Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File:                     rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier:          rDHaQGNAW0Z2DlTVk20E/y6umjSZenL8/3734hQ51cU=
Subject key identifier:   6E:48:01:15:52:F2:9E:9F:36:32:89:C0:D1:D6:6B:D7:F3:46:92:48
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer:       /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial:       0198733D99684FEC42F861B91C2451018FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number:          0F24
Signing time:             Mon 04 Aug 2025 04:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:13 +0000
Files and hashes:         1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=)
                          2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: QJL6BetdWjH0OzFfzG5LiOWSzv8OBvrvsWz4GsRnBSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:99:68:4f:ec:42:f8:61:b9:1c:24:51:01:8f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
        Validity
            Not Before: Aug  4 04:01:13 2025 GMT
            Not After : Aug  5 04:01:13 2025 GMT
        Subject: CN=6e48011552f29e9f363289c0d1d66bd7f3469248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:39:61:10:0d:73:c6:da:ac:40:16:17:41:
                    c1:ed:f2:48:fc:98:2a:6b:b9:8f:02:a0:01:1e:ab:
                    d6:a4:ef:c5:3d:90:64:09:70:ce:d4:41:ca:25:18:
                    6f:96:c9:08:37:e5:28:fd:6d:1d:c6:9e:56:ae:60:
                    cf:ce:ab:3d:c7:57:70:54:2c:38:58:06:25:a5:9d:
                    c8:dc:17:04:30:a4:af:0d:00:0b:76:a1:58:50:2d:
                    f9:29:3e:7f:71:0d:ae:73:1a:d6:05:03:62:db:c3:
                    a5:a6:7b:49:25:d2:68:3d:28:8b:b6:df:37:86:cb:
                    cf:52:1a:ec:a0:0e:48:43:cd:68:b4:45:19:a2:7c:
                    2c:b8:e5:54:0e:15:09:91:e1:c8:10:32:f0:e7:04:
                    d7:1c:39:2c:d3:3a:f6:2f:24:0e:4c:8d:93:8d:0d:
                    71:8b:e9:ed:3c:79:8b:65:7b:a7:d9:dd:e6:6c:e8:
                    cd:4f:85:17:e9:42:c7:38:e4:cf:7e:d8:17:e2:bf:
                    db:80:2c:1d:97:42:54:05:f5:43:1b:8d:84:00:1c:
                    27:c2:e3:ff:7e:21:bb:fd:2b:1b:80:b1:11:59:f3:
                    81:e5:87:63:f8:d6:eb:7d:b7:57:1c:80:eb:f7:68:
                    8a:20:7f:87:63:b6:a6:28:20:58:ab:e1:a0:14:a2:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:48:01:15:52:F2:9E:9F:36:32:89:C0:D1:D6:6B:D7:F3:46:92:48
            X509v3 Authority Key Identifier:
                keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:6d:f6:b2:32:31:71:b5:fb:85:e0:46:9d:53:e3:c4:a5:
         be:23:3b:a8:c7:46:41:99:ed:8a:1e:d2:a3:bf:63:4f:9c:93:
         31:c6:24:87:3d:3c:09:5c:40:20:99:c3:f9:8a:4f:82:b9:e9:
         3a:c2:b8:72:2a:e0:24:6a:e4:18:e1:45:d0:d0:00:13:4a:55:
         23:48:2b:bc:9d:ee:fe:96:4b:3c:fb:a0:85:31:f6:ed:3d:0b:
         52:36:3f:bf:17:81:7f:59:8d:e3:15:3a:d2:c6:97:52:9d:af:
         59:46:72:27:5c:7b:0f:21:15:28:ec:8c:7b:a2:f7:0b:13:b9:
         7a:2a:75:fa:78:3a:65:64:f6:0d:6d:04:8c:c4:f1:bd:83:91:
         62:45:9a:a2:af:cc:8e:4f:09:92:67:b5:83:bc:49:81:fe:ab:
         c4:2d:19:1e:bc:2b:34:ec:04:8c:1e:6d:a9:8c:6f:f8:18:a3:
         0f:1f:a8:d9:46:ed:71:2e:c3:55:22:95:85:bc:65:4e:5b:bd:
         eb:a8:01:77:3c:bd:81:e8:96:02:d1:7a:a5:f1:2a:c7:80:20:
         29:d9:24:22:91:7f:89:84:05:41:db:90:e9:f6:a9:07:53:cb:
         52:79:bb:d1:6a:7b:19:9d:55:12:96:9d:bf:81:8b:11:20:84:
         4d:f2:c0:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPZloT+xC+GG5HCRRAY/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2JlOTJkYmZlMzg1NjE1NjQwNmZhNzI1ZTE1ZGY1OTg4
ZTVjMTAwHhcNMjUwODA0MDQwMTEzWhcNMjUwODA1MDQwMTEzWjAzMTEwLwYDVQQD
Eyg2ZTQ4MDExNTUyZjI5ZTlmMzYzMjg5YzBkMWQ2NmJkN2YzNDY5MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiY5YRANc8barEAWF0HB7fJI/Jgq
a7mPAqABHqvWpO/FPZBkCXDO1EHKJRhvlskIN+Uo/W0dxp5WrmDPzqs9x1dwVCw4
WAYlpZ3I3BcEMKSvDQALdqFYUC35KT5/cQ2ucxrWBQNi28OlpntJJdJoPSiLtt83
hsvPUhrsoA5IQ81otEUZonwsuOVUDhUJkeHIEDLw5wTXHDks0zr2LyQOTI2TjQ1x
i+ntPHmLZXun2d3mbOjNT4UX6ULHOOTPftgX4r/bgCwdl0JUBfVDG42EABwnwuP/
fiG7/SsbgLERWfOB5Ydj+NbrfbdXHIDr92iKIH+HY7amKCBYq+GgFKLwrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5IARVS8p6fNjKJwNHWa9fzRpJIMB8GA1UdIwQY
MBaAFKx76S2/44VhVkBvpyXhXfWYjlwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgt
OTlkNzI1MmY1YmUwLzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgtOTlkNzI1MmY1YmUw
LzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQRt9rIy
MXG1+4XgRp1T48SlviM7qMdGQZntih7So79jT5yTMcYkhz08CVxAIJnD+YpPgrnp
OsK4cirgJGrkGOFF0NAAE0pVI0grvJ3u/pZLPPughTH27T0LUjY/vxeBf1mN4xU6
0saXUp2vWUZyJ1x7DyEVKOyMe6L3CxO5eip1+ng6ZWT2DW0EjMTxvYORYkWaoq/M
jk8Jkme1g7xJgf6rxC0ZHrwrNOwEjB5tqYxv+BijDx+o2UbtcS7DVSKVhbxlTlu9
66gBdzy9geiWAtF6pfEqx4AgKdkkIpF/iYQFQduQ6fapB1PLUnm70Wp7GZ1VEpad
v4GLESCETfLAow==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:34 2025 by rpki-client