Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
File:                     HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json)
Hash identifier:          xMnxbNT+vFJTGRj7H+Tqw6xhx6flsPjaOo4ZUiq15pg=
Subject key identifier:   77:8A:AC:76:4A:F2:D4:50:D1:3E:CF:23:4F:C2:2C:78:10:C0:ED:D3
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       0199FAD7BBDABFE9174BD3068040073318A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
Manifest number:          16EA
Signing time:             Sun 19 Oct 2025 05:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:06 +0000
Files and hashes:         1: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: n50dNNKZUsf1g2x1wMIkdmXjwlF8q2AvVhXZsF9pyy8=)
                          2: HKyKcuG2QNZXVCZbzlsSYd8S3kw.roa (hash: WsComY/xpr7CRKjl1OS19nvkdUYgY57xLKmt+FoyLxs=)
                          3: NMYTYXjVSSW_zjS5UcL1_MJYMhw.roa (hash: sb8TB9OQXYjgHET+s0jEt1SW4MRtm0F3nj4wUyz73j8=)
                          4: OL6AoyvltIWrfared4b30q9zkxI.roa (hash: BCZJFaW2H8wcaghHXjKzyZLLD5xoj/h4op/UrSZpM4s=)
                          5: cdvkytGTuhzfI_n3jlQrgir1LVg.roa (hash: bDSSCJ1WplO8Ib0UIaI2qA5CZAt1v6VMlLCWW3FIaSk=)
                          6: jLAxUa8xvZ_xtGFLN3MZzH02ngY.roa (hash: 2KcY9b/rNpgICtwXDDn50o8m8wTGL/9zVFvIOuzYcZI=)
                          7: jwz6PrQFhFvB8Ouuwat3y2nONuA.roa (hash: TxTry85XsPky+PSHHeTZJCkAX90hbYBwkf2e2x38QSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:bb:da:bf:e9:17:4b:d3:06:80:40:07:33:18:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: Oct 19 05:01:06 2025 GMT
            Not After : Oct 20 05:01:06 2025 GMT
        Subject: CN=778aac764af2d450d13ecf234fc22c7810c0edd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:ca:cc:9c:63:5c:78:4b:41:87:ac:22:1b:
                    d2:a9:ac:96:95:2c:fe:49:3a:f5:9c:dc:6c:71:c6:
                    de:a8:db:c6:95:33:9b:39:f8:62:02:45:6c:22:3e:
                    e7:1e:13:68:af:b5:41:ad:0b:fa:41:17:86:5b:78:
                    3c:52:c9:57:34:9a:75:f8:e5:d9:32:9b:ec:f3:2e:
                    b8:9a:5a:98:bc:ba:37:ac:d8:f6:59:60:01:5e:5d:
                    2d:fb:58:6b:fe:ae:85:68:28:3d:75:1a:d6:70:bf:
                    df:cb:10:15:b0:cc:1d:05:d4:6c:f1:3b:e8:d2:90:
                    86:38:93:91:cf:bd:2d:06:e3:0e:05:df:91:3a:8b:
                    37:2a:6f:97:d2:43:61:02:4f:4a:1e:07:71:8b:9f:
                    0d:f7:5a:ac:f4:46:de:62:49:cc:33:32:41:c9:f3:
                    a1:2f:a8:35:13:ba:0c:f3:5e:1d:9c:8e:1c:ac:ee:
                    73:9a:13:2d:87:dc:53:ab:49:1b:d5:2d:fb:1d:bb:
                    f6:9f:f2:d5:1a:a1:9d:27:ae:ca:6f:86:c9:10:47:
                    c8:a3:81:2c:79:96:a6:b0:1c:73:f3:d3:95:52:d3:
                    67:7b:d1:3c:7c:c7:5a:5a:d6:c2:6c:7e:9c:e9:34:
                    9b:33:3c:e6:3b:a6:a7:a3:4e:ba:28:bf:60:d7:3a:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8A:AC:76:4A:F2:D4:50:D1:3E:CF:23:4F:C2:2C:78:10:C0:ED:D3
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2f:ef:48:2d:03:3a:2a:80:5c:70:7e:6c:2e:c0:7e:c8:4a:
         d8:2a:21:24:ed:af:18:2d:f1:c9:34:19:bf:b6:01:b9:7c:ee:
         ed:3a:06:c0:c4:76:90:c7:9e:ca:c3:23:ff:eb:81:14:3e:71:
         e6:a3:4f:15:36:63:6f:14:28:9d:e2:20:ba:3c:aa:29:a2:90:
         a9:43:90:91:db:aa:43:a4:a5:a9:d0:fa:4b:b8:ed:55:fc:ef:
         8c:9b:38:54:fb:d2:3f:47:4c:dd:f9:4e:8d:d2:f0:70:49:fe:
         a4:3e:30:11:51:c4:07:25:d0:91:52:cb:4b:ac:c9:2c:c1:e5:
         d9:cf:f1:6a:96:3a:32:23:39:ec:92:c7:f1:db:e1:eb:c9:57:
         e0:a1:ec:27:e3:f1:c4:99:9b:46:85:52:56:93:db:f8:00:ae:
         57:54:ab:74:44:11:7c:64:97:81:7f:e1:d8:3e:06:e9:76:33:
         86:d2:31:32:24:26:bd:8b:4f:7f:1f:05:df:62:17:bf:f0:3b:
         fd:b9:fc:ac:9d:10:14:c6:b9:0c:10:b7:12:d7:23:17:e8:1c:
         ff:39:dc:58:3c:c7:8c:7b:fe:75:ee:25:41:28:bb:de:30:5f:
         10:1d:16:50:9e:7f:80:e1:9b:51:64:77:75:99:8a:f4:07:e2:
         49:ed:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:08 2025 by rpki-client