Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File:                     hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier:          gjJZ4PY2MajJIdW11ZprC2ccmimSj3jYLeDCpINsfNE=
Subject key identifier:   6F:FD:F1:FB:EB:92:5A:81:BE:51:5C:D4:6E:5C:B5:10:EC:E5:EC:B4
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer:       /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial:       019A51877E656439B455691B196F854675C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number:          1332
Signing time:             Wed 05 Nov 2025 01:00:25 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:25 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:25 +0000
Files and hashes:         1: EAjdVmmPDgRsaYdJzqxZsWJ1dtQ.roa (hash: MpPa88zI8gAyzjuIqd3qZ9dmTTo9CAG0jQ+czPWKrY0=)
                          2: ZpIa8d84ZFXt_ZFQqAeQWbEn8cE.roa (hash: yg+iHdLIlyvv1zJT3FKVPdTj2ezKdgH8bzRxXJFfD+M=)
                          3: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (hash: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=)
                          4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: KrpsEcxFd0n+uoxY27j+QdyS3USHsLyOBazQdqKQV1M=)
                          5: pT_R2pT5fkigCUc46LgmyNvu26w.roa (hash: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:7e:65:64:39:b4:55:69:1b:19:6f:85:46:75:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
        Validity
            Not Before: Nov  5 01:00:25 2025 GMT
            Not After : Nov  6 01:00:25 2025 GMT
        Subject: CN=6ffdf1fbeb925a81be515cd46e5cb510ece5ecb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:6b:35:b2:68:cc:fa:30:9b:f0:8e:5d:b2:
                    fc:a8:94:87:be:d3:c2:2f:d2:12:3e:29:43:ca:2b:
                    8a:4d:b6:36:27:d7:89:66:ac:36:83:b0:a1:63:92:
                    0d:87:0d:c0:93:af:5f:dd:9c:77:ed:df:dc:ff:20:
                    cb:ad:42:70:56:27:ec:fc:1b:6b:23:a7:fd:c9:b4:
                    49:e1:0f:e8:48:44:98:5f:05:ad:57:41:d6:14:58:
                    0a:50:8c:de:da:1d:56:62:17:40:75:44:88:59:10:
                    88:27:65:fc:63:f7:5f:33:ba:3c:bf:be:58:21:89:
                    e8:97:20:fb:c5:ad:7c:4d:d8:9b:c5:18:9a:bc:a7:
                    d7:5d:b3:99:5c:03:b4:fe:dd:65:99:ab:04:cc:d0:
                    2d:be:ae:d5:40:90:b3:a6:3a:2f:8d:3b:0d:86:0a:
                    89:82:30:c1:93:d6:de:2d:1e:26:58:35:20:20:0f:
                    1b:d9:92:7a:49:ec:b7:e5:27:86:2f:97:4a:e0:73:
                    03:2c:11:88:98:b6:8b:b0:4c:4b:63:89:f0:f6:f9:
                    ef:ad:b4:92:b8:f4:d2:39:fd:b8:57:3c:cc:06:b9:
                    50:fa:dd:8e:91:50:06:bb:88:e4:56:15:5a:ae:d3:
                    73:b6:1c:f1:87:b9:34:7a:a1:49:18:9b:9d:45:3a:
                    6b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FD:F1:FB:EB:92:5A:81:BE:51:5C:D4:6E:5C:B5:10:EC:E5:EC:B4
            X509v3 Authority Key Identifier:
                keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:94:0a:56:40:d3:1a:e3:62:ad:f0:68:40:b4:d1:1a:52:
         24:12:9c:51:f1:9a:74:34:c3:14:88:ef:85:1e:65:36:bd:5f:
         22:d2:78:80:f6:ae:f4:a7:0e:49:55:4c:6d:e3:d7:40:4e:f9:
         cf:1d:3e:73:86:69:b9:8f:74:37:57:7a:23:a2:ec:c5:e3:3a:
         be:78:67:05:aa:49:9c:3a:be:01:b8:1e:79:6e:0d:7b:71:5a:
         ac:9e:39:11:32:a0:a0:a0:f9:ce:f5:fa:44:fb:82:ec:c6:ab:
         54:ec:bb:8e:3e:0f:29:fb:9b:3e:1c:ac:0e:c8:a4:c5:c0:87:
         66:5b:63:ff:6f:59:b0:96:51:18:e5:3e:8f:18:bb:ab:d5:fe:
         f2:ff:c6:5e:27:d4:f6:b8:04:5b:e5:90:c6:e2:94:e5:44:0c:
         1d:51:ad:60:0b:6f:e7:00:a7:16:0d:6b:e0:08:67:c1:7d:18:
         f1:90:71:35:f0:ca:4e:bd:93:62:aa:5d:83:65:48:e8:0e:ba:
         67:5b:0b:62:3e:c0:51:0b:78:1f:b0:d6:cf:d7:26:8c:2f:85:
         5c:77:4e:81:4a:73:26:cf:5c:4d:1e:2e:6a:c7:2e:f4:90:e3:
         2c:ff:df:2f:7e:f7:ee:18:d8:b0:a9:9a:85:80:72:ec:84:fc:
         66:ba:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:04:55 2025 by rpki-client