Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          Z0coPI4g3LukjoGyEzYhK+FAPdSex/3/DLIJL+r9DZE=
Subject key identifier:   77:B0:21:78:49:C8:52:93:82:0C:3D:D7:C4:02:D9:0F:95:0A:A0:3F
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       0199FE10277712AA6C102C8A7EBC36E1BAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          1343
Signing time:             Sun 19 Oct 2025 20:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:35 +0000
Files and hashes:         1: JnBeNm2rTKYmdlnV7LD4ratnhIY.roa (hash: 7sx6YVexwt/Dz3KSILgflEf6IXU43pKeioOkcXpsk1E=)
                          2: S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa (hash: 2BiJYWVWD7Ka4R5rnZ5XfPiTTBaJVD05DB1Gn6ZZCus=)
                          3: dGsyJ7jM6KvOdugHv606GHJw2t8.roa (hash: T1+/lyFZuo6NN3DPCdQyKfzTAN48j9zk6Jj/XS5Es/U=)
                          4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: kh3rxtGYpKQryidZVCFoZT4vbgVGovCyKod4yy63ypo=)
                          5: nIfzUJtgT3TC148NhCHT3nc3TU0.roa (hash: k8UMtfG8SYavn2YwaHNZ1aeJ1v6JZQQf4ItuUMWhh4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:27:77:12:aa:6c:10:2c:8a:7e:bc:36:e1:ba:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Oct 19 20:01:35 2025 GMT
            Not After : Oct 20 20:01:35 2025 GMT
        Subject: CN=77b0217849c85293820c3dd7c402d90f950aa03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2f:e1:82:d1:a8:ee:03:ab:99:16:ed:50:91:
                    e9:98:e6:0e:cb:f7:b2:1c:80:5f:11:55:97:0b:b0:
                    77:34:2e:76:9e:3a:bb:56:92:f0:42:56:9b:85:91:
                    c5:c2:9a:db:37:af:d1:26:f7:c0:a6:48:ef:88:c8:
                    e2:ba:dc:d5:2e:17:42:71:cb:8b:2b:3b:ce:b1:7d:
                    64:68:ef:39:67:7b:f7:02:47:65:38:6b:19:6a:64:
                    f7:de:e3:1a:c4:5f:a0:2b:43:75:ef:cc:51:96:b5:
                    f7:41:f7:76:88:b6:c7:e6:d6:e8:65:d2:35:20:85:
                    25:94:d6:a6:87:07:c4:4b:36:10:75:c8:3b:47:46:
                    f8:d8:6c:d1:53:10:8d:d0:ae:c7:30:41:ca:af:90:
                    53:0f:51:20:13:98:e1:23:5d:85:de:7d:31:7a:2c:
                    06:52:68:ba:2b:0b:61:87:83:10:a5:b0:5e:df:60:
                    65:f3:11:c0:54:90:b8:2e:2e:af:40:2e:3c:ed:cd:
                    8c:b8:bf:4b:41:cd:80:7f:68:8f:67:f5:7d:21:54:
                    19:f7:ab:a8:d4:d2:4a:ba:b7:6f:f0:a7:fb:e2:8e:
                    73:26:31:a4:c7:e9:78:75:bb:03:01:ba:21:64:af:
                    78:67:7c:57:48:ae:c4:04:b2:4c:59:23:1e:ce:eb:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B0:21:78:49:C8:52:93:82:0C:3D:D7:C4:02:D9:0F:95:0A:A0:3F
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:c4:cc:35:51:df:ad:44:ea:bf:3a:02:66:92:cb:87:b4:
         0a:a2:c8:0a:4a:12:22:20:9d:d6:2c:2a:92:41:83:ac:88:12:
         48:0c:99:15:37:81:14:92:64:32:de:40:47:a2:34:32:46:aa:
         1f:42:85:26:e0:a6:f4:62:d6:b2:dc:20:4e:e1:3f:b0:22:c7:
         c3:cb:b7:08:f2:a2:d4:60:19:fb:7f:2f:5a:c9:29:5b:b5:9b:
         99:86:4b:23:ef:4a:7b:de:a7:b2:3c:22:53:d0:7d:44:6f:52:
         a7:c6:8c:d3:8a:24:86:8d:43:84:c2:66:56:2e:c8:bc:b7:0d:
         7a:68:86:1e:47:0a:fe:30:db:5e:0a:8f:c8:72:89:2a:8a:18:
         98:93:f4:9e:dc:de:21:d0:5a:59:63:8e:07:8a:fd:f7:7a:38:
         ae:d3:1d:7c:55:23:aa:22:40:4f:51:51:f9:8f:5c:6c:bd:cb:
         9f:9b:af:b5:f3:28:04:f5:df:97:c5:e0:02:0c:82:d7:07:54:
         6c:a7:3a:a1:84:a2:e2:4b:a5:7d:7d:13:19:42:f3:a4:e3:a6:
         5b:bd:60:e1:58:cd:de:c6:8f:bb:2c:63:07:6e:0c:d8:88:8b:
         9f:e2:71:56:44:e7:b9:ea:27:a9:b3:72:99:66:e6:97:00:74:
         67:1a:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:30 2025 by rpki-client