Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          tbyIhpxngjwKlr165o0vlNT6ifSCncgafwGMkqUbzDM=
Subject key identifier:   C8:B7:0A:BD:6A:E6:39:38:51:1F:3A:40:05:43:8C:BE:D7:14:39:D7
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       0199FB7CAB2157CF7C17648D32316FF57F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          13F6
Signing time:             Sun 19 Oct 2025 08:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:15 +0000
Files and hashes:         1: 88WU_lo-nSRGdQfY40VdogAMLxE.roa (hash: Hb+L5mbmqk3uGoKDZkv33m+okuLc3B+yQYtGc3eHLEs=)
                          2: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: a2LfpUV8ZFt5eg7kauU9jwqQaUX6Sfb7MQyqXvhth7Y=)
                          3: qitb7VLMgvff1nrPh9k84ZNCZis.roa (hash: 5aKxoc3/ZFGyn8GlrxxZrkPDb3gc2rupmpy/hBVwGfg=)
                          4: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (hash: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=)
                          5: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (hash: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:ab:21:57:cf:7c:17:64:8d:32:31:6f:f5:7f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Oct 19 08:01:15 2025 GMT
            Not After : Oct 20 08:01:15 2025 GMT
        Subject: CN=c8b70abd6ae63938511f3a4005438cbed71439d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:d2:e3:bb:3e:00:97:47:f8:2c:99:fd:99:
                    63:97:f9:f4:bb:04:9f:46:9f:9e:a9:03:f3:8a:20:
                    12:58:c6:86:ff:a9:18:0c:81:89:84:d6:3c:d4:17:
                    29:09:6b:9e:85:a9:59:44:78:51:d0:37:01:47:3f:
                    a6:53:31:9d:39:f9:44:f1:68:77:9a:3c:28:43:07:
                    1e:45:22:3d:5c:6e:4a:9a:8e:fe:42:8e:10:99:36:
                    13:31:25:ae:51:08:65:d3:14:97:a9:fb:cd:75:30:
                    69:80:da:4f:0e:78:fe:0c:fe:32:f3:04:40:9e:de:
                    86:27:4e:6f:4e:3b:e2:a9:de:71:7e:6f:8f:76:88:
                    a5:c1:60:33:ca:e0:db:66:ad:14:ee:65:a4:02:ce:
                    92:75:71:ae:a7:f3:1c:c4:8b:fd:d3:ec:22:14:31:
                    93:1d:da:ad:95:38:49:2c:4e:93:20:9a:0e:8a:54:
                    37:3b:24:c0:c1:37:14:67:03:80:a9:ce:ea:9a:69:
                    3e:52:8e:c2:9c:52:cc:78:a4:90:2d:61:c9:d5:cb:
                    5a:14:11:39:1c:43:3c:b3:23:ba:68:f5:ca:ee:49:
                    39:e5:26:3c:75:64:a7:9e:a9:d6:d1:3e:68:89:3c:
                    c5:f6:58:7b:11:16:07:4d:79:cf:79:8d:4d:4b:f3:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B7:0A:BD:6A:E6:39:38:51:1F:3A:40:05:43:8C:BE:D7:14:39:D7
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:81:de:4a:71:ca:21:0a:f5:37:b8:17:eb:66:b3:c1:b8:7e:
         65:74:b9:52:8e:9c:c2:d3:c4:b1:ee:d0:f6:ec:6e:02:e8:1b:
         d1:f6:1d:37:01:5d:aa:c4:13:b3:5f:03:50:33:5c:6f:f7:a6:
         a2:b5:19:20:29:ab:99:7f:72:27:02:08:be:73:cf:42:46:20:
         a1:d4:87:27:72:24:43:92:5d:18:ff:10:05:9d:96:10:ad:70:
         78:93:db:8c:ed:53:1d:7a:cb:8d:7c:f5:66:d1:25:3d:a6:ad:
         19:24:cd:43:36:20:d6:ea:3a:4e:fa:c5:91:81:53:a2:01:79:
         89:c0:52:b6:12:8c:00:b9:cd:39:17:b5:67:f9:61:c6:9a:89:
         2f:cd:ee:c0:bf:3e:9c:c4:ea:08:4e:17:eb:81:8c:88:44:d5:
         f4:83:0e:0d:a7:26:31:90:ad:e9:87:b3:16:d7:8a:b2:19:83:
         f3:7b:5e:ba:83:bf:29:96:91:9a:8e:98:e9:8e:f6:8c:11:33:
         77:e5:66:55:86:65:24:9a:bc:09:71:18:e1:e0:04:bf:ab:85:
         bf:82:3f:dd:88:ff:b7:3b:8d:a2:8c:e3:d0:08:df:69:49:88:
         8b:31:f4:2b:e6:09:b7:19:06:9e:aa:a8:31:9d:dc:29:c3:b2:
         46:2a:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:31 2025 by rpki-client