Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
File:                     h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json)
Hash identifier:          IPWZvffBcAYIOyTvK190vKqWZkGltzikMxyJ5B9KeW4=
Subject key identifier:   77:B2:FE:43:F3:CF:10:95:5E:B6:D0:31:B5:F5:C2:D0:A3:DB:38:0A
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       0199FFC7463B281AF7AB3286DF5F4D1920FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
Manifest number:          16F1
Signing time:             Mon 20 Oct 2025 04:01:13 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:13 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:13 +0000
Files and hashes:         1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=)
                          2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=)
                          3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=)
                          4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=)
                          5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=)
                          6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: oMgpzoVgSMW+tMMtxuJkSWzo5lSF7zRCD1JKYAOj7V0=)
                          7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=)
                          8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=)
                          9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=)
                          10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:46:3b:28:1a:f7:ab:32:86:df:5f:4d:19:20:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Oct 20 04:01:13 2025 GMT
            Not After : Oct 21 04:01:13 2025 GMT
        Subject: CN=77b2fe43f3cf10955eb6d031b5f5c2d0a3db380a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:99:60:c4:84:90:b2:5c:73:be:1a:4e:9d:
                    c8:43:97:05:46:e0:df:79:93:50:3a:f4:03:5d:05:
                    60:fd:8e:60:a5:47:0c:6c:9d:86:66:33:d2:f6:16:
                    c3:76:69:31:e9:f2:43:9e:55:69:5e:8a:ed:c1:e4:
                    47:c9:50:14:ec:e7:28:de:e1:5f:91:99:5e:01:86:
                    5e:54:38:b3:6a:f7:7c:0d:89:c1:6c:80:9e:2d:46:
                    81:99:11:44:d2:4f:f2:21:5e:e8:12:89:07:70:83:
                    a3:66:78:24:be:37:61:55:f7:e5:73:1f:16:36:04:
                    8f:82:12:11:6d:fc:fa:ac:dc:8b:1f:81:9d:2e:c2:
                    9e:dd:bf:bb:7e:70:fd:6a:8d:d2:20:93:9b:9b:17:
                    1a:aa:df:f0:cb:84:43:db:76:f2:a6:db:ea:3e:f7:
                    7a:2e:d7:97:a3:98:d3:c9:23:11:c6:d7:36:53:5b:
                    96:e4:2d:80:93:c1:62:3a:e5:18:68:b8:9e:72:04:
                    1d:ce:61:f3:14:32:b5:8e:98:4b:b0:82:26:c7:33:
                    dd:33:7d:ee:76:98:24:29:ec:28:95:d9:4e:04:b2:
                    d8:f0:b5:0f:d0:d4:a8:68:ac:c7:11:d7:e5:1b:6f:
                    c9:bc:11:b5:58:d5:62:31:dd:8b:28:54:1b:25:ad:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:FE:43:F3:CF:10:95:5E:B6:D0:31:B5:F5:C2:D0:A3:DB:38:0A
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:29:ea:65:98:8c:d8:32:db:2f:3b:81:2c:78:4d:6e:6d:ae:
         c9:c1:eb:85:af:53:17:7a:ae:32:87:67:9a:09:0f:de:dd:0d:
         f8:9c:58:b0:37:c7:91:3c:da:e7:aa:43:b4:49:6f:53:ec:bd:
         3c:17:f2:bd:fe:9b:e7:59:4d:b3:38:14:b9:fe:4a:a1:89:da:
         ce:fa:bd:91:49:43:9c:c9:82:2b:df:c0:8a:8d:07:14:23:5e:
         f4:29:d5:46:59:29:74:3b:8b:de:3b:c7:89:c8:d3:b7:0a:20:
         37:31:4b:5a:dd:b1:ae:e5:74:aa:38:2e:81:ea:97:9f:3b:0d:
         5a:b1:73:4d:cc:e0:56:41:34:f1:b7:3e:24:03:b4:1c:23:44:
         77:a0:a1:2f:f6:49:94:6f:18:18:01:c0:ae:b6:c4:6f:ae:46:
         69:2f:75:d6:d8:c4:a9:4e:06:aa:c4:8a:40:92:96:19:49:01:
         e6:23:81:96:d8:24:d6:29:61:b2:47:2c:b0:39:80:8e:e6:00:
         e4:05:bf:40:37:2b:eb:94:fc:02:ba:c0:7a:95:92:18:f7:8c:
         ef:56:5b:e1:74:08:d7:32:cc:34:0a:0d:fc:a3:27:97:21:dc:
         9e:76:d8:13:40:9e:62:13:3d:e2:e5:bd:98:52:46:15:a3:af:
         ae:0c:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:52 2025 by rpki-client