Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File:                     HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier:          7kgYhf988p+r/ifgk+Z2aNNr8l3EKBg7jDCZpg+r898=
Subject key identifier:   9F:8C:C6:9F:83:F6:A0:62:A6:52:4D:8F:7D:12:20:8D:30:76:60:DC
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer:       /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial:       0199FCFD6E5A51DA91BE6DE059C629F756A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number:          0D83
Signing time:             Sun 19 Oct 2025 15:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:31 +0000
Files and hashes:         1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: 7EugJWSjYV2nKFl8SEiknHh8RKMmQ7X+9bdctOVmyTM=)
                          2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:6e:5a:51:da:91:be:6d:e0:59:c6:29:f7:56:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
        Validity
            Not Before: Oct 19 15:01:31 2025 GMT
            Not After : Oct 20 15:01:31 2025 GMT
        Subject: CN=9f8cc69f83f6a062a6524d8f7d12208d307660dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:6b:95:d0:1b:1f:29:4b:79:8c:03:14:00:
                    8c:29:25:11:b3:ac:ba:11:98:38:d1:dd:9b:29:bc:
                    d7:b3:8d:a1:8d:20:f9:ab:b9:df:63:e8:2a:6f:b7:
                    ff:db:76:b5:e9:71:44:8d:2e:0a:ee:ab:94:ec:c7:
                    79:7b:63:85:f0:9b:73:11:9a:4c:d3:2c:bb:bc:a0:
                    32:84:7f:3d:0a:db:d6:38:ae:c3:a8:11:88:26:0e:
                    ee:a1:66:6d:4f:4d:60:15:86:53:5d:e3:c8:b9:f7:
                    41:a9:4e:c2:58:e4:27:1c:b1:4a:8d:05:0e:ca:18:
                    41:0e:ba:12:e0:73:d0:f5:c6:59:4e:ac:80:36:52:
                    37:2f:42:8c:45:74:47:8d:a5:ad:9f:b7:15:76:a2:
                    e4:b4:48:e2:d1:66:46:75:7d:8d:86:03:5b:60:33:
                    90:a4:48:91:61:1a:45:01:ae:0a:50:f1:1a:a3:24:
                    95:17:ad:d5:01:46:3f:39:0f:3e:9d:0c:20:60:b1:
                    bd:36:ae:b8:8c:23:04:b8:eb:30:62:98:36:81:cb:
                    ec:6b:f4:ef:a3:7a:a3:2c:90:56:87:25:eb:f2:c5:
                    9c:20:49:7c:e7:8b:ce:9f:03:13:0a:64:27:7e:b1:
                    b5:0a:43:73:d1:22:46:3c:04:96:50:e4:83:eb:fb:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:C6:9F:83:F6:A0:62:A6:52:4D:8F:7D:12:20:8D:30:76:60:DC
            X509v3 Authority Key Identifier:
                keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7f:43:a1:39:95:7a:d9:1a:cf:bf:fc:59:97:aa:7a:1a:24:
         22:34:5b:da:d7:50:1a:56:07:32:ec:65:f2:c8:1c:a1:d8:8e:
         f2:a6:77:66:5f:08:3f:4a:37:0d:28:a1:a7:f1:33:8f:23:d0:
         1a:37:89:44:77:df:80:99:82:8d:78:b5:ac:de:79:c1:0a:1f:
         1f:0d:e7:01:7d:6f:dc:11:0b:70:d4:80:3e:9e:84:dd:74:3c:
         74:78:e0:12:54:70:08:ef:59:dd:3b:0b:81:75:17:71:88:c1:
         21:15:22:91:31:70:ec:46:b4:d1:7f:c6:54:13:9f:17:b0:1f:
         b1:82:3b:ca:78:23:0f:7d:b1:68:16:4f:99:64:a0:1c:3f:20:
         c3:47:0c:90:cc:55:bf:9c:78:da:da:21:de:88:61:9a:fe:a3:
         bf:d0:3b:c1:29:af:62:e5:ad:a6:f8:9c:97:eb:1a:03:4b:f9:
         53:fb:c1:5e:41:73:6b:7e:9d:21:4e:37:66:28:69:f7:0d:f3:
         02:b6:51:5b:28:a5:12:1d:9e:12:32:8d:da:fa:67:1d:f1:a5:
         1a:f5:45:5e:f1:b6:f6:c1:94:6b:4c:68:24:a3:02:20:1c:84:
         16:4d:6c:67:af:e0:d1:98:70:12:e6:db:02:73:25:b5:33:4c:
         94:9f:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:33 2025 by rpki-client