Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
File:                     H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json)
Hash identifier:          sSXnrQzlPBCWCxPMRpuaV83l6cY8/dHu0SoFmJpvVC8=
Subject key identifier:   46:EF:F2:A5:9D:D1:76:F5:FB:28:33:D2:73:BC:D4:10:9F:68:DD:6B
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Certificate issuer:       /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial:       01988D6ABDB3D9F45CA24A996646E77F4449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
Manifest number:          1623
Signing time:             Sat 09 Aug 2025 06:00:39 +0000
Manifest this update:     Sat 09 Aug 2025 06:00:39 +0000
Manifest next update:     Sun 10 Aug 2025 06:00:39 +0000
Files and hashes:         1: EmLYbat0-CjjrryGAbAlQnrrrrQ.roa (hash: 8A9ahdOL6eJIIDSIKOF59+Qm0B8lNaZhUtGUWL64Trk=)
                          2: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: DUw9Ocfi8JKuU2amJI9qhr+h6a4lMq/4Ivy3TapvxMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:6a:bd:b3:d9:f4:5c:a2:4a:99:66:46:e7:7f:44:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
        Validity
            Not Before: Aug  9 06:00:39 2025 GMT
            Not After : Aug 10 06:00:39 2025 GMT
        Subject: CN=46eff2a59dd176f5fb2833d273bcd4109f68dd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:d7:51:fe:20:3d:6c:f5:0b:d7:75:a4:e9:
                    cf:89:75:5c:36:51:4a:39:53:72:6c:e5:79:a5:f6:
                    71:2b:f0:bc:ab:1b:0b:43:32:e1:15:b9:d5:2a:2f:
                    31:95:94:6d:38:46:f5:87:fd:f4:0a:24:a7:95:5c:
                    40:42:85:1e:a7:70:5e:5b:e6:d6:df:ca:4c:98:4a:
                    36:b3:ef:08:42:9b:78:33:9c:44:5c:7c:2c:f3:82:
                    76:c4:c0:42:74:6b:c4:08:73:d2:b2:fa:8b:9c:d5:
                    fb:8f:fb:1c:43:28:3f:47:4b:6a:c0:40:09:b4:04:
                    45:d8:2d:92:a4:c4:f3:43:07:83:83:7e:6b:87:76:
                    cb:ec:e5:b4:5f:fb:c8:25:36:ff:ef:f3:af:5d:43:
                    b6:45:fa:c8:66:ee:bd:45:d7:27:d4:62:06:cd:48:
                    e9:f8:fd:6f:d7:b5:ba:5a:de:dd:c9:d9:06:bc:b3:
                    77:df:1b:6c:7f:60:71:8b:37:2d:b3:a6:04:a3:5d:
                    80:87:36:b3:72:87:98:fd:90:39:99:ac:b0:a1:76:
                    ec:57:d4:5a:c3:f8:1c:f3:b7:21:4a:91:93:f5:8f:
                    bf:69:c7:e7:a3:c6:ed:02:3f:76:8b:5b:f8:16:b1:
                    da:db:2e:77:cf:98:32:12:eb:c1:a5:19:9f:e7:4b:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EF:F2:A5:9D:D1:76:F5:FB:28:33:D2:73:BC:D4:10:9F:68:DD:6B
            X509v3 Authority Key Identifier:
                keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:62:9c:97:e0:b4:11:46:f9:fc:d4:9e:c9:fe:a0:c7:3c:
         d3:f6:e4:75:4c:97:e8:6c:fd:ae:cc:3a:26:b3:a6:29:b1:19:
         7c:d5:22:9d:fa:57:24:48:b2:b1:f3:1b:ab:7d:65:6a:ff:a2:
         d8:d9:52:f9:fb:1c:9a:55:3c:68:75:e5:44:58:64:c1:d3:0c:
         fa:f2:09:d1:f1:cf:e8:54:a3:2a:6f:34:21:84:2a:18:d2:26:
         46:1e:3d:1c:ae:90:72:43:c5:fd:1e:13:64:88:f4:3c:cb:42:
         5b:60:ba:fd:b7:7e:1f:38:42:4a:63:02:2a:37:52:c1:35:4a:
         fe:e0:cb:42:ff:51:37:bb:63:b5:15:ef:42:42:1f:8f:4e:1d:
         14:f3:34:7c:db:b6:16:9a:f3:fe:dd:0d:d8:9c:06:39:5d:e0:
         17:96:b4:24:a0:e1:e9:d6:ac:23:3d:ec:ad:77:88:91:27:e6:
         b6:e8:55:f1:4d:f2:cc:97:e8:76:ce:d2:ae:0d:ee:1f:84:a4:
         e8:35:93:2a:68:f0:c2:7e:83:95:b7:bc:00:ea:fc:ed:1e:c1:
         4a:ce:f5:6d:01:ac:a5:37:6b:e6:2d:1f:8a:10:17:2e:7b:d5:
         65:39:2b:67:9e:02:b5:4c:25:5d:a7:bd:b1:a3:2d:d3:7e:90:
         d2:60:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:25 2025 by rpki-client