Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          C2zaoNNult9sit6Qg33AhzT1hTWaOToF6Q0SfOfWwxc=
Subject key identifier:   70:D9:3A:A9:9E:1D:85:94:DB:2B:EA:2F:FC:7A:5E:ED:4A:3C:1D:34
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       019874190728612C15C7D01B712625B969F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          06FD
Signing time:             Mon 04 Aug 2025 08:00:53 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:53 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:53 +0000
Files and hashes:         1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=)
                          2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: pGN3+LBB4lzGGZID4AjcLNNUM8hpv+r+xWHb5yYx3UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:07:28:61:2c:15:c7:d0:1b:71:26:25:b9:69:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: Aug  4 08:00:53 2025 GMT
            Not After : Aug  5 08:00:53 2025 GMT
        Subject: CN=70d93aa99e1d8594db2bea2ffc7a5eed4a3c1d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:6c:1f:3b:68:b3:22:57:97:2d:3a:cf:1f:
                    a6:61:4c:06:f7:35:51:11:46:8e:28:e2:0d:a8:ec:
                    a2:48:87:0f:cd:af:84:f8:40:54:4e:58:73:02:61:
                    84:7e:2e:d8:62:b6:dc:30:2e:11:51:81:4e:3c:dd:
                    dd:b7:94:c3:54:b6:0b:dc:22:a5:e3:2b:7f:a0:50:
                    18:6d:fc:72:29:77:fb:2d:df:c3:18:db:78:33:71:
                    e7:a5:7a:2f:11:ed:c0:7a:b4:14:6b:9c:fa:a1:e9:
                    a6:80:07:76:52:96:3c:98:c6:83:ed:f9:74:7d:c8:
                    50:0b:39:36:0c:68:80:de:0b:80:77:d3:03:40:9f:
                    c4:5a:c4:05:11:0c:6b:94:19:30:b1:13:25:8b:c0:
                    f3:20:23:31:4e:59:ea:77:b4:4c:69:4d:be:d1:56:
                    aa:ae:57:6e:d0:32:2c:c2:56:96:0f:33:66:11:63:
                    f5:97:42:d6:50:ac:8e:b4:71:bd:45:1c:10:16:07:
                    a9:38:6c:40:e5:c9:7d:31:28:67:05:90:1e:5e:0e:
                    30:7a:4d:46:e5:59:23:c0:39:f8:4f:a8:6d:9a:52:
                    b6:ef:32:14:f3:d1:d9:f5:80:24:72:2c:30:32:b3:
                    b9:d4:50:ae:e9:9b:f9:d3:52:f2:86:67:b4:03:d1:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D9:3A:A9:9E:1D:85:94:DB:2B:EA:2F:FC:7A:5E:ED:4A:3C:1D:34
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5e:ff:85:29:ae:bf:b8:e8:f5:e5:8e:95:b1:23:b4:b4:c7:
         63:ee:be:6f:13:ad:84:01:88:1f:6f:ab:6c:e6:6f:ad:ea:5b:
         82:2f:ea:c5:10:fc:e4:df:9b:4c:68:1e:67:04:ec:30:ad:e2:
         86:d5:73:27:f9:09:22:75:42:44:24:a6:b1:bb:c3:b9:07:c9:
         2d:a2:dc:50:0e:00:86:ac:78:5b:fa:4a:ed:90:17:9e:02:d1:
         84:e0:7a:49:6e:1d:61:54:39:37:5d:b8:c9:bd:23:36:c7:a6:
         54:fb:d9:1a:85:6f:87:95:6d:c6:22:91:79:cd:2d:cb:81:ef:
         c5:ae:53:a9:b5:5e:dd:62:a7:27:8c:12:04:bb:7c:6b:77:6f:
         e1:df:38:e9:13:04:8c:71:ba:87:cb:ad:12:dd:19:b6:b9:b3:
         ed:99:ff:24:da:f8:7b:dd:19:7a:dc:4e:9b:53:39:58:ee:ff:
         96:6c:2d:ed:d1:c1:bf:f6:a4:cc:de:2c:53:c8:4c:f7:51:a1:
         2d:65:02:bd:a9:a5:76:b0:d3:50:34:76:f3:eb:c0:6e:7f:5c:
         e3:04:9a:91:cf:60:51:23:be:13:56:9d:6b:61:e3:94:79:eb:
         b5:1b:6e:9c:ba:1e:52:0b:e2:85:90:c8:5d:35:9c:bc:3b:9b:
         14:be:e0:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GQcoYSwVx9AbcSYluWnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl
ZTExZTMwHhcNMjUwODA0MDgwMDUzWhcNMjUwODA1MDgwMDUzWjAzMTEwLwYDVQQD
Eyg3MGQ5M2FhOTllMWQ4NTk0ZGIyYmVhMmZmYzdhNWVlZDRhM2MxZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQdsHztosyJXly06zx+mYUwG9zVR
EUaOKOINqOyiSIcPza+E+EBUTlhzAmGEfi7YYrbcMC4RUYFOPN3dt5TDVLYL3CKl
4yt/oFAYbfxyKXf7Ld/DGNt4M3HnpXovEe3AerQUa5z6oemmgAd2UpY8mMaD7fl0
fchQCzk2DGiA3guAd9MDQJ/EWsQFEQxrlBkwsRMli8DzICMxTlnqd7RMaU2+0Vaq
rldu0DIswlaWDzNmEWP1l0LWUKyOtHG9RRwQFgepOGxA5cl9MShnBZAeXg4wek1G
5VkjwDn4T6htmlK27zIU89HZ9YAkciwwMrO51FCu6Zv501Lyhme0A9HRjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDZOqmeHYWU2yvqL/x6Xu1KPB00MB8GA1UdIwQY
MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt
ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1
LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALF7/hSmu
v7jo9eWOlbEjtLTHY+6+bxOthAGIH2+rbOZvrepbgi/qxRD85N+bTGgeZwTsMK3i
htVzJ/kJInVCRCSmsbvDuQfJLaLcUA4Ahqx4W/pK7ZAXngLRhOB6SW4dYVQ5N124
yb0jNsemVPvZGoVvh5VtxiKRec0ty4Hvxa5TqbVe3WKnJ4wSBLt8a3dv4d846RME
jHG6h8utEt0Ztrmz7Zn/JNr4e90ZetxOm1M5WO7/lmwt7dHBv/akzN4sU8hM91Gh
LWUCvamldrDTUDR28+vAbn9c4wSakc9gUSO+E1ada2HjlHnrtRtunLoeUgvihZDI
XTWcvDubFL7gMQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:05 2025 by rpki-client