Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          5RG4iD4LDEeyVN0bZtB5FH/zUxcwlNR3jwbXBcNLbD0=
Subject key identifier:   C7:69:7A:47:9C:3B:C2:8F:8A:15:A4:13:60:35:20:4B:08:7F:D7:D2
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       019A23D311A8DD2D982423D2D035EBF7008B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          154B
Signing time:             Mon 27 Oct 2025 04:00:26 +0000
Manifest this update:     Mon 27 Oct 2025 04:00:26 +0000
Manifest next update:     Tue 28 Oct 2025 04:00:26 +0000
Files and hashes:         1: 04qRvXpisAlJju5q3bLKILC0LVE.roa (hash: SMJIcHhYL5Jlgz2ZLu2vhAU/XWZpT+AXSJE69y+L74Q=)
                          2: LES-4NZ2gVtnFASVcYj5bV4jo4M.roa (hash: 2G3ShlRTsn405STqDwUmkyh047FRwXPBWPG0OI/1t/0=)
                          3: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: mW/Kal97a9bhSQzjTzNHLWc73f9IKkYVktqQp/jTkes=)
                          4: iOBndMAtRYjdd4nI6OQWrWkGyaM.roa (hash: AELuuM2xWBmQmKZq9h3C0xBIjOiYeyVIInHWWjjNIic=)
                          5: s8MofJ3kjxOEIcJCRG7XRBu9KS8.roa (hash: Pq2tE0OOs+hTFPNcOAxmOBUj8Uu1ECYXKDV5TZ3hyck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:d3:11:a8:dd:2d:98:24:23:d2:d0:35:eb:f7:00:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Oct 27 04:00:26 2025 GMT
            Not After : Oct 28 04:00:26 2025 GMT
        Subject: CN=c7697a479c3bc28f8a15a4136035204b087fd7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:7e:d5:df:5b:14:4c:f8:07:a4:41:05:2c:
                    b0:31:65:6a:74:0e:ed:a8:4d:80:8f:6c:e5:80:a7:
                    5d:fe:e9:c4:17:85:60:df:26:11:cb:98:6b:d3:29:
                    87:5f:05:17:7f:c7:2f:2c:17:04:49:6d:9c:60:bf:
                    a7:7e:04:cf:43:80:07:65:33:84:bd:cd:8e:6a:07:
                    9a:5e:d3:d7:2b:91:b7:c7:da:59:a7:a6:2b:8d:ef:
                    3d:e3:dd:0e:dd:00:75:c9:8e:95:09:6f:e6:d2:f3:
                    23:4a:1e:4f:a3:7c:1c:0a:46:32:57:b0:b4:f1:53:
                    d4:a4:66:68:b9:e4:d4:e1:b8:32:ca:90:17:2a:25:
                    99:89:a3:9f:97:ff:d0:9e:81:0b:6d:f4:72:f3:61:
                    40:3b:ff:19:e0:5a:3c:df:e0:96:e1:db:e6:45:6a:
                    c4:6d:78:23:ef:b5:97:f6:fa:3f:ba:44:b8:98:68:
                    1d:b9:74:69:4a:a7:16:29:f3:41:c0:6a:c3:93:b6:
                    13:f8:04:32:82:eb:e5:59:c7:8c:95:0c:b0:05:b3:
                    68:2d:5f:b2:4a:69:66:16:a1:a8:a4:85:71:99:4f:
                    d0:e0:5f:36:97:aa:d1:af:4f:53:ac:13:16:b0:89:
                    ba:28:c4:6e:d8:bc:b4:ed:c5:e4:3d:3a:6a:22:bd:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:69:7A:47:9C:3B:C2:8F:8A:15:A4:13:60:35:20:4B:08:7F:D7:D2
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:48:ed:31:af:28:1f:06:8c:8a:78:9c:f6:1f:90:f2:89:
         37:92:fb:53:4f:1c:fa:a1:2c:32:16:c4:54:3d:8c:af:7f:ab:
         22:02:85:36:15:13:3f:96:07:0f:e5:09:f3:e0:f4:32:d4:37:
         b6:6a:b9:24:47:fc:74:eb:a1:cf:58:b7:09:34:c9:4c:4f:d8:
         dc:74:c3:70:7d:ac:64:ed:c7:1a:05:0c:f7:c7:0a:fa:f8:b2:
         cd:9a:53:b9:e4:01:15:20:e4:b6:8a:60:76:b1:ed:b8:85:c1:
         43:ff:19:e3:02:df:b7:f9:24:ba:0f:7f:b6:47:ac:fb:ec:d1:
         3d:90:70:5a:51:07:33:af:52:13:a2:cc:89:c7:c4:77:48:c3:
         32:80:0e:e7:0c:06:2f:2b:14:86:44:1a:7c:e9:66:45:9b:9f:
         b1:cb:3b:5c:84:35:c7:64:21:35:4d:b8:1c:c0:3d:18:90:de:
         44:24:33:f2:59:dc:86:93:1f:b1:03:b9:23:87:9e:19:a6:c5:
         a9:60:dd:45:03:37:d9:10:33:d6:50:c0:f5:95:45:ee:3b:50:
         8a:56:e1:f9:4e:aa:9b:9e:ca:7c:35:f5:6e:e6:7f:8b:8f:55:
         13:71:ed:61:d5:a6:4a:48:dd:eb:ea:72:cb:00:4c:56:1c:8b:
         d7:10:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:35 2025 by rpki-client