Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File:                     hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier:          Vq7cpwD3M1EupZri9HSceB5Tj7bSoNXNxSrDj8/b1qU=
Subject key identifier:   72:AD:48:01:D3:02:C2:5B:B0:97:D0:81:25:3F:6F:DE:01:C2:8A:D2
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer:       /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial:       01987DC0C2896CCB8747E3F93497673B71BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number:          7F
Signing time:             Wed 06 Aug 2025 05:00:41 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:41 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:41 +0000
Files and hashes:         1: f9MGnlddFQ2IMf-Uoo2fTYxJ_co.roa (hash: kPIpbLqEj4dHSmVPx7WOIcV4CWQtCce8UvwQXn1AUT0=)
                          2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: 2u0Jp6/a25vUaIBIJ7HIXus85t355y1zZ8Pl1YP89TU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:c2:89:6c:cb:87:47:e3:f9:34:97:67:3b:71:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
        Validity
            Not Before: Aug  6 05:00:41 2025 GMT
            Not After : Aug  7 05:00:41 2025 GMT
        Subject: CN=72ad4801d302c25bb097d081253f6fde01c28ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:a9:2a:2d:35:35:fd:63:8b:e8:86:4c:2f:
                    5b:5d:19:fa:4a:0c:e1:9f:86:64:7d:3e:2a:5c:78:
                    54:28:5d:1a:52:19:35:f0:5a:97:20:62:2c:fd:4d:
                    85:12:96:67:b7:24:55:29:5a:75:39:eb:4a:9d:16:
                    cf:63:d7:f2:c9:67:5e:70:77:e2:97:0f:d5:ae:d9:
                    6b:e7:73:b3:4b:a0:ee:39:2c:46:4a:cf:35:ed:2b:
                    0b:73:6a:69:48:72:57:e8:ab:99:0e:9e:23:c9:76:
                    fc:22:b3:fc:59:3b:14:b7:fd:c0:50:a0:f2:e7:51:
                    30:44:bd:db:71:c7:45:b9:73:13:29:55:19:d8:fa:
                    ab:b4:86:e9:09:21:69:d6:78:c8:ed:75:70:a0:0a:
                    d3:1e:78:87:31:64:c2:95:16:af:ef:73:85:96:72:
                    f6:b4:9c:a1:47:54:b0:96:83:7f:a1:1d:47:5b:84:
                    99:f6:7d:9f:53:60:25:7d:fc:30:f8:5b:51:90:0b:
                    4d:f6:82:74:09:6c:a9:d5:ab:33:d9:9a:93:85:a3:
                    d7:a8:a6:4e:e4:18:c7:2e:0f:5b:cc:9d:70:d8:73:
                    18:0d:9b:1b:50:82:2a:ac:7a:26:cc:c8:61:04:5a:
                    14:86:a7:98:07:72:f8:86:6e:01:9d:ed:2c:b2:6d:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AD:48:01:D3:02:C2:5B:B0:97:D0:81:25:3F:6F:DE:01:C2:8A:D2
            X509v3 Authority Key Identifier:
                keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4a:fe:a1:1f:28:08:96:2a:a0:be:b5:87:6a:73:b4:4e:83:
         8a:e9:39:06:fe:e3:19:ca:f8:df:ef:8b:7b:72:dc:9a:db:aa:
         cb:ed:d4:56:c1:d7:29:70:2b:ba:ea:69:70:90:4a:fa:5e:33:
         18:f9:b3:66:1c:d3:79:ae:ad:66:b2:5a:96:b2:b2:45:85:76:
         6e:87:98:03:0d:3d:c7:61:12:a0:97:18:99:92:7e:5b:d3:cd:
         9d:aa:0e:24:8a:1a:1e:ce:52:1a:4f:c4:c8:c0:69:57:c7:7c:
         92:40:33:43:05:b3:ef:af:22:c9:4a:67:d8:b3:0f:c7:d9:dc:
         7d:8c:52:c7:40:de:03:9e:ac:08:9c:0d:13:31:25:f4:5f:73:
         fd:be:4e:64:2d:7b:40:79:64:1a:42:44:75:41:7b:ec:cd:28:
         79:18:8e:54:b5:6b:95:17:e1:7a:61:50:16:d2:da:0b:f5:b5:
         c5:ad:f4:42:23:6d:55:5b:23:07:08:bc:01:7a:f7:6f:d1:a4:
         41:9b:e0:71:9c:0a:fb:4e:4b:c6:dd:07:16:98:7d:a8:98:ad:
         81:0c:08:67:9d:c5:34:ed:94:ca:3e:8f:b7:b5:ea:6f:33:7f:
         e5:24:5b:76:e4:c5:ed:81:2d:3a:b5:d8:41:75:e1:84:c0:05:
         f2:9d:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:23 2025 by rpki-client