:18:
                    cf:e8:dd:2b:2c:4d:3b:9c:7d:ca:07:ad:17:c0:5e:
                    15:0a:9d:4a:6b:fe:e9:20:1b:1a:d6:f5:d6:95:7b:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CE:69:AE:BF:34:EE:8B:D2:A7:59:D7:8D:77:B6:E0:93:D6:8F:6E
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:46:b6:3f:e9:9f:ac:5c:e0:6d:99:54:d4:00:48:fa:91:
         33:07:02:3a:a3:1c:64:e3:e6:fb:fd:3e:39:1a:9a:a8:3e:35:
         0f:23:b6:fd:97:9c:37:1b:31:6f:6f:99:10:a2:27:9f:44:8d:
         be:4b:24:75:8e:0f:91:83:9c:e1:e7:79:15:3d:78:5c:b8:ec:
         b5:da:20:71:3e:2f:8e:ee:ad:87:7b:a2:76:cd:95:be:0a:66:
         47:ad:b7:71:2a:c3:a8:ba:da:fe:db:98:ac:42:a3:99:9c:04:
         ef:19:36:9f:3b:fb:25:64:c3:7d:fe:35:d7:0a:90:3b:50:2c:
         b1:d4:2e:7e:8c:14:03:e2:78:da:89:91:59:c8:c5:3d:e5:81:
         6b:d9:0e:de:23:29:26:53:c6:51:2a:2c:68:47:5e:fb:20:2d:
         1d:16:bd:ab:b1:59:20:43:7f:27:b3:e9:c4:21:05:b5:55:dd:
         22:c6:d6:75:a2:79:cc:b6:85:21:54:08:8f:ef:70:38:29:9f:
         e8:61:0b:49:82:0a:16:85:ed:b1:65:f6:17:d9:8b:cc:4a:0e:
         ec:49:52:4b:b4:03:a1:84:01:a8:f6:01:24:d6:7b:cf:7a:aa:
         ee:f4:58:ba:77:38:c6:45:df:16:f6:de:36:f2:6f:ef:a3:fe:
         8c:5b:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:52:10 2025 by rpki-client