Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File:                     HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier:          vFkQbh/3SQUh68PeK29zaneUXonXiJPmFZUOcLf2tO0=
Subject key identifier:   AF:8F:47:C5:29:9C:83:44:92:4C:E2:F6:48:44:FF:43:FB:3B:C1:3E
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer:       /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial:       0198752B74C08A0EB0E7889D00FC85679F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number:          161D
Signing time:             Mon 04 Aug 2025 13:00:38 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:38 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:38 +0000
Files and hashes:         1: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: 00wQvmSRziwncKrThXbbGBtzOTWLa8408IH45+3+48c=)
                          2: JrMu8Fv-EJ0gYHcDKiU_A3eevzc.roa (hash: 6s6fSOnj2fawBTt5pakrIRbKDkLV0dgDjLyUP/ka7Zs=)
                          3: Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa (hash: c4F3qlWubFRDD6IUHkMCGZaiuQoE5JPsyXqZuaXssXk=)
                          4: sZOw6ZmAV-eW5usk1RjXBfJwu3k.roa (hash: xYRWDuxjHSuoMKKmk6k/DnQlZPxerY0wU1cLVyqv9fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:74:c0:8a:0e:b0:e7:88:9d:00:fc:85:67:9f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
        Validity
            Not Before: Aug  4 13:00:38 2025 GMT
            Not After : Aug  5 13:00:38 2025 GMT
        Subject: CN=af8f47c5299c8344924ce2f64844ff43fb3bc13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:03:4b:76:ad:64:93:92:90:47:15:f5:20:
                    e7:a9:82:65:20:54:fd:d9:0c:49:af:5f:d5:50:54:
                    1e:fc:d5:1d:c0:3e:52:0b:42:21:79:01:ec:5d:54:
                    f8:82:31:3f:40:67:0b:8f:fc:a0:9c:84:e6:de:11:
                    d6:ec:65:58:5d:3e:79:ba:4d:9e:d5:8c:d0:ad:af:
                    aa:5d:1a:ed:02:21:5f:e6:24:8d:33:b3:43:ae:b3:
                    86:d8:7e:fa:18:01:f0:90:2f:a3:95:1e:b4:c1:82:
                    96:95:d4:4b:81:58:26:9b:22:f4:49:78:5c:41:d0:
                    a4:e3:d1:ad:eb:49:e5:25:89:e0:44:1d:ef:ba:d4:
                    e6:fc:0a:39:2f:2c:bb:af:87:9e:e9:45:fe:52:97:
                    1e:a6:cf:7e:72:b0:59:dd:89:37:3c:c1:56:08:ac:
                    9e:86:bd:2f:0a:dc:54:df:47:ab:01:6d:cc:b9:8b:
                    27:86:d5:9c:75:d4:63:4d:ad:e7:60:5a:18:a9:2a:
                    80:6d:a3:e8:08:c8:a1:33:fa:2d:1e:d1:ab:25:2a:
                    58:89:3c:7b:7c:02:40:00:e1:8e:67:22:a1:8f:25:
                    7a:15:d1:43:d7:e3:73:df:ee:af:34:50:71:78:5e:
                    15:d0:d5:a3:91:9b:90:5a:1b:84:7a:2b:98:f3:92:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:47:C5:29:9C:83:44:92:4C:E2:F6:48:44:FF:43:FB:3B:C1:3E
            X509v3 Authority Key Identifier:
                keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:cd:3f:56:4d:74:a0:2a:b9:b6:36:cc:b7:80:cd:b1:4d:84:
         a8:2f:8d:a4:84:9b:51:92:3f:a1:cf:91:81:9c:39:ce:70:be:
         51:eb:d0:b3:e3:8c:e9:51:f3:85:ad:1a:e1:44:e1:5b:cd:2e:
         11:3d:2e:7c:36:82:ad:56:a5:58:c0:d5:41:34:41:30:6d:fd:
         06:10:1b:76:98:9c:da:4a:7c:df:15:eb:f2:ac:30:20:f6:b7:
         7d:ca:98:ae:a2:fb:07:17:5c:96:de:57:ad:9d:94:1c:07:a1:
         07:09:bb:cd:dd:39:66:b5:e1:74:f0:ba:5f:2a:ff:55:9a:69:
         3a:7a:76:28:7c:6f:15:bc:cd:97:96:ca:65:35:37:a1:a9:bc:
         3a:43:36:e2:fc:00:5f:f9:41:f8:fe:eb:7b:5f:4b:93:6e:7e:
         37:4d:25:be:8d:02:d8:9d:9a:e6:a0:81:a9:d9:e2:e1:f9:36:
         68:e9:54:a7:6e:2d:27:75:8a:72:94:54:a5:90:22:5a:3f:e8:
         b6:3a:d2:b1:28:28:50:96:ff:8d:6a:1d:2b:ed:ef:bd:31:80:
         e9:62:a0:04:68:79:ef:2b:e6:cb:33:f3:4a:4e:6e:86:bc:27:
         d1:39:f5:e1:0e:bf:42:76:26:39:ce:02:e6:1f:11:53:9b:d4:
         15:07:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:13 2025 by rpki-client