Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          q8cZOO7iRITJlRh+kc9TJNhNenDA7L2uGsCaCmPUNgs=
Subject key identifier:   1A:FB:00:93:34:F4:5D:59:5C:3B:C7:60:57:63:A7:37:91:60:EC:53
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       0199FC583BD8B35FEE24860CF85078B3ECC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 12:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:04 +0000
Files and hashes:         1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=)
                          2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=)
                          3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=)
                          4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=)
                          5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: jFh1god7fMdLONC7NEJe9KyHsfWTgvjVEZNx6+Vh3eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:3b:d8:b3:5f:ee:24:86:0c:f8:50:78:b3:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: Oct 19 12:01:04 2025 GMT
            Not After : Oct 20 12:01:04 2025 GMT
        Subject: CN=1afb009334f45d595c3bc7605763a7379160ec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ca:94:35:80:77:38:79:f0:ee:14:16:13:9c:
                    bf:34:b2:8b:49:73:86:63:0c:8f:38:1e:0e:ec:be:
                    29:e2:b7:c7:56:cc:7f:84:74:d8:88:a2:26:51:68:
                    c6:51:5b:7a:50:cf:e9:cf:18:d8:e9:90:49:a4:1b:
                    be:c0:5a:ac:b0:30:4b:ad:f7:3f:2b:7b:a5:0a:95:
                    17:af:61:51:c1:48:ab:88:f7:d7:81:3f:07:15:4f:
                    2a:04:53:e3:ff:59:8f:65:67:f4:6e:ca:1b:9f:78:
                    83:01:98:e2:96:1f:6d:36:f8:b3:23:f8:a4:9c:47:
                    ce:ea:89:fb:35:3c:f1:5e:92:a1:b9:5b:2f:a0:5c:
                    35:4e:35:7c:f1:66:aa:2b:d0:ff:c5:05:2a:ec:79:
                    c3:bc:d1:99:50:e3:20:e0:72:f4:8b:1e:8f:dc:df:
                    ca:89:1a:6b:ce:41:43:b7:1c:7f:90:57:58:f2:b9:
                    15:2b:be:75:31:b5:ac:7c:29:77:a8:86:7d:b2:0d:
                    b0:fd:a0:b8:f2:1b:2b:bc:68:af:9d:fc:1b:e2:d1:
                    db:47:96:02:84:7c:92:a3:39:c9:ea:cc:55:3e:16:
                    c4:36:92:74:9f:8a:74:10:7a:e3:07:ef:6a:63:ff:
                    d3:f1:04:c7:23:8d:55:55:56:fd:27:39:23:7b:f2:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FB:00:93:34:F4:5D:59:5C:3B:C7:60:57:63:A7:37:91:60:EC:53
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d8:ce:87:84:2c:c7:7b:23:7a:5a:8f:9f:98:28:61:32:be:
         21:e3:9c:32:6d:38:02:8c:0d:6b:68:0f:e9:df:e9:f6:b1:c9:
         b9:49:dc:fb:7d:5b:71:64:f4:1c:63:c2:38:fd:a9:99:54:77:
         9d:f9:27:00:97:d2:15:7d:63:93:1d:b0:67:86:a2:f7:aa:5e:
         e7:a2:0e:e1:ea:9e:73:8f:74:2a:35:66:a3:b1:85:61:bc:c5:
         ef:b7:fe:85:56:b4:f8:62:fc:1e:91:2f:ad:1a:e6:11:22:ac:
         77:df:57:10:15:ee:af:d3:27:bb:30:37:37:71:04:0d:29:1c:
         3f:cf:de:fc:d0:9a:bf:ca:9a:0e:f2:a4:5f:e4:61:b6:4d:4e:
         8d:71:87:fb:65:fe:1c:00:ef:d0:09:60:a8:d8:86:4e:91:2a:
         03:9e:d4:ff:06:22:55:73:e2:ec:90:e2:32:c6:72:c1:28:e1:
         68:f9:7d:7d:02:40:02:ad:3f:5c:dd:34:76:96:f7:81:4b:a8:
         de:d4:ee:9a:ec:52:3a:01:da:2e:7e:4d:63:20:a5:68:b1:2b:
         ad:3b:ed:6d:87:7d:f2:0e:bf:db:b4:e1:9d:ce:33:c9:bb:ca:
         34:6c:60:76:eb:16:5c:af:2a:e7:f9:37:d5:38:0e:72:18:4c:
         51:87:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:16 2025 by rpki-client