Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File:                     mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier:          v/LqlZqi3Na4XH8c5NXmZY3mnkW64FaQVfffghJX+DE=
Subject key identifier:   90:FC:14:3B:ED:ED:AA:84:D0:C0:AE:E5:55:00:B4:0C:37:7F:0C:12
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer:       /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial:       0199FC216F86E213E6F939A3B450699D0837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number:          1442
Signing time:             Sun 19 Oct 2025 11:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:13 +0000
Files and hashes:         1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
                          2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
                          3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: 3qjMgOxAXHdkkCFdXJ2Y7ZpcjMbd4c5BjEpAtZ5Rto0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:6f:86:e2:13:e6:f9:39:a3:b4:50:69:9d:08:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
        Validity
            Not Before: Oct 19 11:01:13 2025 GMT
            Not After : Oct 20 11:01:13 2025 GMT
        Subject: CN=90fc143bededaa84d0c0aee55500b40c377f0c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:95:ee:ec:17:5c:39:61:53:18:10:42:57:
                    9e:6e:d4:41:d7:ce:ae:6d:11:ce:86:be:16:bf:91:
                    55:47:be:e0:1f:f9:2a:69:9a:66:3d:4a:33:55:a5:
                    9f:6b:a0:29:04:21:01:26:94:27:eb:02:59:7e:0c:
                    c2:83:38:59:84:e8:b2:56:d9:c1:0c:74:57:22:f1:
                    33:28:06:12:1a:6a:da:a0:ca:be:e2:7d:82:3b:f8:
                    a7:3e:d5:4e:65:7d:cf:e5:32:79:01:e0:6f:87:cb:
                    24:68:82:67:76:35:fd:bb:48:6f:53:82:52:de:4e:
                    d2:ff:93:ec:56:76:05:9e:33:bb:e3:cc:f4:0e:38:
                    ad:e3:be:71:4f:71:7e:72:c4:75:c0:88:0f:8c:09:
                    35:c2:dc:0c:e5:87:f9:1d:0b:22:f3:09:09:f8:8d:
                    45:48:20:f3:85:f7:bd:79:5e:2e:88:b8:a9:9a:86:
                    e8:15:8c:01:f6:69:2d:0e:ea:44:21:bf:91:a5:7e:
                    94:c7:00:20:37:66:07:ff:f1:89:d5:98:0c:d7:6d:
                    c4:db:44:43:c7:e2:44:d6:f6:3f:c4:0b:48:09:e9:
                    42:f4:30:03:5e:04:a8:09:ac:fe:d9:2c:a0:60:db:
                    9b:6d:f4:16:0d:52:94:9c:34:85:b6:97:43:eb:6a:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FC:14:3B:ED:ED:AA:84:D0:C0:AE:E5:55:00:B4:0C:37:7F:0C:12
            X509v3 Authority Key Identifier:
                keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:41:05:b5:c2:3a:b2:c6:f6:d4:12:bd:02:da:dc:c6:28:cb:
         50:f3:bb:34:20:91:b1:14:62:ce:64:24:fb:99:62:36:c0:b2:
         4d:31:5e:1d:ce:d1:eb:f7:a1:23:6a:d3:e3:8e:3e:ea:9b:e8:
         88:f5:6f:b0:63:57:1c:93:81:3d:d2:be:fe:34:52:ce:8a:29:
         a9:d8:3b:62:96:c5:c5:5c:ff:30:7f:98:a4:1e:cb:57:b5:02:
         e7:b0:a8:d6:26:b9:51:4a:10:5c:a9:31:1c:5c:38:68:b0:7d:
         64:e1:c2:ec:b8:f5:b1:84:6d:4e:86:ee:34:6c:46:c7:05:eb:
         3a:c4:91:8c:74:3e:74:67:29:f7:a7:23:fc:89:e5:17:ee:39:
         79:e0:54:7d:cd:b1:76:a5:0b:c3:93:38:2e:ab:e2:a7:b4:ab:
         9d:68:ac:88:18:2e:b9:9e:4e:c7:2d:94:a3:47:50:6e:a5:c6:
         50:60:52:90:c8:19:eb:e7:89:62:40:90:51:1b:56:30:f3:23:
         8f:98:b5:d4:a4:0c:cc:6c:db:a1:4e:09:c4:df:18:4e:b6:aa:
         cf:3f:6e:43:b4:b7:c5:c7:49:c3:f1:cd:ed:64:c1:a6:ec:ff:
         a4:62:6a:d4:93:7e:4a:09:91:4e:8a:b3:34:55:cc:e9:3d:80:
         5c:96:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:55 2025 by rpki-client