Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File:                     hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier:          Ruyq7nOBQnFYtywNRygULGWoUE2ObQJp2N8IOA9fUHI=
Subject key identifier:   F0:10:CB:8C:F5:EA:A0:9B:23:9F:C3:76:D0:BD:FC:43:BF:4E:07:86
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer:       /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial:       01992CA22D932A3892B273848DC9E050B14A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number:          1614
Signing time:             Tue 09 Sep 2025 04:00:49 +0000
Manifest this update:     Tue 09 Sep 2025 04:00:49 +0000
Manifest next update:     Wed 10 Sep 2025 04:00:49 +0000
Files and hashes:         1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
                          2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
                          3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
                          4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
                          5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: S8PteN/ilMNfokXiDqgRI02VU6F1dRZkn8KDtnijmjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:a2:2d:93:2a:38:92:b2:73:84:8d:c9:e0:50:b1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
        Validity
            Not Before: Sep  9 04:00:49 2025 GMT
            Not After : Sep 10 04:00:49 2025 GMT
        Subject: CN=f010cb8cf5eaa09b239fc376d0bdfc43bf4e0786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:a5:e0:ea:4e:8e:93:4f:d9:98:3b:84:f7:
                    fd:3c:42:e2:f7:22:ef:66:f0:e0:68:9e:1f:34:ca:
                    4f:6b:4b:94:93:2e:0b:52:dc:56:c4:9f:bf:33:94:
                    0c:e4:15:c9:e8:32:b0:d7:f6:32:67:8c:b4:f0:df:
                    d3:77:21:69:e9:70:55:e0:11:c1:df:a1:07:40:9a:
                    b0:b1:f3:1f:e1:68:f0:b9:d5:3b:45:18:2f:12:94:
                    12:4e:59:8a:be:8e:dd:41:98:82:3c:3e:f9:8d:6b:
                    48:2d:8a:ee:3c:d4:66:ec:fc:4c:b2:d5:0d:3f:3b:
                    6c:51:25:24:8b:94:a7:60:ba:0b:92:7d:10:77:d4:
                    9c:cb:ae:53:38:b8:c4:46:b7:88:de:ba:5c:06:13:
                    d4:98:2a:a9:dc:4b:c4:c9:9e:64:d4:8e:b5:d7:a7:
                    b1:6e:2a:8d:48:cc:0d:0d:08:f5:f1:87:cc:6b:ee:
                    61:6f:0f:cd:55:47:50:46:4a:07:77:f5:98:38:b7:
                    ee:1f:2d:e1:72:28:0d:e0:c5:9c:3d:ec:33:5d:6b:
                    f8:a7:66:a6:48:cc:c4:d8:ee:05:93:f4:95:8b:17:
                    85:b7:26:d2:e4:22:94:42:91:8f:ec:2a:0f:8c:c0:
                    2c:7e:c1:41:4b:03:76:66:45:fe:d6:17:55:72:03:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:10:CB:8C:F5:EA:A0:9B:23:9F:C3:76:D0:BD:FC:43:BF:4E:07:86
            X509v3 Authority Key Identifier:
                keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:f6:57:38:4d:dc:82:d8:ef:61:d7:1e:a0:bb:14:b1:19:1b:
         35:e4:25:e6:74:8a:ec:25:c2:d8:da:56:7c:98:8e:4f:6a:6e:
         bc:ce:a5:e0:5b:d8:5c:80:d3:f2:90:4f:a5:44:13:06:e6:d9:
         cc:17:d3:5e:1a:97:d6:9a:d2:39:71:cd:c4:ad:4f:8a:31:0a:
         8c:33:a5:c7:2f:bb:b3:a2:c2:82:fc:24:5b:fc:87:da:f3:f2:
         fc:a0:2c:cb:54:d3:14:70:3e:12:e2:8f:53:73:09:f5:7f:ab:
         71:94:90:a4:c0:85:19:16:11:16:16:1d:d9:ba:78:c8:00:92:
         65:3c:56:8d:56:e5:12:f4:ec:5a:35:34:ae:e6:5b:e5:35:de:
         17:fc:72:6e:13:e8:49:88:0e:2e:d4:30:f4:79:70:75:47:07:
         e3:7b:ce:92:1d:ab:6f:e9:be:2a:1e:a2:72:4e:91:5b:24:ba:
         e8:2a:e9:75:e4:3d:27:c3:8b:d6:23:a6:e8:d8:44:d2:ee:68:
         49:e0:b6:e8:a5:68:8a:36:66:ca:8c:91:d6:33:44:5d:a6:be:
         1f:89:de:a9:fb:6f:59:d5:ab:35:a8:88:3d:bc:98:6c:5a:ab:
         96:81:de:c2:58:05:5f:65:81:cf:00:95:ac:3a:79:46:59:28:
         1b:30:f9:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksoi2TKjiSsnOEjcngULFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4
MzdiNDQwHhcNMjUwOTA5MDQwMDQ5WhcNMjUwOTEwMDQwMDQ5WjAzMTEwLwYDVQQD
EyhmMDEwY2I4Y2Y1ZWFhMDliMjM5ZmMzNzZkMGJkZmM0M2JmNGUwNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVal4OpOjpNP2Zg7hPf9PELi9yLv
ZvDgaJ4fNMpPa0uUky4LUtxWxJ+/M5QM5BXJ6DKw1/YyZ4y08N/TdyFp6XBV4BHB
36EHQJqwsfMf4WjwudU7RRgvEpQSTlmKvo7dQZiCPD75jWtILYruPNRm7PxMstUN
PztsUSUki5SnYLoLkn0Qd9Scy65TOLjERreI3rpcBhPUmCqp3EvEyZ5k1I6116ex
biqNSMwNDQj18YfMa+5hbw/NVUdQRkoHd/WYOLfuHy3hcigN4MWcPewzXWv4p2am
SMzE2O4Fk/SVixeFtybS5CKUQpGP7CoPjMAsfsFBSwN2ZkX+1hdVcgMeTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAQy4z16qCbI5/DdtC9/EO/TgeGMB8GA1UdIwQY
MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt
ZDhjMzUxZDkzZWM2LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2
LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3vZXOE3c
gtjvYdceoLsUsRkbNeQl5nSK7CXC2NpWfJiOT2puvM6l4FvYXIDT8pBPpUQTBubZ
zBfTXhqX1prSOXHNxK1PijEKjDOlxy+7s6LCgvwkW/yH2vPy/KAsy1TTFHA+EuKP
U3MJ9X+rcZSQpMCFGRYRFhYd2bp4yACSZTxWjVblEvTsWjU0ruZb5TXeF/xybhPo
SYgOLtQw9HlwdUcH43vOkh2rb+m+Kh6ick6RWyS66CrpdeQ9J8OL1iOm6NhE0u5o
SeC26KVoijZmyoyR1jNEXaa+H4neqftvWdWrNaiIPbyYbFqrloHewlgFX2WBzwCV
rDp5RlkoGzD5Pw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:15:43 2025 by rpki-client