Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File:                     hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier:          NeqBHgawueeYdA17eCpVxv8B0udeO5YtSoQRon8A49c=
Subject key identifier:   E0:F1:1D:75:79:4C:9D:E8:E4:FF:CE:A4:EB:40:3B:CD:F7:A7:D3:F6
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer:       /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial:       0199FE7E0BAF5437D9FBB6FEF103ACE60A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 22:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:37 +0000
Files and hashes:         1: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: qH61zE+bHPpYuGn4Tpa/m6qYwts+um0z52sxAUSScJU=)
                          2: qsewLApSJANcPGT3dklt2zSF2HU.roa (hash: bPAVtg7OfBYMMJkAVdTPdE+2AmcR0ogISjqN5CtNEqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7e:0b:af:54:37:d9:fb:b6:fe:f1:03:ac:e6:0a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
        Validity
            Not Before: Oct 19 22:01:37 2025 GMT
            Not After : Oct 20 22:01:37 2025 GMT
        Subject: CN=e0f11d75794c9de8e4ffcea4eb403bcdf7a7d3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:62:66:68:a1:a2:a9:4c:ef:45:cc:4c:50:
                    86:1d:a5:8c:c5:88:7a:23:9d:9e:44:19:12:98:39:
                    e1:53:ee:7f:07:43:a3:a7:7f:d4:f7:43:c8:05:5e:
                    c7:81:25:49:21:0a:f7:8e:24:fd:ef:ec:66:3b:78:
                    42:19:73:ca:a1:c6:e1:76:f7:95:90:94:18:9b:62:
                    72:89:7e:a4:ff:e0:53:d7:e2:10:4b:db:f1:ac:97:
                    5d:e4:9c:c0:ae:05:fc:23:6a:b2:f4:81:4e:e5:fa:
                    e4:ba:9d:0e:89:2d:8b:a6:77:2f:e0:c8:26:9c:6f:
                    57:f4:32:80:5b:7a:4b:7e:81:52:e4:cf:06:75:5d:
                    c0:39:90:ab:a0:ed:f8:5a:4d:b3:c9:3e:38:89:f9:
                    dd:10:4b:a6:4e:61:a4:eb:12:fa:c6:ec:17:c5:2b:
                    56:9c:c8:35:c1:45:99:5a:f1:0d:4f:59:0d:71:7a:
                    3a:c5:0c:e6:ba:02:37:51:59:53:0d:60:e0:b9:de:
                    73:81:86:00:c4:91:02:98:6b:cd:92:83:ed:78:13:
                    65:59:ef:7b:1c:a7:d6:56:80:d9:90:dd:f7:83:f8:
                    27:f9:44:59:e9:44:9c:48:dc:36:fb:26:52:48:96:
                    87:7c:f4:2c:1d:ae:5f:02:b3:3d:0c:5e:61:27:d2:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F1:1D:75:79:4C:9D:E8:E4:FF:CE:A4:EB:40:3B:CD:F7:A7:D3:F6
            X509v3 Authority Key Identifier:
                keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:c6:7e:de:17:2e:e6:85:34:ea:72:96:6f:b8:0b:6b:7d:
         d0:c0:c7:16:2a:b9:19:8d:d1:8f:05:97:d9:67:cc:f1:dd:41:
         33:54:c6:20:b2:60:e5:58:ae:ac:00:00:48:3d:09:cf:f0:cd:
         6d:ca:8f:6a:fc:99:ad:67:48:fb:ff:bf:b2:e0:28:9a:05:49:
         82:98:d6:a0:14:6f:7b:8f:44:2b:f3:d3:85:2f:85:53:d6:aa:
         94:49:ac:43:84:10:5c:7b:a3:a5:8f:e4:55:f2:06:f6:8c:72:
         0e:f0:a6:23:b7:18:19:20:0a:f3:df:09:d0:16:be:05:6e:e4:
         4b:ea:51:65:85:62:51:08:f6:08:73:72:e7:68:ed:81:74:10:
         a7:0e:d3:a8:8f:db:20:f8:92:f5:3d:b4:49:31:7c:da:63:d9:
         35:b2:3e:f8:67:3b:b3:8a:1e:46:80:1f:b1:97:a1:92:85:46:
         cb:9b:60:b3:32:87:d6:3e:ca:10:58:39:94:36:75:17:5d:59:
         c7:f6:24:60:db:4f:2b:be:79:eb:e4:c4:91:4b:bd:bc:dc:2e:
         d6:90:87:93:4f:ff:63:97:c3:1c:75:9e:5d:e1:70:29:fe:d9:
         b9:63:62:09:bb:65:7d:85:27:02:08:d9:16:98:4c:2e:76:dc:
         af:a1:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:54:35 2025 by rpki-client