Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          L2gm242wX/rDIu3h6RCOJqe1bzeO3lsCmQyfxqRI2UI=
Subject key identifier:   94:30:45:80:02:00:4D:0C:AB:56:EA:62:FB:5C:0F:A5:67:14:B1:08
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       01989FA83365B9903B344663B5B0563F6E8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          162E
Signing time:             Tue 12 Aug 2025 19:00:57 +0000
Manifest this update:     Tue 12 Aug 2025 19:00:57 +0000
Manifest next update:     Wed 13 Aug 2025 19:00:57 +0000
Files and hashes:         1: 0Ox66VfhpkksOxsQKvgplGDbF6A.roa (hash: 2hQepAwHuEvKh7LX4V/wopW78ujoteaNGMyduaqzBZo=)
                          2: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: L6iI9x+Kqq7SjcTLTtoTrU2P0c40FfZZHBM90NVqLeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:a8:33:65:b9:90:3b:34:46:63:b5:b0:56:3f:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Aug 12 19:00:57 2025 GMT
            Not After : Aug 13 19:00:57 2025 GMT
        Subject: CN=9430458002004d0cab56ea62fb5c0fa56714b108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:24:39:08:bc:0c:15:e8:2c:95:c6:84:7f:
                    b6:f7:91:c2:73:fb:4d:0e:1e:fe:dc:f8:db:82:b5:
                    82:57:80:a7:83:42:97:56:cf:1b:35:ce:8d:86:29:
                    2f:4d:75:c7:d0:e7:90:f9:4a:d6:f4:19:ce:7e:84:
                    73:bd:6c:a3:d6:59:7c:36:c0:bc:9a:d8:b8:b8:16:
                    7f:15:0d:1f:7e:11:14:50:16:15:47:d7:1a:92:c6:
                    a7:ce:10:9b:0b:03:35:d9:a1:a4:a5:11:8b:b2:a5:
                    08:90:0f:d0:f8:b4:97:fb:5d:2e:5e:47:89:2a:2c:
                    b2:23:53:bc:d0:df:da:2c:2b:2c:5d:ff:de:92:5a:
                    19:44:79:55:8e:a9:19:81:c0:38:c8:9d:e5:9a:f8:
                    7c:80:7b:f4:5d:00:66:5f:6d:d3:81:42:16:50:9e:
                    85:c5:6d:5f:6f:9a:81:3b:76:fc:fd:75:fa:b4:50:
                    b6:fd:ba:2a:87:34:f0:4c:a6:8e:cd:2a:65:55:45:
                    17:26:ce:4a:48:c3:10:0c:8f:20:c8:cb:01:c8:df:
                    a4:2f:8b:30:3f:d1:44:fd:bd:52:b8:b5:22:48:64:
                    5f:d3:e7:ab:d3:b5:4c:38:ca:79:75:68:2f:25:0a:
                    b9:a0:8c:63:1d:e2:1a:93:55:72:0a:3c:ba:d3:29:
                    d8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:30:45:80:02:00:4D:0C:AB:56:EA:62:FB:5C:0F:A5:67:14:B1:08
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:19:b8:2a:54:34:3f:5c:84:c6:19:86:7a:13:f6:dc:30:8f:
         10:c4:a0:c5:36:c0:e4:d5:14:9b:4f:70:d5:df:4e:5d:57:a8:
         9d:0f:60:0c:9c:45:cb:5f:63:cb:fa:f3:61:46:0f:72:09:00:
         20:e4:dd:78:0d:b8:4f:05:d2:3d:1d:dc:c5:04:3b:4c:10:b6:
         b5:5d:8c:65:7b:19:d9:5b:09:d8:ec:6d:5d:29:e6:3a:0b:ee:
         e4:47:5c:d6:6c:65:4b:48:4b:75:a3:3e:69:6a:74:b2:c2:d8:
         da:6f:5f:ac:2b:e9:d1:eb:2d:22:af:2e:8b:c5:49:d3:5e:69:
         5d:9f:d4:88:13:b3:13:e7:a8:0d:c9:05:d7:50:2c:a2:67:71:
         c8:02:50:81:b6:4e:b4:d1:4d:88:a0:45:53:c6:74:df:da:be:
         07:7d:0f:bc:38:e3:f0:d1:c3:0f:65:ab:60:4f:73:ed:72:f6:
         94:2f:af:54:fa:9a:cd:1a:c3:68:db:4f:d5:28:98:0a:91:12:
         69:db:c2:4e:3d:89:8e:62:a3:03:bb:59:70:72:ea:c7:a8:39:
         e1:b0:40:5b:9b:be:58:e5:2d:17:81:e7:83:7c:99:0f:6a:a9:
         90:db:93:bb:16:1b:2f:87:fc:3d:dc:5c:c9:3c:73:f9:1c:aa:
         3e:46:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:34 2025 by rpki-client