Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          6qXz4YTpdhUpHGUo7iLM/ggpdb3c1cqya9PNFSTYa5A=
Subject key identifier:   AA:6F:CA:1D:17:EE:8B:47:8F:56:8F:61:27:81:7F:31:91:6D:72:D9
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       0199301103C032C1A755C3CECAFEBD0557A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          1679
Signing time:             Tue 09 Sep 2025 20:00:45 +0000
Manifest this update:     Tue 09 Sep 2025 20:00:45 +0000
Manifest next update:     Wed 10 Sep 2025 20:00:45 +0000
Files and hashes:         1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=)
                          2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: kK9wD0CdzLypboOH7Fcvc8jqHFrX5pLUpKeeS+sJEFM=)
                          3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=)
                          4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=)
                          5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:11:03:c0:32:c1:a7:55:c3:ce:ca:fe:bd:05:57:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Sep  9 20:00:45 2025 GMT
            Not After : Sep 10 20:00:45 2025 GMT
        Subject: CN=aa6fca1d17ee8b478f568f6127817f31916d72d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:43:ac:ed:e9:95:17:f3:b2:cc:92:67:3c:
                    a0:a8:08:da:f4:42:de:a8:4c:de:90:59:d7:e1:01:
                    af:e0:0f:56:5f:55:ae:3c:d9:ff:91:31:ab:5a:a0:
                    ad:0a:0a:c5:7b:e4:21:2f:4d:de:72:ff:fd:9f:fd:
                    4f:37:4c:0e:6e:e5:ff:8b:ba:f4:73:4f:9f:a8:31:
                    54:cb:40:dd:d5:6f:2e:72:bc:3d:96:1c:ab:13:5e:
                    45:2a:99:06:8e:ac:6f:19:fe:58:a7:16:5b:fc:90:
                    e2:b6:95:00:31:33:5e:9a:c1:b7:c6:8b:48:2d:50:
                    e3:d6:c0:e4:ec:59:65:a7:f0:1e:74:2f:20:bb:31:
                    9b:27:99:9d:90:5c:4a:5e:90:4a:68:c0:c2:15:77:
                    c1:bf:58:d7:10:38:db:f8:4b:eb:fb:65:ce:04:ed:
                    33:6c:7e:64:19:49:d0:6c:7b:a4:bd:c9:f5:f2:f9:
                    ec:12:80:d7:e1:e6:62:49:dc:1a:12:a2:24:18:b6:
                    79:f3:a1:cb:53:be:e6:50:ab:28:89:ee:81:e4:dd:
                    06:c5:d4:b8:8f:e7:b2:88:d5:d5:31:78:a6:9c:21:
                    83:df:69:37:e4:e3:14:96:31:90:5a:f0:e9:7a:6a:
                    d6:1b:bf:d0:ae:0b:c8:3d:0e:40:39:71:7c:cb:94:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:CA:1D:17:EE:8B:47:8F:56:8F:61:27:81:7F:31:91:6D:72:D9
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:ae:66:93:31:d8:2d:49:4b:6d:5b:c9:04:1f:84:8b:ba:
         30:79:4f:a9:f1:ee:f8:13:2d:e2:68:32:95:af:41:39:3b:a4:
         2f:4c:d3:04:9d:44:e0:66:39:56:0c:be:f2:48:ab:00:bf:14:
         84:0e:74:37:07:ab:4b:30:36:db:d6:96:25:17:d6:b5:ee:69:
         10:3f:5a:58:94:6c:d7:55:3f:22:6b:cc:66:15:4b:4a:68:ab:
         eb:15:08:53:78:58:8a:5d:77:c8:75:30:03:4b:54:a9:99:1f:
         d6:57:22:ed:d3:b8:83:ac:88:b8:ae:1f:21:b8:fb:b8:21:13:
         89:c7:9e:4c:d1:cb:8c:7c:89:c1:e0:da:22:72:79:7f:e1:29:
         a3:78:26:63:58:a0:1b:90:f2:a1:5d:c5:6b:7b:9b:c8:03:f5:
         04:92:6e:68:ad:90:f1:14:9b:56:52:54:0e:ef:e0:c6:51:93:
         48:e1:7a:29:4a:ce:c5:2f:33:19:1b:02:a2:d9:18:d7:98:88:
         23:10:c8:56:f9:5a:8d:70:a7:12:99:77:61:fa:39:db:fd:92:
         23:65:30:85:b5:8d:25:9a:52:a0:3a:bc:83:0a:26:e4:38:24:
         32:25:6f:de:55:60:ed:d8:94:9c:61:60:e1:1a:17:1e:b2:62:
         46:1e:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:23:48 2025 by rpki-client