Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          ZrfVLBXEkaICoh9+D/43rqfleDQCFtrzKPoGr1ywIxA=
Subject key identifier:   AE:11:57:AC:09:5B:0F:57:2C:9A:CD:C4:AB:EA:86:B3:C3:85:EE:F2
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       0199FC8F3077CF2494B3DC190011138178F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          13F2
Signing time:             Sun 19 Oct 2025 13:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:06 +0000
Files and hashes:         1: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
                          2: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: 1T99af3tbEhYUgFSQ98+5Gw7wkn7BxHydYdVqwc85gU=)
                          3: IK01XRjBPLd-6jbRM6WX3KlYFaU.roa (hash: hpMtGTgtQBn7QaBbprX3PlSpi2a4sNEtbAx00Rc21hI=)
                          4: u1_Gd7VlEhZ3QqgjEg2OEC7gm14.roa (hash: NHFnan+4Era3/L1csOitqJI62J77zZalfXkxncagMSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:30:77:cf:24:94:b3:dc:19:00:11:13:81:78:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Oct 19 13:01:06 2025 GMT
            Not After : Oct 20 13:01:06 2025 GMT
        Subject: CN=ae1157ac095b0f572c9acdc4abea86b3c385eef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:2f:ca:d1:74:f1:a6:ca:3c:86:4f:f6:c6:
                    4e:17:bc:90:aa:06:96:b1:53:0b:7e:6b:cc:1d:cb:
                    bf:65:0c:73:78:44:28:6b:4f:0e:b9:c0:e4:48:26:
                    da:32:cd:ac:a3:39:d3:7b:6d:8f:26:a7:80:5c:9d:
                    5f:41:7b:81:33:e9:6e:f3:26:06:10:1c:06:49:db:
                    d1:8a:12:f0:b2:e4:77:8b:e4:da:51:7f:cd:8b:89:
                    8e:e0:0f:79:dc:9a:09:6a:f2:cb:62:9e:8c:aa:15:
                    04:9b:b1:63:95:7e:bb:7c:04:c0:99:fb:7a:98:d1:
                    70:a3:48:0d:92:be:85:e2:96:7c:de:25:10:36:ff:
                    03:36:be:11:f3:41:1c:45:c2:47:50:48:ed:3d:26:
                    09:59:58:9a:80:73:50:b8:a5:3c:9c:0b:26:12:a5:
                    37:d8:cd:00:5c:47:6d:f0:75:ab:0b:e7:0a:ee:6b:
                    a8:21:61:00:73:3b:3e:b7:2c:bb:22:7a:d8:69:f9:
                    d4:7d:49:64:7a:40:56:4a:81:a5:de:2b:14:aa:de:
                    44:ac:7b:57:ef:36:2a:df:96:a5:33:d5:bf:18:7d:
                    fa:a8:54:8c:84:7f:4a:69:f2:98:c2:e1:25:f4:e6:
                    5a:c5:d3:6d:b7:9f:f2:2e:71:7b:1a:95:a7:1b:b8:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:11:57:AC:09:5B:0F:57:2C:9A:CD:C4:AB:EA:86:B3:C3:85:EE:F2
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:ad:dd:ac:f1:c6:b8:87:18:68:2c:e5:e5:bf:8e:c9:80:
         3f:7d:c0:67:88:8c:7d:21:eb:b0:4b:4b:a4:2d:f6:a1:fb:fc:
         4c:11:d2:b1:0b:73:94:2f:6b:b2:c4:a6:5c:5d:28:b6:52:5f:
         20:74:1d:75:2a:ed:72:69:c5:fe:93:1b:90:9c:d5:31:52:7c:
         48:3e:8f:7f:80:58:c3:05:da:b0:81:f7:d9:01:cb:d3:3b:97:
         32:4b:6e:99:6d:99:02:99:9a:b5:2b:cb:0f:5b:d4:01:14:bc:
         7d:62:ae:79:ec:04:73:54:27:17:aa:d5:d0:64:74:ac:bd:5c:
         b1:02:42:48:6b:a7:d4:ec:bd:12:f5:ba:bf:84:7c:e5:91:7d:
         c7:00:9c:38:41:1a:55:77:83:d6:e6:e7:f6:7a:40:22:19:30:
         5e:64:21:5f:aa:8d:66:67:98:88:d5:ae:e2:26:02:f9:ae:b9:
         f5:c6:a0:f2:bd:7e:5a:2c:6d:6f:23:7a:bb:0e:4e:af:19:cc:
         f2:4a:9d:81:6e:6c:b1:04:35:b4:24:ad:37:ea:1d:e0:88:b5:
         73:36:33:3a:6b:e4:06:35:d1:64:0f:74:61:f1:01:0d:d8:66:
         1f:c2:28:7c:b9:fe:65:ae:62:cb:4f:4b:6d:31:2b:8d:37:95:
         bb:65:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:04 2025 by rpki-client