Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File:                     hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier:          dOIG8SCDKuWoouksbAQeoG/hqD1mONWkBfxca+Bl//Y=
Subject key identifier:   71:2B:3B:D9:D4:C6:EF:D5:33:4F:EC:65:E2:83:33:BF:05:BB:C0:83
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer:       /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial:       0199FCC671164659D2C20E62C3C76995B35A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 14:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:27 +0000
Files and hashes:         1: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: EIymGuNolqgrmJ1wEPpBW8kkDzPjl5lC9ek2lRlFbbQ=)
                          2: lge_NhHNBFIDg0XdYly6isNJOS4.roa (hash: pDkiQ0N7P9YYqBWB2tNQa40hEDOK8eDvKfQ/EMtchvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:71:16:46:59:d2:c2:0e:62:c3:c7:69:95:b3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
        Validity
            Not Before: Oct 19 14:01:27 2025 GMT
            Not After : Oct 20 14:01:27 2025 GMT
        Subject: CN=712b3bd9d4c6efd5334fec65e28333bf05bbc083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:7b:9d:ef:29:98:60:a1:5a:d7:a0:8a:16:
                    ca:9e:9c:b7:33:78:cd:4c:3b:9a:6d:c9:32:8d:5a:
                    d4:d4:33:35:b4:4f:54:1b:0e:c7:c8:a2:5b:19:a9:
                    d6:e5:ac:ae:94:a1:d7:50:a5:8e:4a:1c:8d:34:b1:
                    05:98:4d:37:d2:7e:30:6b:04:44:09:68:a0:ff:5f:
                    14:48:53:ae:95:c2:c7:76:86:0a:a4:7a:33:66:a8:
                    d7:3d:bd:20:aa:1b:24:43:49:91:41:71:98:6b:c6:
                    bc:5b:32:83:98:67:eb:73:55:85:60:bf:45:7b:6c:
                    0a:c9:ab:c7:cd:59:e7:ed:e4:14:0b:b4:53:70:87:
                    d5:db:ff:17:b2:a9:ae:17:c2:33:77:54:02:3a:ab:
                    9b:2a:22:29:ea:e5:27:ab:31:1e:af:27:2f:06:bc:
                    b1:23:ff:65:f4:a3:d9:f9:45:25:f6:ca:db:b2:dd:
                    be:4e:df:75:49:55:a5:c1:59:8f:74:4d:d2:ae:b8:
                    5a:22:a1:6d:ba:ea:26:47:24:e7:e6:5e:bb:20:02:
                    88:5c:b0:44:fc:ee:c2:d0:c1:40:33:79:18:06:21:
                    92:6b:30:9d:42:ba:86:2a:fe:20:84:91:5c:24:1d:
                    c9:56:8a:02:98:90:43:c1:e0:19:f6:18:8a:4f:ed:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2B:3B:D9:D4:C6:EF:D5:33:4F:EC:65:E2:83:33:BF:05:BB:C0:83
            X509v3 Authority Key Identifier:
                keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3b:a5:ef:54:32:26:f2:b1:9a:9c:d4:9b:f9:e5:fc:63:03:
         aa:42:4f:0d:d8:8a:4a:8d:19:34:53:16:f7:32:12:3a:eb:c6:
         f1:75:15:af:a4:cf:4d:eb:cb:a0:6d:44:15:27:ba:23:3e:c7:
         0a:b6:14:b5:b6:82:c9:b5:49:88:ed:d2:87:60:73:d0:84:a8:
         b6:56:f4:07:90:22:95:28:c2:f5:c2:33:67:5e:22:a4:54:fb:
         02:7c:a0:5a:b8:92:88:91:a6:c8:91:8c:35:4b:32:62:c4:b0:
         da:63:ae:50:0a:19:c4:9c:c6:d6:c9:b4:30:9a:4b:50:5b:ac:
         e8:44:aa:22:44:15:04:0e:94:cf:af:34:7e:b9:59:6d:d2:dd:
         ea:69:24:82:db:4e:44:0a:68:92:27:64:78:1d:6c:84:8c:24:
         1c:88:4f:01:55:b2:53:76:c4:0d:b5:56:80:cd:d0:77:c9:ad:
         44:93:5d:8b:bf:e3:c3:b6:95:12:11:ea:19:b3:56:8f:ac:97:
         44:65:36:6e:b0:19:1a:f7:2c:fb:3a:4c:50:07:c4:76:43:a5:
         0a:c9:ca:a2:be:58:06:09:8a:b6:f6:8b:74:6e:07:f0:c2:e4:
         38:8f:a1:5d:56:5c:c3:e6:59:08:56:14:f9:5b:4b:a3:f8:82:
         68:18:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:16 2025 by rpki-client