Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File:                     hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier:          Bd3vTEIXc6afErsAJzELot8UEJCg7P7WVjEyiw388PE=
Subject key identifier:   BD:07:8C:8F:6E:C3:61:A9:8F:94:B1:84:08:E3:E7:B6:74:B2:74:2A
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer:       /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial:       0199FB458762B9DC0CF816777F7160935AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 07:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:01 +0000
Files and hashes:         1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: /n6LiHiHT8WosazfLnEazWKJL9jLQwUMANhKy5W3S8k=)
                          2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:87:62:b9:dc:0c:f8:16:77:7f:71:60:93:5a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
        Validity
            Not Before: Oct 19 07:01:01 2025 GMT
            Not After : Oct 20 07:01:01 2025 GMT
        Subject: CN=bd078c8f6ec361a98f94b18408e3e7b674b2742a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f6:f7:2a:ff:0e:ab:e4:f4:06:21:8b:23:32:
                    43:9d:13:07:35:b1:59:9c:08:10:fc:07:7a:be:91:
                    70:93:fc:ad:3e:22:37:0e:90:fd:06:cc:5c:df:82:
                    ac:2b:26:2c:7d:45:db:38:6f:56:df:23:3e:dd:96:
                    e7:48:a9:93:78:a8:43:0b:ac:dd:b7:00:76:7f:60:
                    2d:bb:fc:04:e3:48:08:39:98:cf:3a:4d:41:82:8f:
                    09:0d:3a:a5:1b:c8:81:64:54:3f:72:c4:87:82:db:
                    0f:a3:3b:1e:1c:92:a2:53:fb:fb:ea:42:e9:5c:0a:
                    68:c4:5c:5a:5c:c3:67:bd:5a:bc:c3:6c:c2:b9:33:
                    cd:a1:5f:00:56:7d:6a:87:5f:a5:8c:ab:84:dd:cd:
                    75:2a:da:09:15:1b:c7:fc:7e:1e:0f:9e:a4:f0:f5:
                    35:cc:34:dc:10:4c:12:dd:be:09:32:74:36:9b:7e:
                    1d:00:c5:42:d0:5a:13:ae:61:f1:e2:9d:71:96:19:
                    13:3e:4a:55:11:3d:74:c4:73:77:6a:2d:82:4e:5c:
                    b4:77:40:90:a1:40:ff:f3:ff:a6:f4:82:5b:01:05:
                    9c:0c:3f:f4:a3:9d:0f:71:0e:ea:31:8f:83:29:7f:
                    e7:0f:97:51:b6:5e:ce:a8:67:74:4e:8c:c3:46:eb:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:8C:8F:6E:C3:61:A9:8F:94:B1:84:08:E3:E7:B6:74:B2:74:2A
            X509v3 Authority Key Identifier:
                keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4c:06:42:f4:c7:fd:a9:82:2b:f4:29:cb:8b:0c:ee:89:b1:
         85:4e:b8:a6:e6:9d:e3:6f:d7:be:cc:a4:85:da:54:69:11:f2:
         de:e6:95:8f:a1:01:ab:65:19:e5:c7:20:54:44:9c:e3:1c:79:
         e3:43:07:b6:90:7c:f9:7a:75:57:23:cb:f3:88:62:3d:0a:f6:
         bd:b4:1b:06:bf:49:b1:24:8d:02:79:03:3f:6b:61:dc:04:a8:
         dc:58:9e:2b:9e:86:5e:0b:3d:7f:1a:72:7e:ed:46:be:35:96:
         c2:0a:e3:32:29:db:ff:72:c6:22:21:b4:aa:ed:13:5e:35:82:
         52:28:04:8b:6c:c0:0c:5c:d1:eb:20:3b:41:ee:fe:6b:0a:81:
         19:c6:28:19:24:52:6b:c1:42:86:10:33:b8:f9:2b:8b:ea:8e:
         31:1f:24:da:f4:50:21:83:4f:28:53:4d:21:24:2e:f8:66:ce:
         02:c4:b6:ce:5e:4a:51:f7:01:dc:c0:1e:83:e2:13:e7:d3:e2:
         d7:bb:fc:41:6b:73:ed:69:15:9d:b4:07:9b:cc:49:7e:4f:28:
         22:49:ab:10:2c:62:e9:7d:f0:2c:3a:2c:58:d7:ba:1a:bc:64:
         3b:4d:15:b3:99:30:41:41:e4:c6:5f:53:0a:b7:1c:48:86:69:
         e4:0b:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:38 2025 by rpki-client