Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File:                     HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier:          qVQ50ZVl2k19AEZg7fTVQH/Qrck0P73nqsDTqoq/zgs=
Subject key identifier:   0A:3C:D0:CB:6D:69:A9:8C:38:E0:A1:BB:4B:4F:71:63:B2:53:0F:6C
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer:       /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial:       0199FCC66632FCACD56CF1FD094D13DEFBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 14:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:24 +0000
Files and hashes:         1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
                          2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: lHIEdcw8Zba4LCixVy9QNHI4yFobDDxRHU29J1xqycs=)
                          3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:66:32:fc:ac:d5:6c:f1:fd:09:4d:13:de:fb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
        Validity
            Not Before: Oct 19 14:01:24 2025 GMT
            Not After : Oct 20 14:01:24 2025 GMT
        Subject: CN=0a3cd0cb6d69a98c38e0a1bb4b4f7163b2530f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:83:89:ae:a0:26:c4:86:43:60:fd:67:31:
                    3e:57:2d:93:8f:58:75:95:ea:6f:31:c9:9c:d8:a1:
                    14:02:4c:33:51:02:f8:e6:bc:0a:ae:96:f4:00:19:
                    a8:f0:ed:9d:4e:f8:6b:7a:57:60:e9:c4:7b:f6:b2:
                    ea:ee:c0:d5:fd:24:3f:0a:60:71:ba:76:23:fb:38:
                    c6:56:eb:30:e3:29:7a:cb:ad:5d:67:d4:a8:7e:1d:
                    ad:02:ea:00:31:28:95:cd:6c:c3:31:fc:a3:2e:7d:
                    e1:dc:ac:cf:b5:3c:8f:71:6f:28:b9:6d:4b:e1:93:
                    bd:04:d9:fc:35:5a:16:af:f4:51:84:c3:71:49:4d:
                    9d:a0:6b:d8:1e:e0:29:7c:47:44:23:99:7c:75:f7:
                    45:4f:e6:da:e1:49:33:7e:82:06:e8:70:41:38:ac:
                    9a:37:31:ca:ea:66:7a:7c:b4:49:b4:95:ea:84:0a:
                    e1:f8:e3:68:95:92:21:50:52:cb:78:ab:4d:09:44:
                    db:be:35:6f:a2:08:f5:7e:6e:ea:cd:0f:e6:95:d3:
                    44:51:24:e8:7a:3e:cf:96:7a:35:a0:ff:db:74:98:
                    14:17:f4:09:5e:4b:49:57:2a:82:26:ff:6f:14:83:
                    5e:2b:56:16:07:2e:31:94:c4:39:c1:c3:93:56:5e:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3C:D0:CB:6D:69:A9:8C:38:E0:A1:BB:4B:4F:71:63:B2:53:0F:6C
            X509v3 Authority Key Identifier:
                keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:64:a9:70:47:85:04:7f:94:20:2a:79:c1:79:66:c5:66:c4:
         7b:c1:dc:7c:48:11:31:fd:9b:4d:52:6a:b2:e1:13:c8:41:6f:
         89:f7:08:02:81:f7:4e:3c:33:cd:f4:c0:19:cb:1e:d6:ee:70:
         eb:3f:2c:a3:e9:14:28:ee:8c:70:98:1f:b8:ad:13:ed:a1:6a:
         e2:66:de:f6:78:3a:7d:2b:06:50:86:fe:9c:73:92:3b:d1:3b:
         4f:59:36:b5:64:7c:8f:3f:ba:7a:9c:f9:f0:a3:57:77:e6:81:
         b2:10:b7:62:c0:82:b2:e6:54:7f:34:c6:dc:9a:6c:d9:85:37:
         5a:70:28:4d:3a:da:9c:1d:7f:48:0a:f9:55:dc:f5:b9:6c:4c:
         aa:7b:23:87:c8:95:19:9e:de:0b:3e:33:e2:15:5f:5f:5b:ad:
         dd:6b:db:ad:6b:72:09:a4:1f:eb:20:85:7e:d5:8d:b0:46:2c:
         e4:bf:2a:ed:85:f1:1d:47:e0:88:21:b4:42:81:1d:d8:6d:4c:
         d6:8b:55:0e:d7:d2:38:ce:a6:bc:18:f2:f0:f0:80:ea:80:95:
         a5:06:9a:fb:11:e0:2c:48:e5:ca:0d:16:1b:34:76:7b:d7:32:
         e3:bf:4a:f2:2e:26:98:42:ba:17:5f:50:17:55:f5:b2:ef:3c:
         a4:b9:27:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xmYy/KzVbPH9CU0T3vukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYzQ1MWZiZGZhYTEyZWZjMzUyYTU5YjAwN2IwYTg4MjNi
OGU2NWQwHhcNMjUxMDE5MTQwMTI0WhcNMjUxMDIwMTQwMTI0WjAzMTEwLwYDVQQD
EygwYTNjZDBjYjZkNjlhOThjMzhlMGExYmI0YjRmNzE2M2IyNTMwZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jSDia6gJsSGQ2D9ZzE+Vy2Tj1h1
lepvMcmc2KEUAkwzUQL45rwKrpb0ABmo8O2dTvhreldg6cR79rLq7sDV/SQ/CmBx
unYj+zjGVusw4yl6y61dZ9Sofh2tAuoAMSiVzWzDMfyjLn3h3KzPtTyPcW8ouW1L
4ZO9BNn8NVoWr/RRhMNxSU2doGvYHuApfEdEI5l8dfdFT+ba4UkzfoIG6HBBOKya
NzHK6mZ6fLRJtJXqhArh+ONolZIhUFLLeKtNCUTbvjVvogj1fm7qzQ/mldNEUSTo
ej7Plno1oP/bdJgUF/QJXktJVyqCJv9vFINeK1YWBy4xlMQ5wcOTVl7q1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAo80MttaamMOOChu0tPcWOyUw9sMB8GA1UdIwQY
MBaAFBzEUfvfqhLvw1KlmwB7CogjuOZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZDljYTMtYWE3My00OTk4LWFlNjMt
ODMyZGI5ZWJlYmFmLzEvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZDljYTMtYWE3My00OTk4LWFlNjMtODMyZGI5ZWJlYmFm
LzEvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGSpcEeF
BH+UICp5wXlmxWbEe8HcfEgRMf2bTVJqsuETyEFvifcIAoH3TjwzzfTAGcse1u5w
6z8so+kUKO6McJgfuK0T7aFq4mbe9ng6fSsGUIb+nHOSO9E7T1k2tWR8jz+6epz5
8KNXd+aBshC3YsCCsuZUfzTG3Jps2YU3WnAoTTranB1/SAr5Vdz1uWxMqnsjh8iV
GZ7eCz4z4hVfX1ut3WvbrWtyCaQf6yCFftWNsEYs5L8q7YXxHUfgiCG0QoEd2G1M
1otVDtfSOM6mvBjy8PCA6oCVpQaa+xHgLEjlyg0WGzR2e9cy479K8i4mmEK6F19Q
F1X1su88pLknXw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:49 2025 by rpki-client