Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File:                     hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier:          GRDc6aTYLvXxGyCGNfSL/tRLnWXfyyJsplHKUvtWoH8=
Subject key identifier:   EC:C4:21:52:44:45:AE:A5:BD:E0:59:8D:C6:49:33:8F:49:DB:BE:AE
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer:       /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial:       019A003563A565EDB36E8CD6D90651B14688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number:          03C3
Signing time:             Mon 20 Oct 2025 06:01:30 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:30 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:30 +0000
Files and hashes:         1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: xSMD6iDJqL23q78KvlmmGPdJboVWp6dvNCJHOSwVIrs=)
                          2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=)
                          3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:63:a5:65:ed:b3:6e:8c:d6:d9:06:51:b1:46:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
        Validity
            Not Before: Oct 20 06:01:30 2025 GMT
            Not After : Oct 21 06:01:30 2025 GMT
        Subject: CN=ecc421524445aea5bde0598dc649338f49dbbeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:82:70:16:e2:a8:55:ce:a8:61:f0:03:6a:
                    61:7c:44:57:d7:1a:2f:7e:ce:27:bd:9c:75:99:ec:
                    c4:0e:85:26:d9:63:25:d0:ee:f4:b7:99:6d:bb:8b:
                    b3:f7:b3:c6:df:db:be:81:7d:42:c3:14:16:ff:bc:
                    c8:67:2c:82:28:72:45:2d:85:f5:42:c1:a6:aa:3d:
                    da:9a:b4:81:af:dd:11:db:44:3c:08:15:14:69:9a:
                    a3:55:0a:e5:88:f1:3c:cd:27:5e:a2:1a:7a:fa:20:
                    d0:54:d0:3d:e6:56:05:5f:40:26:08:87:97:bb:e6:
                    0d:86:71:49:c5:7c:73:d8:5d:ef:8d:01:01:18:20:
                    08:c6:ff:18:b7:9d:26:f5:f7:d5:f9:f1:82:94:59:
                    43:e9:69:d8:75:31:e0:1d:93:34:b6:85:96:41:4c:
                    8c:2c:f4:ac:f7:18:39:0a:f6:31:e5:9e:47:af:b7:
                    e1:45:b2:52:44:fc:8d:ad:63:e7:a8:97:b0:59:c9:
                    fe:6d:c0:64:56:86:87:77:39:ce:cc:11:c7:ec:15:
                    fb:e7:1e:9c:ef:ab:c7:6d:3f:67:a8:25:91:11:3c:
                    1e:ba:22:6e:ff:9e:0a:af:9f:b6:c9:61:d0:12:d4:
                    47:ec:07:1a:20:c5:81:9e:f1:7d:f3:41:ae:08:56:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C4:21:52:44:45:AE:A5:BD:E0:59:8D:C6:49:33:8F:49:DB:BE:AE
            X509v3 Authority Key Identifier:
                keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:26:d5:eb:37:d4:9b:34:b7:9f:05:24:73:78:b8:84:92:d9:
         bd:3c:cf:4f:42:ef:04:5c:9e:ee:41:b3:1f:a8:56:68:df:18:
         c1:b7:2c:54:b4:e5:fa:4b:6e:38:5c:1c:70:cc:70:96:c3:5d:
         0b:03:e5:eb:69:63:80:92:68:e5:3b:c4:93:7d:d8:ba:9b:ef:
         19:f0:4d:16:0a:7c:4e:be:c3:7e:24:94:43:b3:01:8b:d1:48:
         6c:49:a5:00:be:0a:dc:b4:69:cd:d7:20:9b:80:a2:8a:64:d5:
         6e:0a:e2:02:d0:66:ab:77:2e:fe:d7:e5:c9:86:ff:d4:0e:f1:
         4b:5e:48:9a:d6:d7:d8:a0:eb:4c:ce:e3:9d:f1:ea:51:32:b6:
         c1:ba:8f:ea:47:a0:8b:8c:aa:3a:f3:25:d3:a1:93:48:95:7c:
         ab:6e:d7:8c:02:96:40:37:69:f9:9c:ee:09:20:0c:ca:db:b6:
         22:3f:26:76:9b:d8:67:3d:05:4c:6e:e8:46:15:18:2d:57:fc:
         34:69:5e:e1:55:4f:5e:8c:c8:7f:22:c9:42:4d:a7:3f:f9:d7:
         7f:b0:42:a4:ae:e5:d8:db:f3:6e:37:2d:65:f2:0c:3a:8e:78:
         5c:60:f7:36:4f:4b:de:ea:0f:af:26:6d:e0:4b:f0:3d:e0:bf:
         49:fa:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:38 2025 by rpki-client