Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File:                     HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier:          Q1tCkqaTdOmiuRPWrdsXKpxbCvp9PG1hsaCDJmAZQ/c=
Subject key identifier:   FB:02:B1:94:EE:13:9C:1C:8B:5C:BE:F3:95:81:32:66:DB:21:A3:DC
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer:       /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial:       0199FC8F31DFBC92657AE6E6566DFFCC838A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number:          03B6
Signing time:             Sun 19 Oct 2025 13:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:06 +0000
Files and hashes:         1: 8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa (hash: rhq0p1ekXajroUDi/6gbWVszGGw1Hl0Cw7VvrAiAjNE=)
                          2: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: vGN+LXsCoqnaFsHQDCCgl1hny0gafKf+J5nE6rqkcMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:31:df:bc:92:65:7a:e6:e6:56:6d:ff:cc:83:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
        Validity
            Not Before: Oct 19 13:01:06 2025 GMT
            Not After : Oct 20 13:01:06 2025 GMT
        Subject: CN=fb02b194ee139c1c8b5cbef395813266db21a3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:75:b1:ff:33:f3:eb:ad:ec:4e:b4:9d:05:
                    c5:76:0f:86:52:f5:92:ee:a5:76:c1:4f:4a:65:80:
                    15:36:7c:5a:ae:33:83:6a:89:f7:c4:f0:cc:96:7b:
                    17:ba:67:f9:b3:80:dc:7d:f3:f4:61:69:c4:56:a5:
                    e7:81:18:73:50:a3:51:d2:46:91:0e:1c:e6:6d:e5:
                    cd:1e:2f:b8:26:cb:1d:27:f5:d0:f7:64:4b:a6:17:
                    20:ba:08:42:ac:72:c4:08:40:6d:6e:fc:75:a6:dd:
                    4c:ea:46:5d:c2:ad:88:32:e8:55:f0:8a:ea:42:f3:
                    5f:12:1a:f0:97:cf:dc:b5:a5:ee:ed:65:26:1c:97:
                    6e:04:13:4b:f6:e0:d1:a7:49:e6:b3:08:8d:29:3e:
                    3b:64:9a:e6:9f:3c:6e:ee:a4:8c:aa:73:2c:f7:84:
                    a3:29:7f:60:e1:33:62:0b:55:f0:da:da:0f:ad:09:
                    33:fd:ca:51:35:13:4b:87:29:62:56:93:d9:ee:f1:
                    f6:28:6e:56:50:3c:d0:3c:85:ed:e3:a5:65:b6:d7:
                    5b:1c:56:24:2b:16:66:0a:95:31:f6:cd:39:9a:e6:
                    ed:b8:e7:48:d9:90:3c:8f:e2:e9:01:b5:bc:1b:7c:
                    ff:0b:a2:6b:3d:9f:25:38:44:13:3e:1a:fb:88:71:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:02:B1:94:EE:13:9C:1C:8B:5C:BE:F3:95:81:32:66:DB:21:A3:DC
            X509v3 Authority Key Identifier:
                keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c1:7f:93:3d:e5:7d:8e:d7:af:85:50:ef:8d:cb:53:50:13:
         17:75:85:67:92:a0:2b:52:be:e6:ed:92:6b:31:2e:4a:e4:5c:
         cc:4d:f7:83:7c:cc:ac:21:27:c4:8b:f1:e5:b3:70:3e:95:c3:
         6a:26:a5:45:d3:b0:a2:02:02:aa:e5:43:95:94:a8:85:60:4e:
         6e:6b:bc:4a:00:a3:52:90:6d:14:75:22:39:84:5a:b8:d1:45:
         fe:7f:55:b9:b3:43:8a:3e:15:3e:e7:b0:1b:17:46:b1:46:0a:
         1e:52:81:f8:67:fd:0e:f0:e7:40:f4:d8:0c:d5:d4:e3:65:39:
         3d:b3:47:3d:08:bc:de:24:8b:36:52:2c:b8:db:95:cf:96:14:
         fd:6a:f0:17:0a:50:75:99:db:3a:9f:91:2c:c3:45:f7:a1:62:
         ed:57:d9:e5:11:3a:b1:be:fb:a5:45:46:2a:dc:c0:9f:c2:01:
         89:6c:cd:7f:e6:51:a0:2b:6b:ec:c7:25:c8:71:41:c6:20:38:
         90:88:6a:37:10:7c:67:c7:2f:c5:5c:46:14:0c:c3:7a:3b:08:
         99:52:d1:af:6e:d5:3f:91:9c:3e:69:9f:0c:b9:51:e0:b9:04:
         d6:6c:95:b7:b8:4f:1e:3b:94:ec:52:ee:fc:90:f9:b3:10:ed:
         59:48:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:49 2025 by rpki-client