Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          XjTpAsuSKrRxlCRLg6mPhEZahSuvs07VnfLn6HWSWO8=
Subject key identifier:   3C:E8:B5:24:D7:D9:44:58:BB:F0:FE:2F:37:89:5C:51:5D:85:54:42
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       01992B21608F02E659D148B8C4459A1A2D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          101E
Signing time:             Mon 08 Sep 2025 21:00:31 +0000
Manifest this update:     Mon 08 Sep 2025 21:00:31 +0000
Manifest next update:     Tue 09 Sep 2025 21:00:31 +0000
Files and hashes:         1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=)
                          2: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=)
                          3: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=)
                          4: Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa (hash: vhJRnVcBvTImc9Sv3yScvOufw+og96lcsubFcpiYN6Q=)
                          5: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=)
                          6: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=)
                          7: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=)
                          8: T76XHEYKPxvXgzVhYoIpXxSuwwA.roa (hash: gIybCKbgfywSTgVeKeQdR2l0hkSxZKXJNGi8hE3axtM=)
                          9: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=)
                          10: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=)
                          11: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=)
                          12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=)
                          13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=)
                          14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=)
                          15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: o76L/VgRtep0Dx9XqHKnYcgr6YD4obbHmyMafeBmusg=)
                          16: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (hash: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=)
                          17: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=)
                          18: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=)
                          19: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=)
                          20: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=)
                          21: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=)
                          22: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=)
                          23: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=)
                          24: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=)
                          25: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:21:60:8f:02:e6:59:d1:48:b8:c4:45:9a:1a:2d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Sep  8 21:00:31 2025 GMT
            Not After : Sep  9 21:00:31 2025 GMT
        Subject: CN=3ce8b524d7d94458bbf0fe2f37895c515d855442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:a1:06:62:fb:dd:a5:48:3f:a5:91:50:54:
                    4d:c3:35:e8:41:b7:fb:c5:73:8d:4a:1d:63:bf:e3:
                    ea:ee:16:0a:01:7f:fe:61:d9:a7:f5:d5:84:ca:bc:
                    ef:f6:bc:0c:57:8b:de:4a:1f:f5:31:d3:a6:fb:d7:
                    e0:34:cd:68:13:f9:2e:92:59:1f:9c:69:5d:fb:c8:
                    ed:0e:8b:c2:df:d4:ed:da:25:35:79:a3:84:a2:b4:
                    45:87:d9:06:9f:1a:9f:de:9a:17:e4:84:c1:4f:f2:
                    fd:8c:5a:b6:b2:01:bd:6f:8e:97:54:52:b2:62:c3:
                    96:65:75:f3:72:b5:66:1c:4c:23:4e:71:fe:ef:b9:
                    17:fe:f6:a9:af:cb:8e:aa:4e:b2:b2:b2:a7:8d:5a:
                    f6:97:db:d8:cc:10:20:38:4f:06:29:f7:39:96:4c:
                    a4:44:e6:21:55:be:e2:40:a0:ca:a5:73:ba:15:37:
                    69:93:4d:14:09:57:bc:e4:1a:60:b7:6d:6c:a9:e4:
                    fd:98:d4:03:a1:77:d0:c2:8c:7b:77:bb:40:d0:ef:
                    dd:dc:42:db:e1:75:f0:5a:bc:da:8e:5f:1f:5d:99:
                    99:5a:cd:8a:61:30:ec:20:c0:48:92:82:cd:f9:ce:
                    02:03:e9:1a:a5:bf:47:72:00:8a:cb:7e:59:2c:8e:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E8:B5:24:D7:D9:44:58:BB:F0:FE:2F:37:89:5C:51:5D:85:54:42
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:bd:85:29:46:67:1e:3a:da:3f:1a:6f:07:a2:fd:a5:3e:
         19:14:c2:8f:01:07:db:62:11:5f:95:09:ea:6b:9c:24:63:05:
         d2:aa:d8:89:c8:f2:be:41:34:65:38:25:c4:13:e7:b2:ef:74:
         4a:40:19:44:8b:16:c8:e3:89:1e:3f:48:34:ec:b5:50:72:b8:
         c2:94:78:79:9f:e6:f2:20:b8:0a:9f:f8:7c:3a:b8:25:aa:e4:
         fb:82:37:2a:23:be:fc:a6:bc:1b:8f:5e:ec:9a:5e:05:bd:bf:
         c0:f6:4a:da:53:6f:2a:25:c8:55:83:3d:8a:a6:31:25:a9:d4:
         32:84:8f:ad:49:dc:2d:40:5f:8d:37:bd:6e:1d:91:65:1f:a1:
         8f:48:c7:95:75:58:21:84:1c:a1:e0:45:cd:54:92:2c:10:f2:
         ee:93:4b:1a:c1:d7:8c:d6:c6:76:d1:4b:c5:00:e2:65:fa:f6:
         d4:9c:26:d4:d6:71:a1:3d:52:8b:21:38:8b:a2:ca:5e:b9:7a:
         21:5f:3c:dd:b1:4f:8e:3c:8b:39:07:26:08:e6:60:ef:5c:6e:
         ff:77:51:b4:c0:51:d4:bd:36:b6:16:db:7b:fa:9e:7c:1f:4f:
         9e:6b:83:d7:39:5f:73:b9:6c:ea:92:8c:05:57:f2:90:2e:81:
         b8:1c:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:14:18 2025 by rpki-client