Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
File:                     cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json)
Hash identifier:          bQbFewZe3SfYcfv+TBYg/9BeeNQw7LLGJc2upJcUpZU=
Subject key identifier:   8A:4B:1F:26:97:5D:3C:E0:AB:A9:85:71:77:A1:B2:EB:7F:DC:B8:82
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Certificate issuer:       /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial:       019922FAC36DE0983A643F92AC3557391115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 07:01:23 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:23 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:23 +0000
Files and hashes:         1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: lBAoxUIlvYIdQBDHm4zU2XrX2P4OElYoRItrR03PCAU=)
                          2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:c3:6d:e0:98:3a:64:3f:92:ac:35:57:39:11:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
        Validity
            Not Before: Sep  7 07:01:23 2025 GMT
            Not After : Sep  8 07:01:23 2025 GMT
        Subject: CN=8a4b1f26975d3ce0aba9857177a1b2eb7fdcb882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:55:35:e0:95:e9:53:fc:c7:9f:d5:30:2e:
                    22:19:4a:45:56:e8:40:47:f3:31:d4:2e:04:73:c5:
                    0f:ad:29:2d:93:94:7a:8c:ee:11:3e:45:0f:dc:2f:
                    43:55:ec:f5:f7:0f:2d:05:2d:a1:b4:1a:29:bb:65:
                    41:fd:a9:2a:f8:f4:32:58:fa:22:a6:0c:a2:5e:59:
                    fa:4b:de:d8:72:d5:37:45:9f:cb:10:9f:ba:73:22:
                    df:45:31:fa:0f:ea:19:88:33:e5:08:1e:fc:8f:b0:
                    0d:15:6b:13:28:b2:02:14:a0:0c:68:3c:b8:52:82:
                    fa:47:d5:6f:f7:b9:2b:25:fd:9a:f1:56:4e:62:fb:
                    35:e5:41:9b:cd:a1:95:6e:04:f6:91:c6:ca:cf:7f:
                    18:b6:60:4c:d0:4b:9a:c8:a1:1c:c0:f7:74:38:48:
                    b8:ef:3d:d7:de:79:ae:d3:91:92:1e:b1:97:63:0c:
                    77:a9:f7:17:7b:a1:8e:73:71:77:09:f6:e3:19:b8:
                    73:e7:74:23:63:64:9f:06:5c:83:79:f4:e4:59:33:
                    86:9c:75:82:33:a9:a2:3f:49:bd:b9:fc:14:10:a4:
                    8a:b9:01:17:2a:5a:4d:7a:48:86:95:24:62:25:63:
                    e0:68:bc:3f:e3:0b:5c:7f:68:4c:62:23:05:6d:1d:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4B:1F:26:97:5D:3C:E0:AB:A9:85:71:77:A1:B2:EB:7F:DC:B8:82
            X509v3 Authority Key Identifier:
                keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:79:ae:8f:8a:e1:6b:01:c6:db:f9:4d:b6:37:57:7c:91:39:
         4c:0d:3d:5d:9e:3c:8a:3c:d3:ef:23:27:27:b9:28:c3:03:3a:
         bc:45:ae:95:6c:88:f8:00:30:01:30:49:3b:9d:ab:dd:1a:3a:
         62:1a:45:4c:db:1d:58:a7:51:25:c8:63:fd:d7:ce:a0:7b:10:
         db:16:84:c8:0b:e9:25:1c:88:5a:15:99:cc:1e:ba:12:3c:87:
         b9:c5:a4:40:c6:e3:fd:ac:2d:de:72:b6:a1:72:78:c3:75:67:
         a2:55:9f:f8:23:62:d2:c2:4c:8f:38:0c:26:6a:ff:22:1a:ba:
         53:d4:7f:e9:13:b5:3a:f8:79:dd:36:95:26:bc:c6:19:c7:4c:
         1b:b2:1b:c6:ed:ea:69:2e:5c:d8:bf:43:a2:b5:c1:c1:14:d9:
         0f:f1:65:78:2f:8b:06:82:a7:72:21:13:11:39:5d:dd:45:c2:
         f7:c6:f6:47:3e:b9:74:b9:c4:a5:43:3b:a8:cb:97:b3:e4:9f:
         68:4b:4a:07:93:90:4f:ab:e7:be:f8:0a:32:a4:aa:30:ac:18:
         cb:95:a6:37:57:c7:f0:0b:57:c0:e7:ba:e5:41:99:db:3b:28:
         9c:da:4d:de:8f:fc:76:16:8b:43:cc:f8:8c:b4:57:6f:05:63:
         0c:ae:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:38 2025 by rpki-client