Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          V53k4cXIugQvABtrQitMFLf6GoDmGCTA7GNEcOTOOt4=
Subject key identifier:   88:53:17:9D:01:75:E0:CB:BB:46:FB:24:82:DA:94:03:D0:77:90:C0
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       019964DA7205C225C131F1457B4F3EB810E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          1627
Signing time:             Sat 20 Sep 2025 02:01:01 +0000
Manifest this update:     Sat 20 Sep 2025 02:01:01 +0000
Manifest next update:     Sun 21 Sep 2025 02:01:01 +0000
Files and hashes:         1: BUuoPdUgpRssN_8s1xD5RE2knSk.roa (hash: i3w2fhY/oY9rEDtPXwfXHRtgj9nEgJpg1E4G0VvBSNE=)
                          2: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: DmgCco3TYDqeho5A8fb1q5N4t+y2S+JfCgaBpkO4C+w=)
                          3: hI-d9_-nLNRhqznA_vGtUzzzpi4.roa (hash: 1ticuQGef+AQNaEeVWAc8kEXscPJuukVCdQXQ58jy44=)
                          4: yp6VXJ9ttEuEqrWfh1dI64LQkQ8.roa (hash: Mr06/vk6uaXb+ILhJfXZxgC4nSBWLm8yARcjAKzBYPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:64:da:72:05:c2:25:c1:31:f1:45:7b:4f:3e:b8:10:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Sep 20 02:01:01 2025 GMT
            Not After : Sep 21 02:01:01 2025 GMT
        Subject: CN=8853179d0175e0cbbb46fb2482da9403d07790c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:19:41:fd:2b:e4:c5:4e:e6:34:78:ba:cb:
                    c7:08:ae:29:9e:29:10:84:da:62:fd:d7:27:db:5b:
                    35:f1:43:56:26:8f:25:c2:9e:74:db:83:71:5d:15:
                    42:c8:5b:c5:e5:a5:02:f3:09:12:77:62:6d:7d:5a:
                    17:12:f5:36:83:d0:ab:1b:c6:ea:ac:34:1e:34:84:
                    e7:cd:ee:6f:76:45:be:a3:4e:aa:87:08:22:1f:15:
                    79:5b:0f:65:75:93:08:07:ce:62:9f:b1:20:38:e6:
                    46:c9:20:c5:b6:16:02:b5:9f:d9:b9:ef:42:5d:d0:
                    d3:a2:c4:80:c9:5c:4f:61:46:6a:e9:78:ab:cc:87:
                    04:32:4a:35:42:67:f0:92:96:6d:a4:14:8e:0b:35:
                    45:7c:ca:ee:0c:ad:a2:46:80:c6:fe:74:7e:00:9d:
                    1d:09:f5:ea:83:a5:58:79:ec:eb:24:d0:47:aa:81:
                    c5:8a:b8:7c:8d:ee:0d:6e:e8:0c:0a:db:4e:22:16:
                    46:31:40:5c:53:ff:e9:9e:f8:bb:c2:17:d8:d6:bb:
                    6e:3a:fd:20:3c:16:ad:2a:60:a3:a8:99:7b:f3:b5:
                    0c:6d:c9:98:8d:4c:28:ee:6a:e5:2d:93:a4:f1:e8:
                    20:db:e9:07:d9:8a:b2:17:7e:10:7f:d0:88:07:41:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:17:9D:01:75:E0:CB:BB:46:FB:24:82:DA:94:03:D0:77:90:C0
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:1c:b9:f8:33:ee:61:c7:05:81:45:56:a5:5c:33:63:ac:
         6c:c2:c3:bd:f6:01:56:b2:d0:48:6d:f8:e4:cf:cc:00:25:1f:
         27:55:02:c1:fa:54:d2:05:a4:19:40:50:8b:e6:97:97:d1:8d:
         b6:e5:06:96:d9:57:a3:99:95:86:4e:87:eb:08:06:78:e6:a4:
         76:f3:51:4d:7c:d7:13:8b:e0:6d:3f:1d:c9:46:78:b6:77:a5:
         66:4d:ef:3c:b1:d3:1f:fe:c6:ba:5e:49:df:61:b8:63:4e:3f:
         66:cb:f7:48:9d:e1:be:4c:3d:61:9a:d1:73:85:ab:24:c4:26:
         8a:24:e1:17:65:27:d4:9e:f1:c6:b8:47:64:52:1e:0b:eb:a5:
         3c:5e:c8:c9:a7:4a:cb:27:aa:71:c6:f7:50:a2:f5:04:cd:58:
         bb:e4:2b:45:74:94:89:57:6d:63:92:b3:da:3e:07:86:34:b7:
         5c:29:b5:85:3a:0c:d4:74:58:1f:2f:68:5f:91:08:df:c1:52:
         3b:c9:4f:75:34:c9:fb:04:69:13:eb:2d:bb:89:99:a7:94:c0:
         87:b6:ca:5a:fa:99:31:39:34:2b:36:12:6d:c8:d9:72:c1:41:
         5c:87:b9:de:4a:b0:05:78:9a:48:11:45:d5:fa:6d:39:8f:2f:
         ad:f4:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 10:23:31 2025 by rpki-client