Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          0UQWzA8U23YlJb/GDGXZtisI2TR+C1zAwJ/hoG22D3s=
Subject key identifier:   87:10:43:6C:D7:6E:D7:35:9E:2B:26:03:DC:DC:93:D0:7E:7B:07:00
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       019881671AE055D4E6E581BDDF144A02CFF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          12F4
Signing time:             Wed 06 Aug 2025 22:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:14 +0000
Files and hashes:         1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
                          2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: OGwCagcnbKFaPSE+yLuWUccAZRB7NeN4w6TKtZ2jIFU=)
                          3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
                          4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
                          5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
                          6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
                          7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
                          8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:1a:e0:55:d4:e6:e5:81:bd:df:14:4a:02:cf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: Aug  6 22:01:14 2025 GMT
            Not After : Aug  7 22:01:14 2025 GMT
        Subject: CN=8710436cd76ed7359e2b2603dcdc93d07e7b0700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:a4:bb:1d:7c:be:fc:f7:c6:cd:2c:8c:02:
                    04:b2:f5:e0:2e:9e:67:e4:7c:b6:3d:45:ed:8a:bd:
                    28:6f:e6:95:ad:29:f5:dc:98:e0:c9:91:b2:fc:53:
                    e6:24:4b:ad:16:d0:a2:0d:bd:5d:76:92:11:b0:3f:
                    86:a1:6f:62:b3:34:b7:d9:59:c2:b3:b9:68:ef:65:
                    1c:53:bb:a6:c4:55:3e:33:21:b8:a2:f5:51:ea:2e:
                    8b:2e:ba:17:37:ee:14:c8:ff:cf:51:18:4f:e1:d1:
                    c6:4e:3a:ff:04:52:51:85:b0:84:dc:57:13:b2:10:
                    68:ef:09:08:bc:f6:0a:d2:fc:a6:3d:1a:5a:30:84:
                    1a:55:7c:c1:f9:52:cd:9e:dd:0c:fd:64:83:5b:48:
                    90:0a:d3:8b:d2:0e:67:d2:70:21:d3:cd:62:d5:5c:
                    d7:99:d1:6f:e5:70:6b:5b:1e:10:78:d4:8b:82:60:
                    f1:8d:57:ea:8f:d7:9d:02:12:98:8b:b8:e2:64:97:
                    67:54:72:b1:42:5e:5d:71:f9:b8:e7:90:0e:ae:1a:
                    c8:0b:a7:c1:78:c9:d1:98:38:55:e8:d6:2d:29:43:
                    98:20:79:53:f9:3f:78:5c:f4:34:c9:e2:ea:f9:53:
                    f1:01:34:c3:c4:70:98:72:77:59:98:e2:6f:e6:2d:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:10:43:6C:D7:6E:D7:35:9E:2B:26:03:DC:DC:93:D0:7E:7B:07:00
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:69:9e:cc:14:3d:65:9d:27:c8:e2:1c:47:14:50:85:25:25:
         29:a9:1e:c4:94:63:8d:66:ed:52:30:69:4d:9e:40:07:19:18:
         70:fb:83:52:6e:72:7e:48:fd:dd:05:18:a4:5c:d2:af:76:52:
         ea:b5:1d:60:86:50:55:3a:e0:27:a2:26:06:74:62:a4:8c:a4:
         b0:3b:5b:ea:b9:6a:70:c3:49:63:4a:4a:84:63:3f:12:ce:22:
         e7:a3:51:d5:77:66:66:bf:0e:a1:d7:07:f3:e8:0c:fd:87:14:
         3d:76:86:48:6d:0e:75:37:26:6d:2c:90:25:d6:da:6f:04:48:
         ba:7d:28:73:45:85:42:43:c8:47:1f:dc:b6:1c:68:d6:03:dc:
         f7:d4:6c:6c:14:17:b5:ab:7d:1f:4f:aa:cf:cc:12:eb:22:ba:
         e8:f1:ac:a6:3e:17:bc:f6:c6:ff:8c:4d:8d:15:3f:9c:e4:0d:
         ab:5c:52:2d:15:02:ba:82:25:5f:47:43:0c:48:66:7f:34:f4:
         76:95:14:c7:e8:88:92:9c:2a:69:68:49:aa:cd:29:5b:c1:ba:
         ee:62:2a:26:21:38:f2:ed:92:8c:2e:2d:46:9a:6e:ef:cd:e7:
         d4:0d:3d:5a:5a:4e:1a:78:80:2f:39:43:aa:d9:5e:60:8a:8d:
         69:2f:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:29 2025 by rpki-client