Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File:                     HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier:          gnCV3Bt0mR3+z+f68ivwr7dq1iz2yUP0H/8KUOqmZo8=
Subject key identifier:   21:93:3C:48:88:71:E7:F3:03:4C:5B:1C:E4:74:52:F4:2B:1C:DA:77
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer:       /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial:       01988BB340B009CF5B7224C5B370622AAEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number:          0DE6
Signing time:             Fri 08 Aug 2025 22:00:37 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:37 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:37 +0000
Files and hashes:         1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
                          2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: 74GKDtttHpG1KwENNkr+e25NKKby2dnAzwMh35+E3AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:40:b0:09:cf:5b:72:24:c5:b3:70:62:2a:ae:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
        Validity
            Not Before: Aug  8 22:00:37 2025 GMT
            Not After : Aug  9 22:00:37 2025 GMT
        Subject: CN=21933c488871e7f3034c5b1ce47452f42b1cda77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:69:ac:c4:57:11:a1:de:ef:0d:2a:b5:33:
                    5e:11:b0:7d:9f:81:aa:49:76:20:31:2e:63:4d:c3:
                    5e:5f:77:8d:38:9e:90:e3:5e:91:00:4a:93:1a:43:
                    d6:14:41:a1:cf:99:ac:8c:48:f7:37:f1:85:db:dd:
                    96:d3:e5:f1:5b:d5:8e:ae:90:03:40:2a:1f:31:97:
                    b6:19:7d:cd:91:97:38:f5:09:ab:91:ca:ba:00:8f:
                    28:71:50:ab:69:d9:4f:57:3a:92:db:3b:e3:76:be:
                    42:de:fd:1b:3b:e0:cf:20:a7:7a:4c:9f:a4:da:32:
                    c6:18:66:0e:f6:da:52:96:19:23:83:05:d4:87:e7:
                    31:96:b7:56:0c:ab:13:4d:e4:c8:58:7f:0b:46:db:
                    67:d2:61:49:ad:b3:5e:02:9b:eb:47:25:c3:1a:37:
                    d0:70:10:b1:b8:14:2a:b6:0e:8b:9d:db:f6:fd:88:
                    e9:26:60:9c:3a:af:ba:5e:e6:1c:4f:8d:65:47:c0:
                    11:56:4d:c4:18:68:ff:16:6e:91:4d:37:d1:f0:c3:
                    a2:e7:84:10:8c:7e:0e:a8:ab:79:8b:54:5d:23:ac:
                    ed:24:65:87:05:67:8b:9c:07:fd:4e:a6:5d:0a:aa:
                    73:12:1b:e5:aa:2f:e2:73:f9:b1:d8:da:17:a8:59:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:93:3C:48:88:71:E7:F3:03:4C:5B:1C:E4:74:52:F4:2B:1C:DA:77
            X509v3 Authority Key Identifier:
                keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:e6:68:83:bc:92:59:5a:42:be:51:09:88:30:35:60:f5:
         dd:76:98:4f:50:22:a3:31:67:5e:38:6e:86:e4:f5:8d:83:24:
         4c:04:d5:37:99:d2:2c:ae:91:bf:43:d8:f9:fc:f9:1d:56:fb:
         f3:19:fb:03:ec:0e:b8:2a:f3:2b:8d:c8:2c:10:29:59:60:a5:
         f8:11:40:00:82:14:c0:a6:f4:fc:c3:41:70:5d:2a:7b:c2:04:
         56:85:32:37:06:97:64:d3:45:89:e5:df:7f:8a:5f:a7:33:cf:
         f6:1f:aa:74:d7:f5:6a:fa:0d:6f:0b:c4:44:a1:0c:e5:17:77:
         b8:b3:8d:23:42:b1:d6:7e:f8:ad:e6:c6:cc:91:11:69:aa:54:
         9b:13:80:5c:09:2c:68:f9:39:1c:44:d7:01:2d:aa:d4:58:1c:
         3a:5a:50:bc:c1:30:55:13:8f:f0:c9:48:64:9e:b1:14:54:e5:
         f6:81:90:15:cb:80:b7:39:5c:a3:d0:60:93:e2:8e:c4:cf:3b:
         47:a5:7f:51:d6:75:ec:be:1b:3a:3f:96:d2:01:9d:6a:03:a3:
         65:51:2f:aa:ad:5a:2f:f8:9f:61:42:ad:77:d6:09:63:23:76:
         15:7c:f4:06:3b:93:64:92:59:a2:2b:67:a3:68:72:92:af:81:
         63:dc:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:31 2025 by rpki-client