Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File:                     hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier:          U8KNVeCHeB+hk2kVukpJSWriBZ1RSowjhgubQwiTup8=
Subject key identifier:   E7:A8:B8:43:AA:81:EC:CC:15:15:0D:DE:BA:21:93:2B:B8:78:8A:24
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer:       /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial:       01987A88B53EC2CB956559D1522844168FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number:          0F1A
Signing time:             Tue 05 Aug 2025 14:00:36 +0000
Manifest this update:     Tue 05 Aug 2025 14:00:36 +0000
Manifest next update:     Wed 06 Aug 2025 14:00:36 +0000
Files and hashes:         1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
                          2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: MEaguKfR1UlVLmeKcIzMQ/aey559Uc/VX5UUYH/WNv8=)
                          3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:88:b5:3e:c2:cb:95:65:59:d1:52:28:44:16:8f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
        Validity
            Not Before: Aug  5 14:00:36 2025 GMT
            Not After : Aug  6 14:00:36 2025 GMT
        Subject: CN=e7a8b843aa81eccc15150ddeba21932bb8788a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:30:f8:a6:42:c4:f0:37:52:0b:f1:f6:a1:
                    62:e9:dd:6b:60:85:a0:d4:13:d8:64:0f:23:d4:67:
                    ba:d9:78:fa:9c:cd:d7:d4:4b:2f:6d:ab:0b:fa:a7:
                    c1:f6:be:8e:17:aa:bb:f6:03:1c:72:a1:05:3e:2a:
                    fa:3b:79:d7:2e:f2:f8:d1:6a:14:f5:d7:58:74:38:
                    d0:bf:49:64:f4:50:de:b2:91:c7:ae:a9:cd:73:9a:
                    03:1a:61:21:aa:79:3f:16:4d:e2:f7:f4:40:9a:2e:
                    20:0c:c2:8c:26:8a:eb:64:88:65:0a:df:a7:aa:1f:
                    1e:12:cc:27:ea:f0:9d:77:34:21:0f:b6:61:0a:5d:
                    f7:b8:1d:e5:79:7e:a3:59:67:6b:de:7d:5d:ba:93:
                    1b:52:60:ae:8e:d3:49:a2:15:ad:09:f4:43:14:29:
                    0b:7a:e6:8b:49:a5:45:e1:4e:2d:a6:8f:62:01:ec:
                    6c:24:31:b6:ad:8e:df:14:3e:ef:3f:b4:29:ae:6b:
                    fc:c2:c3:48:c6:3f:23:f7:ba:95:f9:39:43:30:5a:
                    d5:9b:41:a0:4a:a1:8d:b1:e4:67:71:8d:65:88:16:
                    d2:16:79:53:ea:0d:12:15:91:98:8b:1e:3c:dc:39:
                    2e:2c:d2:c0:a3:d3:7a:a7:ee:2c:53:13:c1:25:fe:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:B8:43:AA:81:EC:CC:15:15:0D:DE:BA:21:93:2B:B8:78:8A:24
            X509v3 Authority Key Identifier:
                keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:dd:51:fa:4c:3a:4c:dc:36:9d:50:a9:55:35:69:e6:4b:82:
         82:97:f3:91:66:2e:7b:6b:d5:e6:9a:1e:f0:c5:f9:e8:52:b8:
         f1:7a:2a:2e:24:71:7a:21:4d:bb:14:f7:c0:7d:57:09:7f:bc:
         7a:47:73:40:04:ea:e6:56:60:20:83:7d:49:0b:c4:c1:e8:03:
         2d:5e:05:13:a8:ee:59:0c:ae:b7:fb:64:1f:11:9b:3c:cb:9a:
         66:c1:8f:ff:a4:12:8a:3c:cf:8f:2a:6c:80:91:8a:40:49:3d:
         d0:a4:3c:1c:29:19:81:e0:35:0a:22:1f:55:fc:4c:1e:ea:47:
         46:f0:bb:07:45:ec:45:48:8a:77:cc:08:9e:77:61:bb:b6:d7:
         b2:73:92:c3:e9:7a:e4:52:2e:ad:35:d4:ac:23:72:ad:fb:88:
         6c:a6:5c:a1:bf:7b:9c:c8:91:b2:0f:26:e3:45:3f:98:18:aa:
         1d:90:5c:2b:0d:37:4b:e3:83:1e:27:22:14:f2:53:16:ee:a5:
         c0:7b:5e:49:d4:ef:30:45:69:25:30:95:7d:e1:ea:7c:47:4c:
         d2:52:1e:2f:db:eb:d0:ca:9c:99:e7:a4:0f:17:c5:09:f9:ac:
         eb:f6:ce:04:85:53:db:26:c2:11:13:6f:c7:6c:85:1f:12:43:
         6b:b0:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:15 2025 by rpki-client