Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File:                     hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier:          RMmjHBTZVKmUbVQS6BshH79nLNNRgBwPc17i00hM79o=
Subject key identifier:   2F:76:4C:CF:43:6F:9E:46:FB:17:A9:EF:CE:03:DE:E7:16:8B:9D:67
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer:       /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial:       019A011132965FE076D7B7011E635D279BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number:          1794
Signing time:             Mon 20 Oct 2025 10:01:35 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:35 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:35 +0000
Files and hashes:         1: 3HemvcGpa10fkEZgb6Z-o4k7Y3I.roa (hash: a1XCZrNTfqU9TQWTJM+VI0BWa7g1babTnrZlikC2mRA=)
                          2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=)
                          3: FTrYYx4CBKkDflQVg1_J0y11QdQ.roa (hash: TOnemNVhdJLNIGqBvgUS4W9Hdvqcz6Ct0ExYEDZZ3M4=)
                          4: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=)
                          5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=)
                          6: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=)
                          7: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: OBlruzx5BAPHYpOLc8912N5df8tdy4au0vqp7ltK+Mc=)
                          8: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=)
                          9: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=)
                          10: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:11:32:96:5f:e0:76:d7:b7:01:1e:63:5d:27:9b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
        Validity
            Not Before: Oct 20 10:01:35 2025 GMT
            Not After : Oct 21 10:01:35 2025 GMT
        Subject: CN=2f764ccf436f9e46fb17a9efce03dee7168b9d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fd:1d:f7:0d:6c:98:e8:36:e9:4d:8d:22:fc:
                    6d:78:9d:fd:09:8a:2a:31:8c:18:c4:92:77:2c:dd:
                    7b:0f:a3:66:9a:48:af:ee:08:a6:3a:dc:07:f6:14:
                    09:55:8a:72:a4:b3:01:d6:eb:d2:aa:a7:a3:db:b2:
                    2f:3a:23:0a:8e:8d:d0:0e:b5:c1:aa:c0:ef:d4:42:
                    a4:e3:28:4b:c8:06:c9:df:c8:58:ca:05:48:b3:6a:
                    cc:7d:b4:08:ae:01:05:50:f0:70:19:dc:14:87:7d:
                    e3:a5:3c:39:1f:29:ec:96:0e:86:0e:75:b5:14:ba:
                    50:4c:8f:c9:4c:26:81:7c:e7:11:14:fc:3b:53:e1:
                    36:11:a4:2c:e5:20:3c:cc:c5:aa:5c:ed:a9:98:6a:
                    d5:24:cf:85:fc:47:0f:59:43:96:3b:98:50:bb:67:
                    30:c4:a3:18:28:b2:70:7f:6a:e6:ea:c8:fd:99:64:
                    b4:6b:79:8f:aa:03:98:aa:97:a2:6a:65:a0:78:18:
                    fa:31:ae:c0:d8:2d:6f:27:08:c3:c1:9a:e5:8f:94:
                    a8:87:16:4b:c5:10:5d:d4:95:3d:20:0d:af:f7:6f:
                    66:49:52:e6:a3:d1:fd:9d:00:e5:9a:0b:17:0b:ef:
                    b1:91:2c:53:42:78:d4:50:55:fd:43:4a:17:a2:40:
                    88:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:76:4C:CF:43:6F:9E:46:FB:17:A9:EF:CE:03:DE:E7:16:8B:9D:67
            X509v3 Authority Key Identifier:
                keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:bc:ee:22:f2:83:65:07:4f:21:93:bf:72:77:cc:0c:81:
         a7:c4:ba:70:48:19:45:f9:c8:0a:9a:16:d1:99:1e:1d:48:72:
         96:0f:c3:01:67:d7:b5:23:50:5d:3d:2c:00:23:7f:99:30:02:
         64:d0:e1:3d:1e:0b:ce:34:45:ed:ce:97:28:29:40:a7:48:1e:
         a3:ac:09:64:08:08:7d:b9:66:f6:66:58:9e:c0:2f:8b:84:c2:
         e3:11:8b:db:96:e1:af:fd:86:b8:19:0b:9f:33:af:28:04:c6:
         aa:6e:6d:9f:5b:52:ae:cf:60:92:dc:27:5a:99:e1:0f:70:10:
         c6:3b:b8:5a:ea:15:78:ae:ea:00:3b:d0:07:64:4a:5e:d3:6f:
         b3:5f:4d:c9:b1:33:16:56:2f:13:e4:f0:70:59:fc:2b:bd:dd:
         b8:4a:04:61:5c:e1:05:02:33:71:27:ec:8b:d7:8d:04:2f:af:
         41:d5:dd:42:4b:d3:90:81:73:ca:3d:0c:ce:1c:a6:4d:78:b7:
         bc:a4:f5:f4:c6:c7:4a:7c:ee:da:8a:ee:d8:34:ba:0f:71:50:
         03:20:31:7d:55:aa:24:5b:4e:21:f0:df:7e:4f:8e:21:e5:ec:
         6d:2f:dd:bd:14:48:38:d2:08:55:63:4b:f1:03:35:d6:cb:c5:
         29:3c:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:36 2025 by rpki-client