Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File:                     HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier:          vlvumqXWzP2p2qGoaBL3wTOr9E6lDCxfvd50N/BO/jE=
Subject key identifier:   FC:76:11:C4:C6:31:66:BF:BF:26:68:22:A0:3C:76:09:77:CE:23:DB
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer:       /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial:       0199FB7D16905B0B271AC589823D860DA21A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 08:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:42 +0000
Files and hashes:         1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: sOa0tBAwTAZCRO1oGJivQEyWk+beSjZCnZowHePKaNs=)
                          2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
                          3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7d:16:90:5b:0b:27:1a:c5:89:82:3d:86:0d:a2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
        Validity
            Not Before: Oct 19 08:01:42 2025 GMT
            Not After : Oct 20 08:01:42 2025 GMT
        Subject: CN=fc7611c4c63166bfbf266822a03c760977ce23db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:9f:e8:5f:44:14:76:e1:26:4b:31:dd:a6:
                    2e:55:d3:88:64:52:62:a3:55:e7:f7:0e:e0:62:84:
                    dd:00:60:55:7a:b9:be:f7:44:39:58:01:29:30:84:
                    2d:98:68:8a:6e:c1:0f:cf:4f:42:9a:e9:a4:7c:9c:
                    24:c7:f0:fb:e9:82:17:fa:96:25:6c:e0:0e:6f:81:
                    a7:a2:87:14:20:b9:dc:8b:25:67:e6:52:7e:a2:53:
                    61:99:13:0e:4f:1f:ed:1c:3c:c0:b3:e7:f2:3f:fb:
                    37:be:2f:81:e4:d1:6f:63:82:48:38:aa:34:55:96:
                    88:07:0d:21:39:9e:15:64:02:78:b6:a2:68:f5:a5:
                    fd:2d:48:ec:ec:84:a8:f8:16:8c:01:30:64:b6:6d:
                    ec:13:0d:d5:8f:11:09:fe:59:f1:c1:72:78:bd:5a:
                    19:cf:a8:2f:ae:ed:7a:32:7d:df:db:a7:e3:37:da:
                    91:fa:08:7e:1f:0e:b6:7f:ab:ca:b5:2a:2d:47:37:
                    e7:75:68:27:02:44:0c:9b:e0:7c:ec:4a:31:a4:d3:
                    ae:9c:c8:99:16:d7:1d:b1:f2:74:ba:5e:35:f9:35:
                    a4:44:82:73:b8:ad:de:32:1e:f2:60:f0:d0:68:03:
                    6c:d7:ef:77:86:ff:79:c4:8e:3c:7a:7e:38:dc:7f:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:76:11:C4:C6:31:66:BF:BF:26:68:22:A0:3C:76:09:77:CE:23:DB
            X509v3 Authority Key Identifier:
                keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:20:f2:d7:ca:1b:a1:cb:f4:26:ce:d0:b0:cf:4b:99:b3:
         1c:3e:f8:82:83:a3:5a:8a:95:f1:14:02:9b:af:2f:a6:1f:36:
         1f:b0:41:d6:f2:a0:71:52:02:9a:a5:23:84:3c:75:57:8f:30:
         6c:28:f6:ed:af:b9:6b:be:91:0f:b9:2a:f4:b2:75:46:8d:4c:
         d6:bf:b3:2b:37:6d:bf:2e:a5:9a:73:47:e5:56:7f:3d:f9:cc:
         ac:d6:f8:34:16:b7:61:0a:ea:50:40:f7:5c:b9:04:1e:8e:de:
         2d:23:08:ec:ba:b2:ee:e9:85:19:db:56:e9:60:3b:b5:5c:73:
         1a:69:3a:2d:9b:b6:94:38:82:1f:0e:e4:64:88:1c:cd:48:60:
         e8:72:35:7f:4d:fa:a1:8b:2b:df:fb:05:01:d1:6e:0d:74:e1:
         c1:68:da:8f:48:18:79:7d:32:b1:9d:50:29:c5:cb:b1:32:ff:
         bd:ce:6d:6e:78:b0:6a:d6:db:6f:32:b4:32:a4:f7:c6:dd:3c:
         f1:8f:11:4a:00:de:c2:ee:fc:df:8d:79:07:f2:44:3e:65:05:
         6f:80:65:97:20:59:1b:7b:40:4f:06:26:4b:62:ac:ab:fe:f5:
         57:2b:74:3f:7c:44:f2:08:23:e1:68:7c:62:56:a9:73:32:fc:
         81:b0:ea:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fRaQWwsnGsWJgj2GDaIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzc1MjIzMjFjMjNkMTY5ZWQzMzJmZjQ5ODc5Y2NjMjQ1
MTcyZGIwHhcNMjUxMDE5MDgwMTQyWhcNMjUxMDIwMDgwMTQyWjAzMTEwLwYDVQQD
EyhmYzc2MTFjNGM2MzE2NmJmYmYyNjY4MjJhMDNjNzYwOTc3Y2UyM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqif6F9EFHbhJksx3aYuVdOIZFJi
o1Xn9w7gYoTdAGBVerm+90Q5WAEpMIQtmGiKbsEPz09CmumkfJwkx/D76YIX+pYl
bOAOb4GnoocUILnciyVn5lJ+olNhmRMOTx/tHDzAs+fyP/s3vi+B5NFvY4JIOKo0
VZaIBw0hOZ4VZAJ4tqJo9aX9LUjs7ISo+BaMATBktm3sEw3VjxEJ/lnxwXJ4vVoZ
z6gvru16Mn3f26fjN9qR+gh+Hw62f6vKtSotRzfndWgnAkQMm+B87EoxpNOunMiZ
FtcdsfJ0ul41+TWkRIJzuK3eMh7yYPDQaANs1+93hv95xI48en443H8ymwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPx2EcTGMWa/vyZoIqA8dgl3ziPbMB8GA1UdIwQY
MBaAFB3HUiMhwj0WntMy/0mHnMwkUXLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYt
NzA1NTM5M2Y3NWZlLzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYtNzA1NTM5M2Y3NWZl
LzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGx0g8tfK
G6HL9CbO0LDPS5mzHD74goOjWoqV8RQCm68vph82H7BB1vKgcVICmqUjhDx1V48w
bCj27a+5a76RD7kq9LJ1Ro1M1r+zKzdtvy6lmnNH5VZ/PfnMrNb4NBa3YQrqUED3
XLkEHo7eLSMI7Lqy7umFGdtW6WA7tVxzGmk6LZu2lDiCHw7kZIgczUhg6HI1f036
oYsr3/sFAdFuDXThwWjaj0gYeX0ysZ1QKcXLsTL/vc5tbniwatbbbzK0MqT3xt08
8Y8RSgDewu783415B/JEPmUFb4BllyBZG3tATwYmS2Ksq/71Vyt0P3xE8ggj4Wh8
YlapczL8gbDq5A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:02 2025 by rpki-client